summaryrefslogtreecommitdiffstats
path: root/Configurations
diff options
context:
space:
mode:
authorDavid Woodhouse <David.Woodhouse@intel.com>2016-09-07 16:53:18 +0100
committerDavid Woodhouse <David.Woodhouse@intel.com>2016-09-07 18:21:32 +0100
commit92ed7fa575a80955f3bb6efefca9bf576a953586 (patch)
treec758cb8748c9f9266f8b69fe92e08e56e44ae169 /Configurations
parent79e5eae6ab164efe4966685758b8f15c13698bb1 (diff)
Avoid EVP_PKEY_cmp() crash on EC keys without public component
Some hardware devices don't provide the public EC_POINT data. The only way for X509_check_private_key() to validate that the key matches a given certificate is to actually perform a sign operation and then verify it using the public key in the certificate. Maybe that can come later, as discussed in issue 1532. But for now let's at least make it fail gracefully and not crash. GH: 1532 Reviewed-by: Richard Levitte <levitte@openssl.org> Reviewed-by: Rich Salz <rsalz@openssl.org> (Merged from https://github.com/openssl/openssl/pull/1547)
Diffstat (limited to 'Configurations')
0 files changed, 0 insertions, 0 deletions