Re: [PATCH] X.509: Fix test for self-signed certificate

2016-02-26 Thread Michal Marek
On 2016-02-24 15:54, David Howells wrote: > Hi Michal, > > I have the attached patch already in my queue. > > David > --- > commit d19fcb825912c67e09e0575b95accaa42899e07f > Author: David Howells > Date: Wed Feb 24 14:37:54 2016 + > > X.509: Don't treat

Re: [PATCH] X.509: Fix test for self-signed certificate

2016-02-24 Thread David Howells
Hi Michal, I have the attached patch already in my queue. David --- commit d19fcb825912c67e09e0575b95accaa42899e07f Author: David Howells Date: Wed Feb 24 14:37:54 2016 + X.509: Don't treat self-signed keys specially Trust for a self-signed certificate

Re: [PATCH] X.509: Fix test for self-signed certificate

2016-02-16 Thread lee joey
2016-02-11 21:34 GMT+08:00 Michal Marek : > If either the Subject + subjectKeyId or the Issuer + Serial number > differs between the certificate and the CA, the certificate is not > self-signed. In practice, both will be equal for self-signed > certificates and both will differ

[PATCH] X.509: Fix test for self-signed certificate

2016-02-11 Thread Michal Marek
If either the Subject + subjectKeyId or the Issuer + Serial number differs between the certificate and the CA, the certificate is not self-signed. In practice, both will be equal for self-signed certificates and both will differ for CA-signed certificates. It is only an issue if the CA used the