generic-library/openssl
1
0
Fork 0
Code Issues Pull Requests Releases Wiki Activity

add -badsig option to corrupt CRL signatures for testing too

Browse Source 
(cherry picked from commit 139cd16cc58330840890f914c318f00de6bfd831)
This commit is contained in:
Dr. Stephen Henson 2012-12-02 16:48:25 +00:00
parent a41735288c
commit 9ecf6e93af
1 changed files with 6 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

7
apps/crl.c
View File

@ -102,7 +102,7 @@ int MAIN(int argc, char **argv)
unsigned long nmflag = 0;
X509_CRL *x=NULL;
char *CAfile = NULL, *CApath = NULL;
int ret=1,i,num,badops=0;
int ret=1,i,num,badops=0,badsig=0;
BIO *out=NULL;
int informat,outformat, keyformat;
char *infile=NULL,*outfile=NULL, *crldiff = NULL, *keyfile = NULL;
@ -224,6 +224,8 @@ int MAIN(int argc, char **argv)
fingerprint= ++num;
else if (strcmp(*argv,"-crlnumber") == 0)
crlnumber= ++num;
else if (strcmp(*argv,"-badsig") == 0)
badsig = 1;
else if ((md_alg=EVP_get_digestbyname(*argv + 1)))
{
/* ok */
@ -426,6 +428,9 @@ bad:
goto end;
}
if (badsig)
x->signature->data[x->signature->length - 1] ^= 0x1;
if (outformat == FORMAT_ASN1)
i=(int)i2d_X509_CRL_bio(out,x);
else if (outformat == FORMAT_PEM)