diff options
| author | Dr. David von Oheimb <David.von.Oheimb@siemens.com> | 2020-12-30 09:49:20 +0100 |
|---|---|---|
| committer | Dr. David von Oheimb <dev@ddvo.net> | 2021-01-13 11:19:17 +0100 |
| commit | f2a0458731f15fd4d45f5574a221177f4591b1d8 (patch) | |
| tree | 85b1a3cba117540231cad28e1e64062c50807f83 /doc/internal | |
| parent | 3339606a38cc9023c807428b429e01cfa1fde4d9 (diff) | |
X509_cmp(): Fix comparison in case x509v3_cache_extensions() failed to due to invalid cert
This is the upstream fix for #13698 reported for v1.1.1
Reviewed-by: Tomas Mraz <tmraz@fedoraproject.org>
(Merged from https://github.com/openssl/openssl/pull/13755)
Diffstat (limited to 'doc/internal')
| -rw-r--r-- | doc/internal/man3/x509v3_cache_extensions.pod | 3 |
1 files changed, 2 insertions, 1 deletions
diff --git a/doc/internal/man3/x509v3_cache_extensions.pod b/doc/internal/man3/x509v3_cache_extensions.pod index 418a19738c..cd00942333 100644 --- a/doc/internal/man3/x509v3_cache_extensions.pod +++ b/doc/internal/man3/x509v3_cache_extensions.pod @@ -17,7 +17,8 @@ This function processes any X509v3 extensions present in an X509 object I<x> and caches the result of that processing as well as further derived info, for instance whether the certificate is self-issued or has version X.509v1. It computes the SHA1 digest of the certificate using the default library context -and property query string and stores the result in x->sha1_hash. +and property query string and stores the result in x->sha1_hash, +or on failure sets B<EXFLAG_NO_FINGERPRINT> in x->flags. It sets B<X509_SIG_INFO_VALID> in x->flags if x->siginf was filled successfully, which may not be possible if a referenced algorithm is unknown or not available. Many OpenSSL functions that use an X509 object call this function implicitly. |