Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Wrong OpenSSL validation result for the unable_to_get_crl case #127

Open
zacikpa opened this issue Nov 29, 2021 · 1 comment
Open

Wrong OpenSSL validation result for the unable_to_get_crl case #127

zacikpa opened this issue Nov 29, 2021 · 1 comment
Labels
bug Something isn't working libraries Matters and possible bugs in the libaries

Comments

@zacikpa
Copy link
Contributor

zacikpa commented Nov 29, 2021

OpenSSL does not return any error message for the unable_to_get_crl example chain.
It should return X509_­V_­ERR_­UNABLE_­TO_­GET_­CRL.

Possible culprit might be the load_cert_crl_http function in validation/client/openssl/client.c. Its return value might not be processed properly.
@zacikpa zacikpa added the bug Something isn't working label Nov 29, 2021
@mukrop mukrop added the libraries Matters and possible bugs in the libaries label Nov 29, 2021
@mukrop
Copy link
Member

mukrop commented Nov 29, 2021

Nice catch, may be a possible bug in the library. Worth investigating.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Assignees
No one assigned
Labels
bug Something isn't working libraries Matters and possible bugs in the libaries
Projects
None yet
Milestone
No milestone
Development

No branches or pull requests
2 participants
@mukrop @zacikpa