Update OpenSSL to 1.0.2c.

[ffftp/ffftp.git] / contrib / openssl / include / openssl / x509_vfy.h

diff --git a/contrib/openssl/include/openssl/x509_vfy.h b/contrib/openssl/include/openssl/x509_vfy.h
index a2eb1e9..d503b46 100644 (file)
--- a/contrib/openssl/include/openssl/x509_vfy.h
+++ b/contrib/openssl/include/openssl/x509_vfy.h
@@ -432,6 +432,12 @@ void X509_STORE_CTX_set_depth(X509_STORE_CTX *ctx, int depth);
 \r
 /* Allow partial chains if at least one certificate is in trusted store */\r
 # define X509_V_FLAG_PARTIAL_CHAIN               0x80000\r
+/*\r
+ * If the initial chain is not trusted, do not attempt to build an alternative\r
+ * chain. Alternate chain checking was introduced in 1.0.2b. Setting this flag\r
+ * will force the behaviour to match that of previous versions.\r
+ */\r
+# define X509_V_FLAG_NO_ALT_CHAINS               0x100000\r
 \r
 # define X509_VP_FLAG_DEFAULT                    0x1\r
 # define X509_VP_FLAG_OVERWRITE                  0x2\r