Frob expected verify status code.

With latest verify.c patch it just say the chain is invalid, rather
than complaining about missing signer certificate.  This is arguable
more correct.

diff --git a/tests/cve-2008-4989.c b/tests/cve-2008-4989.c
index 7477fd6d15e8a0a0a036555e3293e9fe49dcb86b..3bbe59e49370adc820222faad3e4f56e5d2aa6d2 100644 (file)
--- a/tests/cve-2008-4989.c
+++ b/tests/cve-2008-4989.c
@@ -196,7 +196,7 @@ main (int argc, char *argv[])
     error (EXIT_FAILURE, 0, "gnutls_x509_crt_list_verify[%d]: %s", i,
           gnutls_strerror (ret));
 
-  if (verify_status != (GNUTLS_CERT_INVALID | GNUTLS_CERT_SIGNER_NOT_FOUND))
+  if (verify_status != GNUTLS_CERT_INVALID)
     error (EXIT_FAILURE, 0, "verify_status: %d", verify_status);
 
   gnutls_x509_crt_deinit (ca);