Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Correctly find all critical CRL extensions #1769

Closed
wants to merge 1 commit into from
Closed

Correctly find all critical CRL extensions #1769

wants to merge 1 commit into from

Conversation

richsalz
Copy link
Contributor

Unhandled critical CRL extensions were not detected if they appeared
after the handled ones. (GitHub issue 1757). Thanks to John Chuah
for reporting this.

Unhandled critical CRL extensions were not detected if they appeared
after the handled ones.  (GitHub issue 1757).  Thanks to John Chuah
for reporting this.
@richsalz richsalz added the branch: 1.0.2 Merge to OpenSSL_1_0_2-stable branch label Oct 22, 2016
@richsalz richsalz self-assigned this Oct 22, 2016
@richsalz
Copy link
Contributor Author

Fixes #1757

@levitte levitte added the approval: done This pull request has the required number of approvals label Oct 22, 2016
@levitte
Copy link
Member

levitte commented Oct 22, 2016

Have you double checked that this is already done correctly in master and 1.1.0?

levitte pushed a commit that referenced this pull request Oct 22, 2016
Unhandled critical CRL extensions were not detected if they appeared
after the handled ones.  (GitHub issue 1757).  Thanks to John Chuah
for reporting this.

Reviewed-by: Richard Levitte <levitte@openssl.org>
(Merged from #1769)
@richsalz
Copy link
Contributor Author

commit 3ade92e, thanks.

@richsalz richsalz closed this Oct 22, 2016
@richsalz richsalz deleted the gh1757 branch October 22, 2016 15:58
@davidben
Copy link
Contributor

No tests? This one's pretty straight-forward to write a regression test for:
https://boringssl-review.googlesource.com/c/11720/

@richsalz
Copy link
Contributor Author

Can I get permission to use this test in openssl, with openssl copyright?

@richsalz
Copy link
Contributor Author

Yes, I looked. The loop is different, it’s in x509/x_crl.c

@davidben
Copy link
Contributor

(Responded on the PR.)

@richsalz
Copy link
Contributor Author

Thanks ☺

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
approval: done This pull request has the required number of approvals branch: 1.0.2 Merge to OpenSSL_1_0_2-stable branch
Projects
None yet
Development

Successfully merging this pull request may close these issues.

None yet

3 participants