mirror of
https://git.suyu.dev/suyu/mbedtls.git
synced 2026-03-24 14:08:43 +00:00
Our current behaviour is a bit inconsistent here: - when the bad signature is made by a trusted CA, we stop here and don't include the trusted CA in the chain (don't call vrfy on it) - otherwise, we just add NOT_TRUSTED to the flags but keep building the chain and call vrfy on the upper certs