summaryrefslogtreecommitdiff
path: root/Cryptlib/OpenSSL/crypto/x509/x509_vfy.c
diff options
context:
space:
mode:
authorMathieu Trudel-Lapierre <mathieu.trudel-lapierre@canonical.com>2015-05-06 09:50:11 -0400
committerMathieu Trudel-Lapierre <mathieu.trudel-lapierre@canonical.com>2015-05-06 09:50:11 -0400
commit4c03444e7c971185c20fa102eb09b707aea0d4d4 (patch)
treec8402158f0090f45bb46b9b539d981633e509f9a /Cryptlib/OpenSSL/crypto/x509/x509_vfy.c
parent2283f5e85dbc78dd10810cb6ebfa39e61ab6759e (diff)
parenta14921c5944c340056312f2f5b1728d698f628b1 (diff)
downloadefi-boot-shim-4c03444e7c971185c20fa102eb09b707aea0d4d4.tar.gz
efi-boot-shim-4c03444e7c971185c20fa102eb09b707aea0d4d4.zip
New upstream release.
Diffstat (limited to 'Cryptlib/OpenSSL/crypto/x509/x509_vfy.c')
-rw-r--r--[-rwxr-xr-x]Cryptlib/OpenSSL/crypto/x509/x509_vfy.c6
1 files changed, 1 insertions, 5 deletions
diff --git a/Cryptlib/OpenSSL/crypto/x509/x509_vfy.c b/Cryptlib/OpenSSL/crypto/x509/x509_vfy.c
index af12520f..b87617ac 100755..100644
--- a/Cryptlib/OpenSSL/crypto/x509/x509_vfy.c
+++ b/Cryptlib/OpenSSL/crypto/x509/x509_vfy.c
@@ -386,11 +386,7 @@ static int get_issuer_sk(X509 **issuer, X509_STORE_CTX *ctx, X509 *x)
static int check_chain_extensions(X509_STORE_CTX *ctx)
{
-#if defined(OPENSSL_NO_CHAIN_VERIFY) || defined(OPENSSL_SYS_UEFI)
- /*
- NOTE: Bypass KU Flags Checking for UEFI version. There are incorrect KU flag setting
- in Authenticode Signing Certificates.
- */
+#ifdef OPENSSL_NO_CHAIN_VERIFY
return 1;
#else
int i, ok=0, must_be_ca, plen = 0;