generic-library/openssl
1
0
Fork 0
Code Issues Pull Requests Releases Wiki Activity

Fix two bugs which affect delta CRL handling:

Browse Source 
Use -1 to check all extensions in CRLs.
Always set flag for freshest CRL.
This commit is contained in:
Dr. Stephen Henson 2012-12-06 18:24:47 +00:00
parent bc946bfb97
commit e04ccbc5cc
2 changed files with 4 additions and 4 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

4
crypto/x509/x509_vfy.c
View File

@ -888,7 +888,7 @@ static int crl_extension_match(X509_CRL *a, X509_CRL *b, int nid)
{ {
ASN1_OCTET_STRING *exta, *extb; ASN1_OCTET_STRING *exta, *extb;
int i; int i;
i = X509_CRL_get_ext_by_NID(a, nid, 0); i = X509_CRL_get_ext_by_NID(a, nid, -1);
if (i >= 0) if (i >= 0)
{ {
/* Can't have multiple occurrences */ /* Can't have multiple occurrences */
@ -899,7 +899,7 @@ static int crl_extension_match(X509_CRL *a, X509_CRL *b, int nid)
else else
exta = NULL; exta = NULL;
i = X509_CRL_get_ext_by_NID(b, nid, 0); i = X509_CRL_get_ext_by_NID(b, nid, -1);
if (i >= 0) if (i >= 0)
{ {

4
crypto/x509v3/v3_purp.c
View File

@ -474,11 +474,11 @@ static void x509v3_cache_extensions(X509 *x)
for (i = 0; i < X509_get_ext_count(x); i++) for (i = 0; i < X509_get_ext_count(x); i++)
{ {
ex = X509_get_ext(x, i); ex = X509_get_ext(x, i);
if (!X509_EXTENSION_get_critical(ex))
continue;
if (OBJ_obj2nid(X509_EXTENSION_get_object(ex)) if (OBJ_obj2nid(X509_EXTENSION_get_object(ex))
== NID_freshest_crl) == NID_freshest_crl)
x->ex_flags |= EXFLAG_FRESHEST; x->ex_flags |= EXFLAG_FRESHEST;
if (!X509_EXTENSION_get_critical(ex))
continue;
if (!X509_supported_extension(ex)) if (!X509_supported_extension(ex))
{ {
x->ex_flags |= EXFLAG_CRITICAL; x->ex_flags |= EXFLAG_CRITICAL;