diff options
| author | Dr. David von Oheimb <David.von.Oheimb@siemens.com> | 2020-06-27 16:16:12 +0200 |
|---|---|---|
| committer | Dr. David von Oheimb <David.von.Oheimb@siemens.com> | 2020-09-11 07:42:22 +0200 |
| commit | 1e41dadfa7b9f792ed0f4714a3d3d36f070cf30e (patch) | |
| tree | 3dae7b7b2ad8bf6e4db27dd8eb52230d7bdae1c1 /doc/man1/openssl.pod | |
| parent | b0a4cbead384e2ac8dbb697795ace242e1b07c18 (diff) | |
Extend X509 cert checks and error reporting in v3_{purp,crld}.c and x509_{set,vfy}.c
add various checks for malformedness to static check_chain_extensions() in x509_vfc.c
improve error reporting of X509v3_cache_extensions() in v3_purp.c
add error reporting to x509_init_sig_info() in x509_set.c
improve static setup_dp() and related functions in v3_purp.c and v3_crld.c
add test case for non-conforming cert from https://tools.ietf.org/html/rfc8410#section-10.2
Reviewed-by: Kurt Roeckx <kurt@roeckx.be>
Reviewed-by: Tomas Mraz <tmraz@fedoraproject.org>
(Merged from https://github.com/openssl/openssl/pull/12478)
Diffstat (limited to 'doc/man1/openssl.pod')
| -rw-r--r-- | doc/man1/openssl.pod | 1 |
1 files changed, 1 insertions, 0 deletions
diff --git a/doc/man1/openssl.pod b/doc/man1/openssl.pod index 1f344217a2..3ae273b5bf 100644 --- a/doc/man1/openssl.pod +++ b/doc/man1/openssl.pod @@ -906,6 +906,7 @@ a verification time, the check is not suppressed. =item B<-x509_strict> This disables non-compliant workarounds for broken certificates. +Thus errors are thrown on certificates not compliant with RFC 5280. =item B<-ignore_critical> |