Jean-Marc Desperrier wrote:
> 
> Ben Laurie wrote:
> 
> > The bug is in MS - they are encoding a top-bit-set number without
> > inserting a leading zero, so OpenSSL (correctly) sees it as negative.
> 
> The output of openssl x509 is not very explicit.
> It probably should fail, instead of diplaying it as a 510 bits number without saying
> it's a *negative* 510 bits number.

Yes, I'll agree that is also a bug.

Cheers,

Ben.

--
http://www.apache-ssl.org/ben.html

Coming to ApacheCon Europe 2000? http://apachecon.com/
______________________________________________________________________
OpenSSL Project                                 http://www.openssl.org
Development Mailing List                       [EMAIL PROTECTED]
Automated List Manager                           [EMAIL PROTECTED]

Reply via email to