diff options
| author | Matt Caswell <matt@openssl.org> | 2015-06-24 00:12:38 +0100 |
|---|---|---|
| committer | Matt Caswell <matt@openssl.org> | 2015-07-07 22:57:36 +0100 |
| commit | cb22d2ae5a5b6069dbf66dbcce07223ac15a16de (patch) | |
| tree | 2c91a796e41734227d15b1a6afccb9f8f522c06e /crypto/ts/ts.h | |
| parent | b3b1eb5735c5b3d566a9fc3bf745bf716a29afa0 (diff) | |
Fix alt chains bug
This is a follow up to the alternate chains certificate forgery issue
(CVE-2015-1793). That issue is exacerbated in 1.0.1 by a related bug which
means that we *always* check for an alternative chain, even if we have
already found a chain. The code is supposed to stop as soon as it has found
one (and does do in master and 1.0.2).
Reviewed-by: Stephen Henson <steve@openssl.org>
Diffstat (limited to 'crypto/ts/ts.h')
0 files changed, 0 insertions, 0 deletions