[Date Prev][Date Next] [Chronological] [Thread] [Top]

(ITS#5151) certificateListValidate rejects valid lists

Full_Name: Howard Chu
Version: HEAD/re24
URL: ftp://ftp.openldap.org/incoming/
Submission from: (NULL) (
Submitted by: hyc

I ran into a couple problems; the check for timestamps doesn't take into account
that Time is a CHOICE of UTCTime and GeneralizedTime. Also the check for the
revocation list doesn't verify that it's a SEQUENCE OF SEQUENCE, so it
mistakenly skips over closing signatureAlgorithm if the revocation list is
absent. Will be fixed in HEAD shortly.