From: Wouter Wijngaards <wouter@nlnetlabs.nl>
Date: Tue, 28 Sep 2010 12:29:47 +0000 (+0000)
Subject: unbound-anchor port to Solaris
X-Git-Tag: release-1.4.7rc1~67
X-Git-Url: http://git.ipfire.org/cgi-bin/gitweb.cgi?a=commitdiff_plain;h=e9d7301b0a4e713209365ee8ac10248dbc592495;p=thirdparty%2Funbound.git

unbound-anchor port to Solaris

git-svn-id: file:///svn/unbound/trunk@2258 be551aaa-1e26-0410-a405-d3ace91eadb9
---

diff --git a/smallapp/unbound-anchor.c b/smallapp/unbound-anchor.c
index 3fd2c1647..a1e27b360 100644
--- a/smallapp/unbound-anchor.c
+++ b/smallapp/unbound-anchor.c
@@ -1461,8 +1461,11 @@ verify_p7sig(BIO* data, BIO* p7s, STACK_OF(X509)* trust, time_t now)
 	/* convert trust to trusted certificate store */
 	/* set current time */
 	X509_VERIFY_PARAM_set_time(param, now);
-	/* do the selfcheck on the root certificate */
+	/* do the selfcheck on the root certificate; it checks that the
+	 * input is valid */
+#ifdef X509_V_FLAG_CHECK_SS_SIGNATURE
 	X509_VERIFY_PARAM_set_flags(param, X509_V_FLAG_CHECK_SS_SIGNATURE);
+#endif
 	X509_STORE_set1_param(store, param);
 	for(i=0; i<sk_X509_num(trust); i++) {
 		if(!X509_STORE_add_cert(store, sk_X509_value(trust, i))) {