Commit 9ecf6e93 authored by Dr. Stephen Henson's avatar Dr. Stephen Henson
Browse files

add -badsig option to corrupt CRL signatures for testing too 

(cherry picked from commit 139cd16c)
parent a4173528

apps/crl.c

+6 −1
Original line number Diff line number Diff line
@@ -102,7 +102,7 @@ int MAIN(int argc, char **argv) 
	unsigned long nmflag = 0;

	X509_CRL *x=NULL;

	char *CAfile = NULL, *CApath = NULL;

	int ret=1,i,num,badops=0;

	int ret=1,i,num,badops=0,badsig=0;

	BIO *out=NULL;

	int informat,outformat, keyformat;

	char *infile=NULL,*outfile=NULL, *crldiff = NULL, *keyfile = NULL;
@@ -224,6 +224,8 @@ int MAIN(int argc, char **argv) 
			fingerprint= ++num;

		else if (strcmp(*argv,"-crlnumber") == 0)

			crlnumber= ++num;

		else if (strcmp(*argv,"-badsig") == 0)

			badsig = 1;

		else if ((md_alg=EVP_get_digestbyname(*argv + 1)))

			{

			/* ok */
@@ -426,6 +428,9 @@ bad: 
		goto end;

		}



	if (badsig)

		x->signature->data[x->signature->length - 1] ^= 0x1;



	if 	(outformat == FORMAT_ASN1)

		i=(int)i2d_X509_CRL_bio(out,x);

	else if (outformat == FORMAT_PEM)