abc/GmSSL
1
0
Fork 0
mirror of https://github.com/guanzhi/GmSSL.git synced 2026-08-09 07:23:56 +08:00
Code Issues Packages Projects Releases Wiki Activity

Update X.509 validation and fix TLS 1.3 chain verify

Browse Source
This commit is contained in:
Zhi Guan
2023-01-11 15:29:22 +08:00
parent 167f2c0c33
commit 2f19fc3067
5 changed files with 101 additions and 67 deletions
Download Patch File Download Diff File Expand all files Collapse all files

2
src/tls12.c
View File

@@ -347,7 +347,7 @@ int tls12_do_connect(TLS_CONNECT *conn)
if (x509_certs_verify(conn->server_certs, conn->server_certs_len, X509_cert_chain_server,
conn->ca_certs, conn->ca_certs_len, depth, &verify_result) != 1) {
error_print();
tls_send_alert(conn, alert);
tls_send_alert(conn, TLS_alert_bad_certificate);
goto end;
}