Jean-Marc Desperrier wrote:
>
> Ben Laurie wrote:
>
> > The bug is in MS - they are encoding a top-bit-set number without
> > inserting a leading zero, so OpenSSL (correctly) sees it as negative.
>
> The output of openssl x509 is not very explicit.
> It probably should fail, instead of diplaying it as a 510 bits number without saying
> it's a *negative* 510 bits number.
Yes, I'll agree that is also a bug.
Cheers,
Ben.
--
http://www.apache-ssl.org/ben.html
Coming to ApacheCon Europe 2000? http://apachecon.com/
______________________________________________________________________
OpenSSL Project http://www.openssl.org
Development Mailing List [EMAIL PROTECTED]
Automated List Manager [EMAIL PROTECTED]