OpenSSL Security Advisory

Re:OpenSSL Security Advisory by jamescun on Thursday March 25, 2021 @10:29AM (#26580729)

So if I am reading this right, in addition to a null dereference, turning on strict certificate validation actually disabled the check asserting that non-CA certificates cannot issue other certificates?

[ Parent | on HN ]

Re:OpenSSL Security Advisory by AlphaWeaver on Thursday March 25, 2021 @11:32AM (#26581499)

Correct, but only in the rare case where the "purpose" value has been overridden to be empty.

[ Parent | on HN ]