forked from pool/mono-core
937d4b3d62
- Add enable-X509_V_FLAG_TRUSTED_FIRST-flag.patch in order to fix bsc#1191220. OBS-URL: https://build.opensuse.org/request/show/923646 OBS-URL: https://build.opensuse.org/package/show/Mono:Factory/mono-core?expand=0&rev=221
27 lines
1.0 KiB
Diff
27 lines
1.0 KiB
Diff
From 1a739c8dc34ec239ca0ded6a79bb7370f81944da Mon Sep 17 00:00:00 2001
|
|
From: Martin Liska <mliska@suse.cz>
|
|
Date: Fri, 1 Oct 2021 14:39:37 +0200
|
|
Subject: [PATCH] Enable X509_V_FLAG_TRUSTED_FIRST flag.
|
|
|
|
Fixes: Fix Let's Encrypt DST Root CA X3 certificate expiration.
|
|
---
|
|
external/boringssl/crypto/x509/x509_vpm.c | 2 +-
|
|
1 file changed, 1 insertion(+), 1 deletion(-)
|
|
|
|
diff --git a/external/boringssl/crypto/x509/x509_vpm.c b/external/boringssl/crypto/x509/x509_vpm.c
|
|
index 02a589888..4bbb1ceed 100644
|
|
--- a/external/boringssl/crypto/x509/x509_vpm.c
|
|
+++ b/external/boringssl/crypto/x509/x509_vpm.c
|
|
@@ -515,7 +515,7 @@ static const X509_VERIFY_PARAM default_table[] = {
|
|
(char *)"default", /* X509 default parameters */
|
|
0, /* Check time */
|
|
0, /* internal flags */
|
|
- 0, /* flags */
|
|
+ X509_V_FLAG_TRUSTED_FIRST, /* flags */
|
|
0, /* purpose */
|
|
0, /* trust */
|
|
100, /* depth */
|
|
--
|
|
2.33.0
|
|
|