]> git.ipfire.org Git - thirdparty/openssl.git/commit - CHANGES.md
TS ESS: Invert the search logic of ts_check_signing_certs() to correctly cover cert...
authorDr. David von Oheimb <David.von.Oheimb@siemens.com>
Wed, 10 Mar 2021 16:21:37 +0000 (17:21 +0100)
committerDr. David von Oheimb <dev@ddvo.net>
Thu, 18 Mar 2021 06:03:52 +0000 (07:03 +0100)
commit6b937ae3a7a2dfac55d25a18bd6d5a084c24e3d5
treecdf56802cdf79a6010c98509a2117f8294cb109b
parent49f07be43d031f0407db8ae1b8cdf6452a79e558
TS ESS: Invert the search logic of ts_check_signing_certs() to correctly cover cert ID list

Fixes #14190

Reviewed-by: Tomas Mraz <tomas@openssl.org>
(Merged from https://github.com/openssl/openssl/pull/14503)
12 files changed:
CHANGES.md
crypto/ess/ess_lib.c
crypto/ts/ts_rsp_verify.c
include/crypto/ess.h
test/recipes/80-test_tsa.t
test/recipes/80-test_tsa_data/all-zero.tsq [new file with mode: 0644]
test/recipes/80-test_tsa_data/comodo-aaa.pem [new file with mode: 0644]
test/recipes/80-test_tsa_data/sectigo-all-zero.tsr [new file with mode: 0644]
test/recipes/80-test_tsa_data/sectigo-signer.pem [new file with mode: 0644]
test/recipes/80-test_tsa_data/sectigo-time-stamping-ca.pem [new file with mode: 0644]
test/recipes/80-test_tsa_data/user-trust-ca-aaa.pem [new file with mode: 0644]
test/recipes/80-test_tsa_data/user-trust-ca.pem [new file with mode: 0644]