Re: Subject Issuer Mismatch Bug!!

2009-10-30 Thread Peter Sylvester
We have in apps/ in x509.c print_name(STDout, "issuer= ", X509_get_issuer_name(x), nmflag); in crl.c print_name(bio_out, "issuer=", X509_CRL_get_issuer(x), nmflag); In order to make a fair change that will potentially hurt everyone, I propos

Re: Subject Issuer Mismatch Bug!!

2009-10-30 Thread Dr. Stephen Henson
On Fri, Oct 30, 2009, Dr. Stephen Henson wrote: > On Fri, Oct 30, 2009, Daniel Marschall wrote: > > > 2009/10/30 Dr. Stephen Henson : > > > On Fri, Oct 30, 2009, Daniel Marschall wrote: > > > > > >> > > >> > > > >> > 2) When you enable informational messages, you get accurate > > >> > informatio

Re: Subject Issuer Mismatch Bug!!

2009-10-30 Thread Dr. Stephen Henson
On Fri, Oct 30, 2009, Daniel Marschall wrote: > 2009/10/30 Dr. Stephen Henson : > > On Fri, Oct 30, 2009, Daniel Marschall wrote: > > > >> > >> > > >> > 2) When you enable informational messages, you get accurate informational > >> > messages. > >> > >> Please tell me, why it isn't a bug! I don't

Re: Subject Issuer Mismatch Bug!!

2009-10-30 Thread Daniel Marschall
2009/10/30 Dr. Stephen Henson : > On Fri, Oct 30, 2009, Daniel Marschall wrote: > >> >> > >> > 2) When you enable informational messages, you get accurate informational >> > messages. >> >> Please tell me, why it isn't a bug! I don't understand it. In my case >> and also in the uncleared case of He

Re: Subject Issuer Mismatch Bug!!

2009-10-30 Thread Dr. Stephen Henson
On Fri, Oct 30, 2009, Daniel Marschall wrote: > > > > > 2) When you enable informational messages, you get accurate informational > > messages. > > Please tell me, why it isn't a bug! I don't understand it. In my case > and also in the uncleared case of Helga Krause, the CRL was issued by > Pers

Re: Subject Issuer Mismatch Bug!!

2009-10-30 Thread Daniel Marschall
2009/10/29 David Schwartz : > > Daniel Marschall: > >> Hello. >> >> I am not searching bugs in my code. I have a certificate and a CRL. >> And the functionality -issuer_checks is buggy. My cert and CRL have >> exactky the same DN as issuer. > > What is the bug then? All you've reported so far is:

RE: Subject Issuer Mismatch Bug!!

2009-10-29 Thread David Schwartz
Daniel Marschall: > Hello. > > I am not searching bugs in my code. I have a certificate and a CRL. > And the functionality -issuer_checks is buggy. My cert and CRL have > exactky the same DN as issuer. What is the bug then? All you've reported so far is: 1) When you compare using exact string

Re: Subject Issuer Mismatch Bug!!

2009-10-28 Thread Daniel Marschall
Hello. I am not searching bugs in my code. I have a certificate and a CRL. And the functionality -issuer_checks is buggy. My cert and CRL have exactky the same DN as issuer. 2009/10/28 David Schwartz : > Daniel Marschall wrote: > >> Any idea? This problem exists since 2003 and noone found an answ

RE: Subject Issuer Mismatch Bug!!

2009-10-27 Thread David Schwartz
Daniel Marschall wrote: > Any idea? This problem exists since 2003 and noone found an answer - > this is unbelievable. If you're waiting for somebody else to find a bug in *your* code, you're going to be waiting a long time. Comparing the text strings for literal equality makes no logical sense

Re: Subject Issuer Mismatch Bug!!

2009-10-27 Thread Dr. Stephen Henson
On Tue, Oct 27, 2009, Daniel Marschall wrote: > Any idea? This problem exists since 2003 and noone found an answer - > this is unbelievable. > > > > > Yes, without that flag, the certificate is valid ("OK"). I know, that > > the issuer-name-errors are actually not really errors, but warnings. > >

Re: Subject Issuer Mismatch Bug!!

2009-10-27 Thread Daniel Marschall
Any idea? This problem exists since 2003 and noone found an answer - this is unbelievable. 2009/10/26 Daniel Marschall : > 2009/10/25, Dr. Stephen Henson : >> On Sun, Oct 25, 2009, Daniel Marschall wrote: >> >> > Hello. >> > >> > I have a problem with verification of certificates. >> > >> > My com

Re: Subject Issuer Mismatch Bug!!

2009-10-25 Thread Daniel Marschall
2009/10/25, Dr. Stephen Henson : > On Sun, Oct 25, 2009, Daniel Marschall wrote: > > > Hello. > > > > I have a problem with verification of certificates. > > > > My command line is: > > > > openssl verify -verbose -issuer_checks -crl_check_all -CAfile > > tmp_cachain.pem daniel-marschall.crt > > >

Re: Subject Issuer Mismatch Bug!!

2009-10-25 Thread Dr. Stephen Henson
On Sun, Oct 25, 2009, Daniel Marschall wrote: > Hello. > > I have a problem with verification of certificates. > > My command line is: > > openssl verify -verbose -issuer_checks -crl_check_all -CAfile > tmp_cachain.pem daniel-marschall.crt > Do you get an error without -issuer_checks? As the