Skip to content

Commit 665adb3

Browse files
Merge pull request #162 from anhu/long_chain_simple
Support longer certificate chains.
2 parents b43306e + 2f50b25 commit 665adb3

File tree

1 file changed

+8
-1
lines changed

1 file changed

+8
-1
lines changed

src/sign-verify/clu_x509_verify.c

Lines changed: 8 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -170,11 +170,18 @@ int wolfCLU_x509Verify(int argc, char** argv)
170170
if (ret == WOLFCLU_SUCCESS && caCert != NULL) {
171171
if (wolfSSL_X509_LOOKUP_load_file(lookup, caCert, X509_FILETYPE_PEM)
172172
!= WOLFSSL_SUCCESS) {
173-
wolfCLU_LogError("Failed to load CA file");
173+
wolfCLU_LogError("Failed to load CA file via lookup");
174174
ret = WOLFCLU_FATAL_ERROR;
175175
}
176176
}
177177

178+
if (ret == WOLFCLU_SUCCESS && caCert != NULL) {
179+
if (wolfSSL_CertManagerLoadCA(store->cm, caCert, NULL)
180+
!= WOLFSSL_SUCCESS) {
181+
wolfCLU_LogError("Failed to load CA file into CertManager");
182+
ret = WOLFCLU_FATAL_ERROR;
183+
}
184+
}
178185

179186
#ifdef HAVE_CRL
180187
if (ret == WOLFCLU_SUCCESS) {

0 commit comments

Comments
 (0)