CVSROOT: /cvs Module name: src Changes by: d...@cvs.openbsd.org 2014/06/23 18:52:02
Modified files:
usr.bin/ssh : krl.c
Log message:
fix bug in KRL generation: multiple consecutive revoked certificate
serial number ranges could be serialised to an invalid format.
Readers of a broken KRL caused by this bug will fail closed, so no
should-have-been-revoked key will be accepted.
