diff options
| author | Brent Cook <busterb@gmail.com> | 2021-09-30 19:47:13 -0500 |
|---|---|---|
| committer | Brent Cook <busterb@gmail.com> | 2021-09-30 19:47:13 -0500 |
| commit | 7fc7656ede488673a50c0234a36379f3165fa2dd (patch) | |
| tree | 9b849057c04473e7b6f54cb2a1acff2bc5fe2a30 | |
| parent | 73329bba767a0dd602b2ab514c2a81d6dc43252b (diff) | |
| download | portable-OPENBSD_6_8.tar.gz portable-OPENBSD_6_8.tar.bz2 portable-OPENBSD_6_8.zip | |
add X509_V_FLAG_TRUSTED_FIRST fixv3.2.7OPENBSD_6_8
| -rw-r--r-- | ChangeLog | 3 |
1 files changed, 3 insertions, 0 deletions
| @@ -33,6 +33,9 @@ LibreSSL Portable Release Notes: | |||
| 33 | * A stack overread could occur when checking X.509 name constraints. | 33 | * A stack overread could occur when checking X.509 name constraints. |
| 34 | From GoldBinocle on GitHub. | 34 | From GoldBinocle on GitHub. |
| 35 | 35 | ||
| 36 | * Enable X509_V_FLAG_TRUSTED_FIRST by default in the legacy verifier. | ||
| 37 | This compensates for the expiry of the DST Root X3 certificate. | ||
| 38 | |||
| 36 | 3.2.6 - Security fix | 39 | 3.2.6 - Security fix |
| 37 | 40 | ||
| 38 | * In LibreSSL, printing a certificate can result in a crash in | 41 | * In LibreSSL, printing a certificate can result in a crash in |