[openssl.org #3349] Bug report: X509_check_akid() identifies non-self-signed certificate as its own issuer

2014-06-01 Thread Stephen Henson via RT
On Fri May 09 09:59:51 2014, s...@pdflib.com wrote: Am 09.05.14 00:53, schrieb Stephen Henson via RT: On Thu May 08 15:49:11 2014, s...@pdflib.com wrote: I can confirm that with this patch applied my use case with X509_verify_cert() works as expected (misidentification of signing

[openssl.org #3349] Bug report: X509_check_akid() identifies non-self-signed certificate as its own issuer

2014-05-09 Thread Stephan Mühlstrasser via RT
Am 09.05.14 00:53, schrieb Stephen Henson via RT: On Thu May 08 15:49:11 2014, s...@pdflib.com wrote: I can confirm that with this patch applied my use case with X509_verify_cert() works as expected (misidentification of signing certificate as CRL issuer no longer occurs). Could you give

[openssl.org #3349] Bug report: X509_check_akid() identifies non-self-signed certificate as its own issuer

2014-05-08 Thread Stephan Mühlstrasser via RT
I posted this test case for function X509_check_akid() on the openssl-users mailing list, but got no reaction, therefore I'm submitting it now as a defect for triaging. Test case: 1) Certificate that has an Authority Key Identifier extension (save as file testcert.pem): -BEGIN

[openssl.org #3349] Bug report: X509_check_akid() identifies non-self-signed certificate as its own issuer

2014-05-08 Thread Stephen Henson via RT
On Thu May 08 15:49:11 2014, s...@pdflib.com wrote: I can confirm that with this patch applied my use case with X509_verify_cert() works as expected (misidentification of signing certificate as CRL issuer no longer occurs). Could you give me more details of this case? If possible if you