tree 957013e2326285613eb69088e92c31c01d3eea00
parent 2705830f2fa0f7831e45fd4550dbe645136ab41c
author François Rigault <rigault.francois@gmail.com> 1591387258 +0200
committer Daniel Stenberg <daniel@haxx.se> 1591459284 +0200
gpgsig -----BEGIN PGP SIGNATURE-----
 
 iQFDBAABCgAtFiEEJ+3q8i86vOtQ25oSXMkI/bceEsIFAl7bvjAPHGRhbmllbEBo
 YXh4LnNlAAoJEFzJCP23HhLCoScH/RhGwBVLH10BR4Ycx0zuIM3rK6t3GvixSEOk
 4OunQ8P8bBYnxUsiDQcNb58ZK5L2nB+YAKpViPeRr+zZYv0YSq+9uL7gduQD1RqE
 O4kO930tpZSaggfjCl2lLHdRznbZaXgtmaUufFveNLY2O18nJHNFuykm6EOpdXa3
 icmd+ssQTRobwOejOUZqpnOyqdtpqPqmI3DbQeW/GAhSmYat8tB6nZPmwxXHRH/K
 vzb+0Zrwqxsy04+Yoc2+XJEBB6L4E1WGskWjNntm/cXTBMlkSL+XgcKaw20xpZL6
 MYIerDu83lESKixDWqzIajNi5cmI52G2NLyfso/0Sw0x3FDeSNg=
 =C/YN
 -----END PGP SIGNATURE-----

openssl: set FLAG_TRUSTED_FIRST unconditionally

On some systems, openssl 1.0.x is still the default, but it has been
patched to contain all the recent security fixes. As a result of this
patching, it is possible for macro X509_V_FLAG_NO_ALT_CHAINS to be
defined, while the previous behavior of openssl to not look at trusted
chains first, remains.

Fix it: ensure X509_V_FLAG_TRUSTED_FIRST is always set, do not try to
probe for the behavior of openssl based on the existence ofmacros.

Closes #5530