diff --git a/modules/ssl/ssl_engine_kernel.c b/modules/ssl/ssl_engine_kernel.c index 540f203d54..e839d086cc 100644 --- a/modules/ssl/ssl_engine_kernel.c +++ b/modules/ssl/ssl_engine_kernel.c @@ -755,7 +755,7 @@ int ssl_hook_Access(request_rec *r) SSL_get_ex_data_X509_STORE_CTX_idx(), (char *)ssl); - if (!X509_verify_cert(&cert_store_ctx)) { + if (!modssl_X509_verify_cert(&cert_store_ctx)) { ssl_log(r->server, SSL_LOG_ERROR|SSL_ADD_SSLERR, "Re-negotiation verification step failed"); } diff --git a/modules/ssl/ssl_toolkit_compat.h b/modules/ssl/ssl_toolkit_compat.h index 7b2205f6ff..06f9b5a6e1 100644 --- a/modules/ssl/ssl_toolkit_compat.h +++ b/modules/ssl/ssl_toolkit_compat.h @@ -45,6 +45,8 @@ #define MODSSL_BIO_CB_ARG_TYPE const char +#define modssl_X509_verify_cert(c) X509_verify_cert(c) + #else /* RSA sslc */ #ifndef STACK_OF @@ -53,6 +55,8 @@ #define MODSSL_BIO_CB_ARG_TYPE char +#define modssl_X509_verify_cert(c) X509_verify_cert(c, NULL) + #if SSLC_VERSION < 0x2000 #define X509_STORE_CTX_set_depth(st, d)