New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
crypto/cmp
: fix CertReqId
to use in p10cr
transactions
#20298
Conversation
Rebased to fix merge conflict. Ping @openssl/committers for 2nd review. |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
LGTM
@paulidale could you please reconfirm? |
@paulidale Can you (or another @openss/otc) do an incremental review for the last commit? |
This pull request is ready to merge |
Reviewed-by: Paul Dale <pauli@openssl.org> Reviewed-by: Tom Cosgrove <tom.cosgrove@arm.com> Reviewed-by: David von Oheimb <david.von.oheimb@siemens.com> (Merged from openssl#20298)
Reviewed-by: Paul Dale <pauli@openssl.org> Reviewed-by: Tom Cosgrove <tom.cosgrove@arm.com> Reviewed-by: David von Oheimb <david.von.oheimb@siemens.com> (Merged from openssl#20298) (cherry picked from commit 25b18e6)
Reviewed-by: Paul Dale <pauli@openssl.org> Reviewed-by: Tom Cosgrove <tom.cosgrove@arm.com> Reviewed-by: David von Oheimb <david.von.oheimb@siemens.com> (Merged from openssl#20298) (cherry picked from commit 25b18e6)
Merged to master, 3.0, and 3.1 - thanks @paulidale and @tom-cosgrove-arm for the reviews. |
Reviewed-by: Paul Dale <pauli@openssl.org> Reviewed-by: Tom Cosgrove <tom.cosgrove@arm.com> Reviewed-by: David von Oheimb <david.von.oheimb@siemens.com> (Merged from openssl#20298)
Reviewed-by: Paul Dale <pauli@openssl.org> Reviewed-by: Tom Cosgrove <tom.cosgrove@arm.com> Reviewed-by: David von Oheimb <david.von.oheimb@siemens.com> (Merged from openssl#20298)
A colleague noticed that for
p10cr
transactions both the CMP client does not use the CertReqId specified in RFC 4210.This is fixed here,
extending also the mock server in order to check for the right valuemoving the check for the right value from the mock server to the core server implementation and extending it as needed.
Checklist