mirror of
https://github.com/Mbed-TLS/mbedtls.git
synced 2025-03-21 01:20:52 +00:00
Our current behaviour is a bit inconsistent here: - when the bad signature is made by a trusted CA, we stop here and don't include the trusted CA in the chain (don't call vrfy on it) - otherwise, we just add NOT_TRUSTED to the flags but keep building the chain and call vrfy on the upper certs