diff options
| author | Joel Sing <jsing@cvs.openbsd.org> | 2020-09-26 15:44:07 +0000 |
|---|---|---|
| committer | Joel Sing <jsing@cvs.openbsd.org> | 2020-09-26 15:44:07 +0000 |
| commit | f10fbfcb88857cf009f7acec1f57cf6536f69489 (patch) | |
| tree | b1df6b432823955e6cb30a36279b4943cba0da98 /lib/libedit/makelist | |
| parent | 328ef3190b9e9df5dca58ff5e7a831d929d5629e (diff) | |
Ensure leaf is set up on X509_STORE_CTX before verification.
Previously the leaf certificate was only being set up on the X509_STORE_CTX
after two verification steps were performed, however at least one of those
steps could result in the verification callback being triggered and
existing code breaking.
Issue noticed by Raf Czlonka when attempting to connect to talk.google.com
using profanity (which does not set SNI and ends up receiving an invalid
certificate).
ok beck@ deraadt@ tb@
Diffstat (limited to 'lib/libedit/makelist')
0 files changed, 0 insertions, 0 deletions