tree aad8b42eafe157934a42ac82579d61e1ef33d23f
parent 6f3595683739a6528e98b38cc82afbc60f9fda34
author Ramesh Iyyar <rameshi1@in.ibm.com> 1561192315 -0500
committer Ed Tanous <ed.tanous@intel.com> 1562816203 +0000

Ignored Trust-Chain related errors when validating certificate

Currently, bmcweb is generating self signed certificate when uploaded
certificate is not in trust-chain while validating that certificate.

As per design direction, bmcweb and Certificate Manager should ignore
trust chain related errors and same feature addressed in certificate
manager.

Reference change id from Certificate Manager:
https://gerrit.openbmc-project.xyz/c/openbmc/phosphor-certificate-manager/+/13875

With this change, the user can upload self signed CA certificate
without Root CA-Certificate in certificate store and bmcweb won't generate
self signed certificate when uploaded certificate is not in
trust-chain.

Trust chain error info:
    X509_V_ERR_DEPTH_ZERO_SELF_SIGNED_CERT
    X509_V_ERR_SELF_SIGNED_CERT_IN_CHAIN
    X509_V_ERR_UNABLE_TO_GET_ISSUER_CERT_LOCALLY
    X509_V_ERR_CERT_UNTRUSTED
    X509_V_ERR_UNABLE_TO_VERIFY_LEAF_SIGNATURE

Change-Id: Ieedd602541d6d5284be3e22ffd5db3ee875065fe
Signed-off-by: Ramesh Iyyar <rameshi1@in.ibm.com>