diff options
| author | Norman Ashley <nashley@cisco.com> | 2020-07-10 19:01:32 -0400 |
|---|---|---|
| committer | Tomas Mraz <tmraz@fedoraproject.org> | 2020-09-21 11:33:08 +0200 |
| commit | 36871717ac83fe049f8620ff82be4a5d36e0d97d (patch) | |
| tree | 37006893701f735d456aa5c3a3a142af871dd170 /doc | |
| parent | 9c13b49a9f22d91c7f0576377975157f4f67984c (diff) | |
Support keys with RSA_METHOD_FLAG_NO_CHECK with OCSP sign
OCSP_basic_sign_ctx() in ocsp_srv.c , does not check for RSA_METHOD_FLAG_NO_CHECK.
If a key has RSA_METHOD_FLAG_NO_CHECK set, OCSP sign operations can fail
because the X509_check_private_key() can fail.
The check for the RSA_METHOD_FLAG_NO_CHECK was moved to crypto/rsa/rsa_ameth.c
as a common place to check. Checks in ssl_rsa.c were removed.
Reviewed-by: Matt Caswell <matt@openssl.org>
Reviewed-by: Tim Hudson <tjh@openssl.org>
Reviewed-by: Tomas Mraz <tmraz@fedoraproject.org>
(Merged from https://github.com/openssl/openssl/pull/12419)
(cherry picked from commit 56e8fe0b4efbf582e40ae91319727c9d176c5e1e)
Diffstat (limited to 'doc')
0 files changed, 0 insertions, 0 deletions