<<< Date Index >>>     <<< Thread Index >>>

Re: [Mutt] #3426: certificate validation fails with openssl



Am 29.06.2010, 20:10 Uhr, schrieb Mutt:

#3426: certificate validation fails with openssl
--------------------------+-------------------------------------------------
 Reporter:  ph030         |       Owner:  mutt-dev
     Type:  defect        |      Status:  new
 Priority:  major         |   Milestone:
Component:  mutt          |     Version:  1.5.20
 Keywords:  openssl cert  |
--------------------------+-------------------------------------------------

Comment(by ph030):

 Thank you, julm, I'll see if I can apply it.


The patch appears to be in reverse, but is required to unbreak subject alternative name matching. Mutt, with Thomas Hoger's patch, mistakenly compares the strlen of the SSL structure (which is ill-defined and bogus) against the payload ->length.

I've just sent a new hg patch to mutt-dev@

--
Matthias Andree