[cpp-xmltooling COMMIT] /branches/REL_1/xmltooling/security/impl/PKIXPathValidator.cpp
noreply at shibboleth.net
noreply at shibboleth.net
Wed Jan 11 18:55:02 GMT 2012
Author: scantor
Date: Wed Jan 11 18:55:02 2012
New Revision: 953
URL: http://svn.shibboleth.net/view/cpp-xmltooling?rev=953&view=rev
Log:
Check for OpenSSL error code for < 0.9.8
Modified:
branches/REL_1/xmltooling/security/impl/PKIXPathValidator.cpp
Modified: branches/REL_1/xmltooling/security/impl/PKIXPathValidator.cpp
URL: http://svn.shibboleth.net/view/cpp-xmltooling/branches/REL_1/xmltooling/security/impl/PKIXPathValidator.cpp?rev=953&r1=952&r2=953&view=diff
==============================================================================
--- branches/REL_1/xmltooling/security/impl/PKIXPathValidator.cpp (original)
+++ branches/REL_1/xmltooling/security/impl/PKIXPathValidator.cpp Wed Jan 11 18:55:02 2012
@@ -406,7 +406,7 @@
if (ret == 1) {
m_log.debug("successfully validated certificate chain");
}
-#if (OPENSSL_VERSION_NUMBER < 0x10000000L)
+#if defined(X509_V_ERR_NO_EXPLICIT_POLICY) && (OPENSSL_VERSION_NUMBER < 0x10000000L)
else if (X509_STORE_CTX_get_error(&ctx) == X509_V_ERR_NO_EXPLICIT_POLICY && !pkixParams->isPolicyMappingInhibited()) {
m_log.warn("policy mapping requires OpenSSL 1.0.0 or later");
}
More information about the commits
mailing list