Dr. David von Oheimb 0e7b1383e1 Fix issue 1418 by moving check of KU_KEY_CERT_SIGN and weakening check_issued()
Move check that cert signing is allowed from x509v3_cache_extensions() to
where it belongs: internal_verify(), generalize it for proxy cert signing.
Correct and simplify check_issued(), now checking self-issued (not: self-signed).
Add test case to 25-test_verify.t that demonstrates successful fix

Fixes #1418

Reviewed-by: Viktor Dukhovni <viktor@openssl.org>
(Merged from https://github.com/openssl/openssl/pull/10587)
2020-07-01 11:14:54 +02:00
..
2019-07-02 14:22:29 +02:00
2020-06-04 14:33:57 +01:00
2020-06-04 14:33:57 +01:00
2020-04-23 13:55:52 +01:00
2020-04-23 13:55:52 +01:00
2019-12-11 19:04:01 +01:00
2020-04-23 13:55:52 +01:00
2019-10-11 15:30:57 +02:00
2020-04-23 13:55:52 +01:00
2019-10-11 15:30:57 +02:00
2019-10-11 15:30:57 +02:00
2020-06-25 14:13:12 +01:00
2020-04-23 13:55:52 +01:00
2019-10-31 14:26:34 +01:00
2019-08-19 00:06:41 +02:00
2020-06-25 14:13:12 +01:00
2020-04-23 13:55:52 +01:00
2019-10-14 22:54:02 +02:00
2019-08-19 07:19:56 +02:00
2019-07-01 10:09:22 +02:00
2020-06-16 16:15:37 +02:00
2020-04-23 13:55:52 +01:00
2020-04-23 13:55:52 +01:00
2020-04-23 13:55:52 +01:00
2020-04-23 13:55:52 +01:00
2020-05-18 09:34:07 +01:00
2020-05-15 14:09:49 +01:00
2020-04-23 13:55:52 +01:00
2020-04-23 13:55:52 +01:00
2020-04-23 13:55:52 +01:00
2020-04-23 13:55:52 +01:00
2020-04-23 13:55:52 +01:00
2020-06-04 14:33:57 +01:00
2020-06-04 14:33:57 +01:00
2020-04-23 13:55:52 +01:00
2019-12-11 19:04:01 +01:00
2020-04-23 13:55:52 +01:00
2020-04-23 13:55:52 +01:00
2019-11-15 17:20:33 +01:00
2019-11-15 17:20:33 +01:00
2020-04-23 13:55:52 +01:00
2020-04-23 13:55:52 +01:00
2020-06-24 18:55:09 +03:00
2020-06-25 14:13:12 +01:00
2020-06-25 14:13:12 +01:00
2019-07-02 14:22:29 +02:00
2019-09-04 10:38:13 +02:00
2020-06-25 14:13:12 +01:00
2020-06-04 14:33:57 +01:00
2020-06-24 18:55:09 +03:00
2020-04-23 13:55:52 +01:00
2020-04-23 13:55:52 +01:00
2020-04-23 13:55:52 +01:00
2020-04-23 13:55:52 +01:00
2020-06-25 14:13:12 +01:00
2020-04-23 13:55:52 +01:00
2020-06-25 14:13:12 +01:00
2020-04-23 13:55:52 +01:00
2020-04-23 13:55:52 +01:00
2020-04-23 13:55:52 +01:00
2020-04-23 13:55:52 +01:00
2019-12-11 19:04:01 +01:00
2020-04-23 13:55:52 +01:00
2020-04-23 13:55:52 +01:00
2020-04-23 13:55:52 +01:00
2020-06-18 10:10:48 +03:00
2020-06-24 20:07:46 +10:00
2020-06-24 20:07:46 +10:00
2020-04-23 13:55:52 +01:00
2020-06-25 14:13:12 +01:00
2020-05-15 14:09:49 +01:00
2020-06-25 14:13:12 +01:00
2019-10-09 17:44:04 +02:00
2020-06-25 14:13:12 +01:00
2020-04-23 13:55:52 +01:00
2020-06-25 14:13:12 +01:00
2020-04-23 13:55:52 +01:00
2020-04-23 13:55:52 +01:00
2020-04-23 13:55:52 +01:00
2020-04-23 13:55:52 +01:00
2020-04-23 13:55:52 +01:00
2020-04-23 13:55:52 +01:00
2020-04-23 13:55:52 +01:00
2020-04-23 13:55:52 +01:00
2020-04-23 13:55:52 +01:00
2020-04-23 13:55:52 +01:00
2020-04-23 13:55:52 +01:00
2019-10-31 14:26:34 +01:00
2020-04-23 13:55:52 +01:00
2020-04-23 13:55:52 +01:00
2020-04-23 13:55:52 +01:00
2020-03-09 10:46:57 +01:00
2020-05-15 14:09:49 +01:00
2020-04-23 13:55:52 +01:00
2020-06-25 14:13:12 +01:00
2019-12-11 19:04:01 +01:00
2020-06-04 14:33:57 +01:00
2020-06-30 14:14:05 +01:00
2020-06-04 14:33:57 +01:00
2019-08-19 00:06:41 +02:00
2020-04-23 13:55:52 +01:00
2020-04-23 13:55:52 +01:00
2020-04-23 13:55:52 +01:00
2020-04-23 13:55:52 +01:00
2020-04-23 13:55:52 +01:00
2020-04-28 09:06:04 +10:00
2020-04-23 13:55:52 +01:00
2020-04-23 13:55:52 +01:00
2020-04-23 13:55:52 +01:00
2020-06-04 14:33:57 +01:00
2020-04-23 13:55:52 +01:00
2020-04-23 13:55:52 +01:00
2019-05-31 12:23:58 +02:00
2020-04-23 13:55:52 +01:00
2020-06-25 14:13:12 +01:00