We read every piece of feedback, and take your input very seriously.
To see all available qualifiers, see our documentation.
1 parent 2b503da commit c873f3fCopy full SHA for c873f3f
1 file changed
src/x509_str.c
@@ -765,6 +765,10 @@ int wolfSSL_X509_verify_cert(WOLFSSL_X509_STORE_CTX* ctx)
765
X509StoreCertIsTrusted(ctx->store, ctx->current_cert,
766
origTrustedSk)) {
767
wolfSSL_sk_X509_push(ctx->chain, ctx->current_cert);
768
+ /* Clear error set by the failed X509StoreVerifyCert
769
+ * attempt; the partial-chain fallback accepted the
770
+ * chain at a caller-trusted certificate. */
771
+ ctx->error = 0;
772
ret = WOLFSSL_SUCCESS;
773
} else {
774
X509VerifyCertSetupRetry(ctx, certs, failedCerts,
0 commit comments