]> git.ipfire.org Git - thirdparty/openssl.git/commit
projects / thirdparty / openssl.git / commit
? search:
summary | shortlog | log | commit | commitdiff | tree
(parent: 0e0a473) | patch
Check that we got the expected name type when verifying name constraints
authorMatt Caswell <matt@openssl.org>
Thu, 3 Jun 2021 10:08:25 +0000 (11:08 +0100)
committerMatt Caswell <matt@openssl.org>
Fri, 4 Jun 2021 16:18:31 +0000 (17:18 +0100)
commit39145c4111aaa358f521212f5e4c741f265b012a
treeb799c003cfacbd0c51d9bba02e276686c2529cabtree | snapshot
parent0e0a47377f98ac45648d2a46e0f2dfd799b07ec6commit | diff
Check that we got the expected name type when verifying name constraints

If a SAN field contains an SmtpUTF8Mailbox name then it is expected to
have a UTF8String type. We should verify that it really does before we
attempt to use the value in it.

Reported by Corey Bonnell

Reviewed-by: Dmitry Belyavskiy <beldmit@gmail.com>
Reviewed-by: Paul Dale <pauli@openssl.org>
(Merged from https://github.com/openssl/openssl/pull/15611)
crypto/x509/v3_ncons.c diff | blob | blame | history
Mirror of https://github.com/openssl/openssl.git