Skip to Content.
Sympa Menu

sm-commit - [SM-Commit] GIT changes to master grimoire by Vlad Glagolev (c5b03496e0670d56b3a4ea4c4e215e41c3049c6e)

sm-commit AT lists.ibiblio.org

Subject: Source Mage code commit list

List archive

Chronological Thread  
  • From: Vlad Glagolev <scm AT sourcemage.org>
  • To: sm-commit AT lists.ibiblio.org
  • Subject: [SM-Commit] GIT changes to master grimoire by Vlad Glagolev (c5b03496e0670d56b3a4ea4c4e215e41c3049c6e)
  • Date: Tue, 5 Oct 2021 21:44:43 +0000

GIT changes to master grimoire by Vlad Glagolev <stealth AT sourcemage.org>:

crypto/libressl/HISTORY
| 4 +

crypto/libressl/patches-3.3/fix-compatibility-with-pre-rfc-5280-certificates.patch
| 30 +++++++++-
2 files changed, 33 insertions(+), 1 deletion(-)

New commits:
commit c5b03496e0670d56b3a4ea4c4e215e41c3049c6e
Author: Vlad Glagolev <stealth AT sourcemage.org>
Commit: Vlad Glagolev <stealth AT sourcemage.org>

libressl: replace patch symlink with a real file copy

diff --git a/crypto/libressl/HISTORY b/crypto/libressl/HISTORY
index 9724126..6ffd4c0 100644
--- a/crypto/libressl/HISTORY
+++ b/crypto/libressl/HISTORY
@@ -1,3 +1,7 @@
+2021-10-05 Vlad Glagolev <stealth AT sourcemage.org>
+ * patches-3.3/fix-compatibility-with-pre-rfc-5280-certificates.patch:
+ becomes a real file as rsync-friendly
+
2021-10-03 Pavel Vinogradov <public AT sourcemage.org>
* DETAILS: versions 3.3.5 and 3.2.7

diff --git
a/crypto/libressl/patches-3.3/fix-compatibility-with-pre-rfc-5280-certificates.patch

b/crypto/libressl/patches-3.3/fix-compatibility-with-pre-rfc-5280-certificates.patch
deleted file mode 120000
index 890bdd2..0000000
---
a/crypto/libressl/patches-3.3/fix-compatibility-with-pre-rfc-5280-certificates.patch
+++ /dev/null
@@ -1 +0,0 @@
-../patches-3.2/fix-compatibility-with-pre-rfc-5280-certificates.patch
\ No newline at end of file
diff --git
a/crypto/libressl/patches-3.3/fix-compatibility-with-pre-rfc-5280-certificates.patch

b/crypto/libressl/patches-3.3/fix-compatibility-with-pre-rfc-5280-certificates.patch
new file mode 100644
index 0000000..d4bbe02
--- /dev/null
+++
b/crypto/libressl/patches-3.3/fix-compatibility-with-pre-rfc-5280-certificates.patch
@@ -0,0 +1,29 @@
+From 405a4a7f3e60310095d7ef244e69d9acccc12322 Mon Sep 17 00:00:00 2001
+From: Ismael Luceno <ismael AT iodev.co.uk>
+Date: Sun, 1 Nov 2020 01:59:11 +0100
+Subject: [PATCH for 3.2] Fix compatibility with pre-RFC-5280 certificates
+
+Allow GENERALIZEDTIME for dates before 2050, it isn't a security issue, and
+enables interoperability with older software.
+
+Based on a patch by Johan de Vries <devries AT wivion.nl>.
+---
+ crypto/x509/x509_verify.c | 3 +++
+ 1 files changed, 3 insertions(+)
+
+diff --git a/crypto/x509/x509_verify.c b/crypto/x509/x509_verify.c
+index 0c32cd04b741..3dda41ea825f 100644
+--- a/crypto/x509/x509_verify.c
++++ b/crypto/x509/x509_verify.c
+@@ -522,6 +522,9 @@ x509_verify_asn1_time_to_tm(const ASN1_TIME *atime,
struct tm *tm, int notafter)
+ if (type == -1)
+ return 0;
+
++ /* Allow GENERALIZEDTIME for dates before 2050, it isn't a security
++ * issue, and enables interoperability with older software. */
++ if (type != V_ASN1_GENERALIZEDTIME)
+ /* RFC 5280 section 4.1.2.5 */
+ if (tm->tm_year < 150 && type != V_ASN1_UTCTIME)
+ return 0;
+--
+2.28.0



  • [SM-Commit] GIT changes to master grimoire by Vlad Glagolev (c5b03496e0670d56b3a4ea4c4e215e41c3049c6e), Vlad Glagolev, 10/05/2021

Archive powered by MHonArc 2.6.24.

Top of Page