]> git.ipfire.org Git - thirdparty/openssl.git/commit
X509_cmp(): Fix comparison in case x509v3_cache_extensions() failed to due to invalid...
authorDr. David von Oheimb <David.von.Oheimb@siemens.com>
Wed, 30 Dec 2020 08:49:20 +0000 (09:49 +0100)
committerDr. David von Oheimb <dev@ddvo.net>
Wed, 13 Jan 2021 10:19:17 +0000 (11:19 +0100)
commitf2a0458731f15fd4d45f5574a221177f4591b1d8
tree85b1a3cba117540231cad28e1e64062c50807f83
parent3339606a38cc9023c807428b429e01cfa1fde4d9
X509_cmp(): Fix comparison in case x509v3_cache_extensions() failed to due to invalid cert

This is the upstream fix for #13698 reported for v1.1.1

Reviewed-by: Tomas Mraz <tmraz@fedoraproject.org>
(Merged from https://github.com/openssl/openssl/pull/13755)
12 files changed:
crypto/x509/v3_purp.c
crypto/x509/x509_cmp.c
crypto/x509/x509_lu.c
crypto/x509/x_all.c
crypto/x509/x_crl.c
doc/internal/man3/x509v3_cache_extensions.pod
doc/man3/X509_cmp.pod
doc/man3/X509_get_extension_flags.pod
include/openssl/x509v3.h.in
test/certs/invalid-cert.pem [new file with mode: 0644]
test/recipes/80-test_x509aux.t
test/x509aux.c