xmlsec-nss: enable self signed certs (#609)

lsh123 · Mar 11, 2023 · f432bb7 · f432bb7
1 parent a8fed76
commit f432bb7
Showing 1 changed file with 4 additions and 0 deletions.
diff --git a/src/nss/x509vfy.c b/src/nss/x509vfy.c
@@ -408,6 +408,10 @@ xmlSecNssX509StoreFindChildCert(CERTCertificate* cert, CERTCertList* certs) {
     xmlSecAssert2(certs != NULL, NULL);
 
      for (cur = CERT_LIST_HEAD(certs); !CERT_LIST_END(cur, certs); cur = CERT_LIST_NEXT(cur)) {
+        /* allow self signed certs */
+        if(cur->cert == cert) {
+            continue;
+        }
         if (SECITEM_CompareItem(&(cur->cert->derIssuer), &(cert->derSubject)) == SECEqual) {
             return(cur->cert);
         }