Tomáš Mráz
Tomáš Mráz
@rsbeckerca there is an outstanding change request by @levitte
1. Ensure X509_VP_FLAG_LOCKED is not set in the source verify param with X509_VERIFY_PARAM_get_inh_flags 2. Create new X509_VERIFY_PARAM object 3. Use X509_VERIFY_PARAM_set_inh_flags to set X509_VP_FLAG_OVERWRITE|X509_VP_FLAG_RESET_FLAGS on the new object. 4. Use...
Hmm, the added function looks like a feature. Should the PR be split?
Then the documentation is incorrect as for the version this was added in. And the libcrypto.num update as well.
This needs a rebase and update since 3.0.6 was already released without this.
I do not think this PR should be actually merged to 1.1.1 branch. However we should use the known results to test against the master and 3.0 branches and fix...
Meanwhile the 1.1.1 got to the state when only security fixes are supposed to be done there.
My opinion on this one is clear - I do not think it is needed in this form.
Yes, possibility to do compile-time freezing would make sense and/or completely disable the CAP envvar support as build-time option for paranoid use-cases.
Bernd, this is simply a nonsense. If you can trick an user to use wget with a random unquoted URL with a shell, you can trick him to install a...