mirror of
https://github.com/ARMmbed/mbedtls.git
synced 2025-05-22 08:23:44 +08:00

Our current behaviour is a bit inconsistent here: - when the bad signature is made by a trusted CA, we stop here and don't include the trusted CA in the chain (don't call vrfy on it) - otherwise, we just add NOT_TRUSTED to the flags but keep building the chain and call vrfy on the upper certs