Re: 63 bit certificate ID is libressl affected?

On Wed, Mar 13, 2019 at 06:53:43PM -0700, William Ahern wrote: > The real issue here is that the EJBCA specification wasn't just a failure in > language precision, but was and remains entirely ill considered on this > score. If ASN.1 INTEGERs must now be 65 bits, it's a good bet that most if >

Re: 63 bit certificate ID is libressl affected?

On Wed, Mar 13, 2019 at 11:32:50PM +0100, Ingo Schwarze wrote: > Hi Tom, > > Tom Smyth wrote on Wed, Mar 13, 2019 at 08:32:20PM +: > > > Just saw the following article and i was wondering if libressl > > Might be affected by the bug also > > Top bit being set to 0 always making an effective

Re: 63 bit certificate ID is libressl affected?

Thanks Ingo for your (as always) good attention to detail and detailed feedback I really appreciate it ... Point taken Ingo re the patch... :) and tech@ :) and discussion duly moved to misc@ it was more of a heads up Ill work on my programming skills :) cheers, Tom Smyth On Wed, 13 Mar