summaryrefslogtreecommitdiff
path: root/sys/dev
diff options
context:
space:
mode:
authorchristos <christos@NetBSD.org>2015-07-09 14:15:22 +0000
committerchristos <christos@NetBSD.org>2015-07-09 14:15:22 +0000
commit2a80e24d5706eb680c2a44239c7d08c1341f0fd8 (patch)
tree2c5f1d07da7f195453d151683217160aadcd032c /sys/dev
parentd5705ee50adb389cca0dde32d18e74ca5f7d12ab (diff)
Import 1.0.1p to fix:
*) Alternate chains certificate forgery During certificate verfification, OpenSSL will attempt to find an alternative certificate chain if the first attempt to build such a chain fails. An error in the implementation of this logic can mean that an attacker could cause certain checks on untrusted certificates to be bypassed, such as the CA flag, enabling them to use a valid leaf certificate to act as a CA and "issue" an invalid certificate. This issue was reported to OpenSSL by Adam Langley/David Benjamin (Google/BoringSSL). [Matt Caswell]
Diffstat (limited to 'sys/dev')
0 files changed, 0 insertions, 0 deletions