summaryrefslogtreecommitdiff
path: root/src/lib/libcrypto/man/OpenSSL_add_all_algorithms.3
diff options
context:
space:
mode:
authorjob <>2023-04-30 16:46:49 +0000
committerjob <>2023-04-30 16:46:49 +0000
commitf31a437549264c66096a997ee2e4d7b4afecefb1 (patch)
treead7b978bb12f503e60d7814271c73dd39bc8d116 /src/lib/libcrypto/man/OpenSSL_add_all_algorithms.3
parentb84d7c53fec2427d8d237f4cef51f1aeb76d4cf7 (diff)
downloadopenbsd-f31a437549264c66096a997ee2e4d7b4afecefb1.tar.gz
openbsd-f31a437549264c66096a997ee2e4d7b4afecefb1.tar.bz2
openbsd-f31a437549264c66096a997ee2e4d7b4afecefb1.zip
Revert disablement of the encoding cache
Without the cache, we verify CRL signatures on bytes that have been pulled through d2i_ -> i2d_, this can cause reordering, which in turn invalidates the signature. for example if in the original CRL revocation entries were sorted by date instead of ascending serial number order. There are probably multiple things we can do here, but they will need careful consideration and planning. OK jsing@
Diffstat (limited to 'src/lib/libcrypto/man/OpenSSL_add_all_algorithms.3')
0 files changed, 0 insertions, 0 deletions