Platform: OSSL 0.9.7e

Description:
If a X509_NAME structure is modified using X509_NAME_ENTRY_set_data( 
X509_NAME_get_entry(..), .. ), the modified bit isn't set, which may cause 
a coherency problem.

Reproduction steps:
1) Setup and sign a self-sign certificate. 
2) Change that certificate's subject field, set the new subject as the 
issuer and self-sign the certificate again. 
3) Certificate now has new subject but old issuer from step (1).

Suggestions:
Check an modified bit on all the entries as well?
______________________________________________________________________
OpenSSL Project                                 http://www.openssl.org
Development Mailing List                       [EMAIL PROTECTED]
Automated List Manager                           [EMAIL PROTECTED]

Reply via email to