Skip to content
  1. Jan 06, 2019
  2. Jan 05, 2019
  3. Jan 04, 2019
  4. Jan 03, 2019
  5. Dec 31, 2018
  6. Dec 30, 2018
  7. Dec 29, 2018
  8. Dec 27, 2018
  9. Dec 22, 2018
  10. Dec 21, 2018
  11. Dec 20, 2018
    • Ken Goldman's avatar
      Admit unknown pkey types at security level 0 · baba1545
      Ken Goldman authored
      
      
      The check_key_level() function currently fails when the public key
      cannot be extracted from the certificate because its algorithm is not
      supported.  However, the public key is not needed for the last
      certificate in the chain.
      
      This change moves the check for level 0 before the check for a
      non-NULL public key.
      
      For background, this is the TPM 1.2 endorsement key certificate.
      I.e., this is a real application with millions of certificates issued.
      The key is an RSA-2048 key.
      
      The TCG (for a while) specified
      
           Public Key Algorithm: rsaesOaep
      
      rather than the commonly used
      
           Public Key Algorithm: rsaEncryption
      
      because the key is an encryption key rather than a signing key.
      The X509 certificate parser fails to get the public key.
      
      Reviewed-by: default avatarViktor Dukhovni <viktor@openssl.org>
      Reviewed-by: default avatarRichard Levitte <levitte@openssl.org>
      (Merged from https://github.com/openssl/openssl/pull/7906)
      baba1545
  12. Dec 19, 2018
  13. Dec 17, 2018
  14. Dec 15, 2018
  15. Dec 14, 2018
  16. Dec 13, 2018