3 Commits

Author	SHA1	Message	Date
Dr. David von Oheimb	f2a0458731	X509_cmp(): Fix comparison in case x509v3_cache_extensions() failed to due to invalid cert ... This is the upstream fix for #13698 reported for v1.1.1 Reviewed-by: Tomas Mraz <tmraz@fedoraproject.org> (Merged from https://github.com/openssl/openssl/pull/13755)	2021-01-13 11:19:17 +01:00
Dr. Matthias St. Pierre	b425001010	Rename OPENSSL_CTX prefix to OSSL_LIB_CTX ... Many of the new types introduced by OpenSSL 3.0 have an OSSL_ prefix, e.g., OSSL_CALLBACK, OSSL_PARAM, OSSL_ALGORITHM, OSSL_SERIALIZER. The OPENSSL_CTX type stands out a little by using a different prefix. For consistency reasons, this type is renamed to OSSL_LIB_CTX. Reviewed-by: Paul Dale <paul.dale@oracle.com> Reviewed-by: Matt Caswell <matt@openssl.org> (Merged from https://github.com/openssl/openssl/pull/12621)	2020-10-15 11:59:53 +01:00
Dr. David von Oheimb	1e41dadfa7	Extend X509 cert checks and error reporting in v3_{purp,crld}.c and x509_{set,vfy}.c ... add various checks for malformedness to static check_chain_extensions() in x509_vfc.c improve error reporting of X509v3_cache_extensions() in v3_purp.c add error reporting to x509_init_sig_info() in x509_set.c improve static setup_dp() and related functions in v3_purp.c and v3_crld.c add test case for non-conforming cert from https://tools.ietf.org/html/rfc8410#section-10.2 Reviewed-by: Kurt Roeckx <kurt@roeckx.be> Reviewed-by: Tomas Mraz <tmraz@fedoraproject.org> (Merged from https://github.com/openssl/openssl/pull/12478)	2020-09-11 07:42:22 +02:00