usable-cert-validation icon indicating copy to clipboard operation
usable-cert-validation copied to clipboard

Published 20 hours ago • verified publisher icon crocs-muni

Wrong OpenSSL validation result for the unable_to_get_crl case

Open zacikpa opened this issue 3 years ago • 1 comments

OpenSSL does not return any error message for the unable_to_get_crl example chain. It should return X509_­V_­ERR_­UNABLE_­TO_­GET_­CRL.

Possible culprit might be the load_cert_crl_http function in validation/client/openssl/client.c. Its return value might not be processed properly.

zacikpa avatar Nov 29 '21 10:11 zacikpa

Nice catch, may be a possible bug in the library. Worth investigating.

mukrop avatar Nov 29 '21 14:11 mukrop