diff options
| author | Theo de Raadt <deraadt@cvs.openbsd.org> | 2014-07-12 17:35:24 +0000 |
|---|---|---|
| committer | Theo de Raadt <deraadt@cvs.openbsd.org> | 2014-07-12 17:35:24 +0000 |
| commit | ca24d1e83e4d834986cc3988e7eec9a033e636a8 (patch) | |
| tree | 2430ae90a9bb75dda17e8998aec6d50c6d0208fd /lib | |
| parent | c2b2330b4963e7574b62b8af2d304aa3807382cc (diff) | |
jsing and I are investigating removal of all? most? 'getenv from library'
instances. This one for OPENSSL_ALLOW_PROXY_CERTS gets turned off first,
especially since it had this special comment:
/* A hack to keep people who don't want to modify their software happy */
ok beck jsing
Diffstat (limited to 'lib')
| -rw-r--r-- | lib/libcrypto/x509/x509_vfy.c | 4 |
1 files changed, 3 insertions, 1 deletions
diff --git a/lib/libcrypto/x509/x509_vfy.c b/lib/libcrypto/x509/x509_vfy.c index d894facd473..0b0a2c56d2f 100644 --- a/lib/libcrypto/x509/x509_vfy.c +++ b/lib/libcrypto/x509/x509_vfy.c @@ -1,4 +1,4 @@ -/* $OpenBSD: x509_vfy.c,v 1.35 2014/07/12 14:58:32 miod Exp $ */ +/* $OpenBSD: x509_vfy.c,v 1.36 2014/07/12 17:35:23 deraadt Exp $ */ /* Copyright (C) 1995-1998 Eric Young (eay@cryptsoft.com) * All rights reserved. * @@ -491,10 +491,12 @@ check_chain_extensions(X509_STORE_CTX *ctx) } else { allow_proxy_certs = !!(ctx->param->flags & X509_V_FLAG_ALLOW_PROXY_CERTS); +#if 0 /* A hack to keep people who don't want to modify their software happy */ if (issetugid() == 0 && getenv("OPENSSL_ALLOW_PROXY_CERTS")) allow_proxy_certs = 1; +#endif purpose = ctx->param->purpose; } |