Skip to content

Conversation

@kareem-wolfssl
Copy link
Contributor

@kareem-wolfssl kareem-wolfssl commented Mar 9, 2023

Description

Fix not ignoring date errors when VERIFY_SKIP_DATE is set
Fix unit test failure when building OPENSSL_EXTRA without HAVE_EXT_CACHE.
Allow alternative absolute URI syntax in certificate general name.

Fixes zd# 15767 15773 15751

Testing

Built in tests

Checklist

  • added tests
  • updated/added doxygen
  • updated appropriate READMEs
  • Updated manual and documentation

Copy link
Contributor

@JacobBarthelmeh JacobBarthelmeh left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

We need some regression tests added for these issues.

@kareem-wolfssl
Copy link
Contributor Author

We need some regression tests added for these issues.

Added unit test for absolute URN case.
For the first issue, it looks like there is already a test for the failing case of loading an expired CA cert with wolfSSL_CTX_load_verify_buffer_ex using WOLFSSL_LOAD_FLAG_DATE_ERR_OKAY. I am not clear why this was not failing.

@JacobBarthelmeh
Copy link
Contributor

Please update the renewcerts.sh script in this PR too for the new certificate. The goal is that running that one script updates all of the certificates in ./certs directory.

@kareem-wolfssl
Copy link
Contributor Author

Woops, had that updated but git lost track of it. Fixed.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

For This Release Release version 5.8.4

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants