> On Oct 4, 2018, at 6:25 AM, Viktor Dukhovni <openssl-users@xxxxxxxxxxxx> wrote: > > but this corner-case is not correct, the concept of "self-issued" > only applies to CAs, so for the leaf to be skipped it would have > the be a self-issued CA. Try the patch below: I've simplified the patch in https://github.com/openssl/openssl/pull/7353 please take a look. -- Viktor. -- openssl-users mailing list To unsubscribe: https://mta.openssl.org/mailman/listinfo/openssl-users