Skip to content
  1. Nov 09, 2015
  2. Nov 08, 2015
  3. Nov 04, 2015
  4. Nov 02, 2015
  5. Nov 01, 2015
  6. Oct 29, 2015
  7. Oct 23, 2015
  8. Oct 22, 2015
  9. Oct 15, 2015
  10. Oct 14, 2015
  11. Oct 13, 2015
  12. Oct 10, 2015
  13. Oct 08, 2015
    • Matt Caswell's avatar
      Don't treat a bare OCTETSTRING as DigestInfo in int_rsa_verify · 985abd1f
      Matt Caswell authored
      
      
      The function int_rsa_verify is an internal function used for verifying an
      RSA signature. It takes an argument |dtype| which indicates the digest type
      that was used. Dependant on that digest type the processing of the
      signature data will vary. In particular if |dtype == NID_mdc2| and the
      signature data is a bare OCTETSTRING then it is treated differently to the
      default case where the signature data is treated as a DigestInfo (X509_SIG).
      
      Due to a missing "else" keyword the logic actually correctly processes the
      OCTETSTRING format signature first, and then attempts to continue and
      process it as DigestInfo. This will invariably fail because we already know
      that it is a bare OCTETSTRING.
      
      This failure doesn't actualy make a real difference because it ends up at
      the |err| label regardless and still returns a "success" result. This patch
      just cleans things up to make it look a bit more sane.
      
      RT#4076
      
      Reviewed-by: default avatarRichard Levitte <levitte@openssl.org>
      (cherry picked from commit dffe5109)
      985abd1f
    • Richard Levitte's avatar
      When ENGINE_add finds that id or name is missing, actually return · b0042479
      Richard Levitte authored
      
      
      Reviewed-by: default avatarMatt Caswell <matt@openssl.org>
      (cherry picked from commit 5850cc75)
      b0042479
  14. Oct 07, 2015
  15. Oct 06, 2015
  16. Oct 05, 2015
  17. Oct 03, 2015
  18. Sep 29, 2015
  19. Sep 28, 2015
  20. Sep 25, 2015
  21. Sep 22, 2015