Using:
Windows 7 Professional SP1
openssl-1.0.0g

Build:
perl Configure debug-VC-WIN64A no-asm --prefix=c:\openssl
ms\do_win64a
nmake -f ms\nt.mak

source file:
openssl-1.0.0g\crypto\x509v3\v3_purp.c

function:
int X509_check_akid(X509 *issuer, AUTHORITY_KEYID *akid)

line 762:
         if(nm && X509_NAME_cmp(nm, X509_get_issuer_name(issuer)))
                                             ^^^^^^
I believe this should be:
         if(nm && X509_NAME_cmp(nm, X509_get_subject_name(issuer)))
                                             ^^^^^^^
I have tested and verified this fix.

Best regards,
--David Shambroom
-- 
W. David Shambroom, Ph.D.
Security Architect, InterSystems Corporation
w...@intersystems.com; 617.551.2143; fax: 617.494.1631

______________________________________________________________________
OpenSSL Project                                 http://www.openssl.org
Development Mailing List                       openssl-dev@openssl.org
Automated List Manager                           majord...@openssl.org

Reply via email to