Edit

IABSD.fr/src/lib

Branch :

  • Show log

    Commit

  • Author : jsing
    Date : 2021-09-30 18:23:46
    Hash : a37b3deb
    Message : Enable X509_V_FLAG_TRUSTED_FIRST by default in the legacy verifier. In order to work around the expired DST Root CA X3 certficiate, enable X509_V_FLAG_TRUSTED_FIRST in the legacy verifier. This means that the default chain provided by Let's Encrypt will stop at the ISRG Root X1 intermediate, rather than following the DST Root CA X3 intermediate. Note that the new verifier does not suffer from this issue, so only a small number of things will hit this code path. ok millert@ robert@ tb@