Skip to content
  1. Jan 21, 2019
  2. Jan 16, 2019
  3. Jan 15, 2019
  4. Jan 08, 2019
  5. Jan 07, 2019
  6. Jan 06, 2019
  7. Jan 04, 2019
  8. Jan 03, 2019
  9. Dec 31, 2018
  10. Dec 30, 2018
  11. Dec 29, 2018
  12. Dec 27, 2018
  13. Dec 23, 2018
  14. Dec 22, 2018
  15. Dec 20, 2018
    • Ken Goldman's avatar
      Admit unknown pkey types at security level 0 · ea7d2c58
      Ken Goldman authored
      
      
      The check_key_level() function currently fails when the public key
      cannot be extracted from the certificate because its algorithm is not
      supported.  However, the public key is not needed for the last
      certificate in the chain.
      
      This change moves the check for level 0 before the check for a
      non-NULL public key.
      
      For background, this is the TPM 1.2 endorsement key certificate.
      I.e., this is a real application with millions of certificates issued.
      The key is an RSA-2048 key.
      
      The TCG (for a while) specified
      
           Public Key Algorithm: rsaesOaep
      
      rather than the commonly used
      
           Public Key Algorithm: rsaEncryption
      
      because the key is an encryption key rather than a signing key.
      The X509 certificate parser fails to get the public key.
      
      Reviewed-by: default avatarViktor Dukhovni <viktor@openssl.org>
      Reviewed-by: default avatarRichard Levitte <levitte@openssl.org>
      (Merged from https://github.com/openssl/openssl/pull/7906)
      ea7d2c58
  16. Dec 19, 2018