Re: LibreSSL legacy verifier regression

2021-02-25 Thread Jan Klemkow
On Wed, Feb 24, 2021 at 09:21:56PM +0100, Theo Buehler wrote: > On Wed, Feb 24, 2021 at 09:00:05PM +0100, Theo Buehler wrote: > > On Wed, Feb 24, 2021 at 06:47:00AM +0100, Jan Klemkow wrote: > > > another co-worker of mine has found an other regress in the LibreSSL > > > legacy verifier. I took hi

Re: LibreSSL legacy verifier regression

2021-02-24 Thread Theo Buehler
On Wed, Feb 24, 2021 at 09:00:05PM +0100, Theo Buehler wrote: > On Wed, Feb 24, 2021 at 06:47:00AM +0100, Jan Klemkow wrote: > > Hi, > > > > another co-worker of mine has found an other regress in the LibreSSL > > legacy verifier. I took his diff and made a test for our regression > > framework.

Re: LibreSSL legacy verifier regression

2021-02-24 Thread Theo Buehler
On Wed, Feb 24, 2021 at 06:47:00AM +0100, Jan Klemkow wrote: > Hi, > > another co-worker of mine has found an other regress in the LibreSSL > legacy verifier. I took his diff and made a test for our regression > framework. > > The legacy verifier seems not to check the certificate if no root CA

LibreSSL legacy verifier regression

2021-02-24 Thread Jan Klemkow
Hi, another co-worker of mine has found an other regress in the LibreSSL legacy verifier. I took his diff and made a test for our regression framework. The legacy verifier seems not to check the certificate if no root CA was given. The following test creates an expired certificate and tries to