diff options
| author | Dr. David von Oheimb <David.von.Oheimb@siemens.com> | 2023-05-30 21:09:26 +0200 |
|---|---|---|
| committer | Dr. David von Oheimb <dev@ddvo.net> | 2023-06-01 10:03:06 +0200 |
| commit | 586b5407d6138ce23416d4101168ab0c2b1651b6 (patch) | |
| tree | 30da7b510818ac965beb6a3e6e83091e96156973 /apps | |
| parent | dea5e2632ca7f3ab48f947359501a7e3f28db178 (diff) | |
apps.c: add comment to do_X509_sign() referring to question #19805
Reviewed-by: Paul Dale <pauli@openssl.org>
Reviewed-by: Tomas Mraz <tomas@openssl.org>
Reviewed-by: David von Oheimb <david.von.oheimb@siemens.com>
(Merged from https://github.com/openssl/openssl/pull/21086)
Diffstat (limited to 'apps')
| -rw-r--r-- | apps/lib/apps.c | 1 |
1 files changed, 1 insertions, 0 deletions
diff --git a/apps/lib/apps.c b/apps/lib/apps.c index 79980257bd..4f92016ee2 100644 --- a/apps/lib/apps.c +++ b/apps/lib/apps.c @@ -2349,6 +2349,7 @@ int do_X509_sign(X509 *cert, int force_v1, EVP_PKEY *pkey, const char *md, "keyid, issuer", !self_sign)) goto end; } + /* May add further measures for ensuring RFC 5280 compliance, see #19805 */ if (mctx != NULL && do_sign_init(mctx, pkey, md, sigopts) > 0) rv = (X509_sign_ctx(cert, mctx) > 0); |