Increase MAX_CERT_DEPTH to 16 (from 8), and when exceeded,

make it a hard failure, rather than just a warning.


git-svn-id: http://svn.openvpn.net/projects/openvpn/branches/BETA21/openvpn@5159 e7ae566f-a301-0410-adde-c780ea21d3b5

1 files changed, 1 insertions, 1 deletions

diff --git a/ssl.h b/ssl.h
index 3bb5fbe..9737f26 100644
--- a/ssl.h
+++ b/ssl.h
@@ -307,7 +307,7 @@
  */
 
 /* Maximum certificate depth we will allow */
-#define MAX_CERT_DEPTH 8
+#define MAX_CERT_DEPTH 16
 
 struct cert_hash {
   unsigned char sha1_hash[SHA_DIGEST_LENGTH];