diff options
| author | Brent Cook <busterb@gmail.com> | 2021-09-30 19:02:38 -0500 |
|---|---|---|
| committer | Brent Cook <busterb@gmail.com> | 2021-09-30 19:02:38 -0500 |
| commit | 3ddc2fd406cbcb58b64f30ffae684dc5b7a34469 (patch) | |
| tree | 27dd5c38aef613e3dcc1900eab2b230a6f407964 | |
| parent | 36522f142cd55750fb382de288f2b21e36f9ab2a (diff) | |
| download | portable-3.3.5.tar.gz portable-3.3.5.tar.bz2 portable-3.3.5.zip | |
add X509_V_FLAG_TRUSTED_FIRST fixv3.3.5
| -rw-r--r-- | ChangeLog | 3 |
1 files changed, 3 insertions, 0 deletions
| @@ -33,6 +33,9 @@ LibreSSL Portable Release Notes: | |||
| 33 | * A stack overread could occur when checking X.509 name constraints. | 33 | * A stack overread could occur when checking X.509 name constraints. |
| 34 | From GoldBinocle on GitHub. | 34 | From GoldBinocle on GitHub. |
| 35 | 35 | ||
| 36 | * Enable X509_V_FLAG_TRUSTED_FIRST by default in the legacy verifier. | ||
| 37 | This compensates for the expiry of the DST Root X3 certificate. | ||
| 38 | |||
| 36 | 3.3.4 - Security fix | 39 | 3.3.4 - Security fix |
| 37 | 40 | ||
| 38 | * In LibreSSL, printing a certificate can result in a crash in | 41 | * In LibreSSL, printing a certificate can result in a crash in |