git.ipfire.org Git - thirdparty/openssl.git/commit

]> git.ipfire.org Git - thirdparty/openssl.git/commit

projects / thirdparty / openssl.git / commit

author	Tomas Mraz <tmraz@fedoraproject.org>
	Fri, 11 Sep 2020 07:09:29 +0000 (09:09 +0200)
committer	Tomas Mraz <tmraz@fedoraproject.org>
	Thu, 17 Sep 2020 15:15:15 +0000 (17:15 +0200)
commit	cccf532fef10aaa2d682227061b8828a1eb2c031
tree	eebff041321fc8ca671a21369395370e806175d2	tree
parent	fe2f8aecfe4a0de483334bf671a8eb4f14444c00	commit \| diff

Disallow certs with explicit curve in verification chain

The check is applied only with X509_V_FLAG_X509_STRICT.

Fixes #12139

Reviewed-by: David von Oheimb <david.von.oheimb@siemens.com>
Reviewed-by: Nicola Tuveri <nic.tuv@gmail.com>
(Merged from https://github.com/openssl/openssl/pull/12683)

16 files changed:

crypto/x509/x509_txt.c		diff \| blob \| blame \| history
crypto/x509/x509_vfy.c		diff \| blob \| blame \| history
include/openssl/x509_vfy.h.in		diff \| blob \| blame \| history
ssl/statem/statem_lib.c		diff \| blob \| blame \| history
test/certs/ca-cert-ec-explicit.pem	[new file with mode: 0644]	blob
test/certs/ca-cert-ec-named.pem	[new file with mode: 0644]	blob
test/certs/ca-key-ec-explicit.pem	[new file with mode: 0644]	blob
test/certs/ca-key-ec-named.pem	[new file with mode: 0644]	blob
test/certs/ee-cert-ec-explicit.pem	[new file with mode: 0644]	blob
test/certs/ee-cert-ec-named-explicit.pem	[new file with mode: 0644]	blob
test/certs/ee-cert-ec-named-named.pem	[new file with mode: 0644]	blob
test/certs/ee-key-ec-explicit.pem	[new file with mode: 0644]	blob
test/certs/ee-key-ec-named-explicit.pem	[new file with mode: 0644]	blob
test/certs/ee-key-ec-named-named.pem	[new file with mode: 0644]	blob
test/certs/setup.sh		diff \| blob \| blame \| history
test/recipes/25-test_verify.t		diff \| blob \| blame \| history

Mirror of https://github.com/openssl/openssl.git

RSS Atom