[openssl.org #2879] Bug report - X509_check_akid() incorrectly handles dirName:

2012-09-13 Thread David Shambroom via RT
Using: Windows 7 Professional SP1 openssl-1.0.0g Build: perl Configure debug-VC-WIN64A no-asm --prefix=c:\openssl ms\do_win64a nmake -f ms\nt.mak source file: openssl-1.0.0g\crypto\x509v3\v3_purp.c function: int X509_check_akid(X509 *issuer, AUTHORITY_KEYID *akid) line 762: if(nm

Re: [openssl-dev] [openssl.org #2879] Bug report - X509_check_akid() incorrectly handles dirName:

2012-09-13 Thread Erwann Abalea
Bonjour, The goal of this function is to determine if a given authorityKeyIdentifier extension matches an issuer certificate (issuer=authority). The AKI extension can contain 3 elements: - keyIdentifier - authorityCertIssuer - authorityCertSerialNumber (X.509 mandates that the last 2

Re: [openssl-dev] [openssl.org #2879] Bug report - X509_check_akid() incorrectly handles dirName:

2012-09-13 Thread Erwann Abalea via RT
Bonjour, The goal of this function is to determine if a given authorityKeyIdentifier extension matches an issuer certificate (issuer=authority). The AKI extension can contain 3 elements: - keyIdentifier - authorityCertIssuer - authorityCertSerialNumber (X.509 mandates that the last 2

Re: [openssl-dev] [openssl.org #2879] Bug report - X509_check_akid() incorrectly handles dirName:

2012-09-13 Thread David Shambroom via RT
Thank you for the correction. Obviously the the authorityCertIssuer must correspond to the authorityCertSerialNumber. Please close this ticket. On 9/13/2012 4:40 AM, Erwann Abalea via RT wrote: Bonjour, The goal of this function is to determine if a given authorityKeyIdentifier extension

how to check the whether openssl which is built for has the all chiper suite required

2012-09-13 Thread Indtiny s
Hi, I have added the AES-ECC-CCM chiper suite openssl downloaded from this site https://github.com/aluvalassuman/OpenSSL1.0.1cForAndroid . after I ran androi-ndk build and I got the 4 shared libraries *libssl.so,libcrypto.so, openssl,ssltest* . now I have to check the chiper suite which I

Re: [openssl-dev] [openssl.org #2879] Bug report - X509_check_akid() incorrectly handles dirName:

2012-09-13 Thread David Shambroom
Thank you for the correction. Obviously the the authorityCertIssuer must correspond to the authorityCertSerialNumber. Please close this ticket. On 9/13/2012 4:40 AM, Erwann Abalea via RT wrote: Bonjour, The goal of this function is to determine if a given authorityKeyIdentifier extension

Re: [openssl.org #2879] AutoReply: Bug report - X509_check_akid() incorrectly handles dirName:

2012-09-13 Thread David Shambroom via RT
Please close this ticket. It is wrong. On 9/13/2012 3:15 AM, The default queue via RT wrote: Greetings, This message has been automatically generated in response to the creation of a trouble ticket regarding: Bug report - X509_check_akid() incorrectly handles dirName:, a summary of