diff options
| author | Tomas Mraz <tmraz@fedoraproject.org> | 2020-09-11 09:09:29 +0200 |
|---|---|---|
| committer | Tomas Mraz <tmraz@fedoraproject.org> | 2020-09-17 17:15:15 +0200 |
| commit | cccf532fef10aaa2d682227061b8828a1eb2c031 (patch) | |
| tree | eebff041321fc8ca671a21369395370e806175d2 /test/certs/ee-key-ec-named-explicit.pem | |
| parent | EC_KEY: add EC_KEY_decoded_from_explicit_params() (diff) | |
| download | openssl-cccf532fef10aaa2d682227061b8828a1eb2c031.tar.xz openssl-cccf532fef10aaa2d682227061b8828a1eb2c031.zip | |
Disallow certs with explicit curve in verification chain
The check is applied only with X509_V_FLAG_X509_STRICT.
Fixes #12139
Reviewed-by: David von Oheimb <david.von.oheimb@siemens.com>
Reviewed-by: Nicola Tuveri <nic.tuv@gmail.com>
(Merged from https://github.com/openssl/openssl/pull/12683)
Diffstat (limited to 'test/certs/ee-key-ec-named-explicit.pem')
| -rw-r--r-- | test/certs/ee-key-ec-named-explicit.pem | 5 |
1 files changed, 5 insertions, 0 deletions
diff --git a/test/certs/ee-key-ec-named-explicit.pem b/test/certs/ee-key-ec-named-explicit.pem new file mode 100644 index 0000000000..28f81e9569 --- /dev/null +++ b/test/certs/ee-key-ec-named-explicit.pem @@ -0,0 +1,5 @@ +-----BEGIN PRIVATE KEY----- +MIGHAgEAMBMGByqGSM49AgEGCCqGSM49AwEHBG0wawIBAQQg2ue+X5ZFJPJPQG2E +WQY4ALv2PkPp2Gy6KrMiokgmjkehRANCAAQv5PnMStW/Wx9lpvjlJTsFIjc2wBv1 +4sNuMh1hfNX8ZJcoCfAAKYu6ujxXt328GWBMaubRbBjOd/eqpEsttYKz +-----END PRIVATE KEY----- |