Blame SOURCES/openssl-1.0.2a-x509.patch

c05f5d
diff -up openssl-1.0.2a/crypto/x509/by_file.c.x509 openssl-1.0.2a/crypto/x509/by_file.c
c05f5d
--- openssl-1.0.2a/crypto/x509/by_file.c.x509	2015-04-09 18:16:29.365456157 +0200
c05f5d
+++ openssl-1.0.2a/crypto/x509/by_file.c	2015-04-09 18:16:26.398387618 +0200
c05f5d
@@ -152,9 +152,12 @@ int X509_load_cert_file(X509_LOOKUP *ctx
c05f5d
                 }
c05f5d
             }
c05f5d
             i = X509_STORE_add_cert(ctx->store_ctx, x);
c05f5d
-            if (!i)
c05f5d
-                goto err;
c05f5d
-            count++;
c05f5d
+            /* ignore any problems with current certificate 
c05f5d
+               and continue with the next one */
c05f5d
+            if (i)
c05f5d
+                count++;
c05f5d
+            else
c05f5d
+                ERR_clear_error();
c05f5d
             X509_free(x);
c05f5d
             x = NULL;
c05f5d
         }
c05f5d
@@ -167,7 +170,7 @@ int X509_load_cert_file(X509_LOOKUP *ctx
c05f5d
         }
c05f5d
         i = X509_STORE_add_cert(ctx->store_ctx, x);
c05f5d
         if (!i)
c05f5d
-            goto err;
c05f5d
+            ERR_clear_error();
c05f5d
         ret = i;
c05f5d
     } else {
c05f5d
         X509err(X509_F_X509_LOAD_CERT_FILE, X509_R_BAD_X509_FILETYPE);