diff options
| author | Greensi7 <[email protected]> | 2026-08-06 15:33:27 +0200 |
|---|---|---|
| committer | Andrew Dinh <[email protected]> | 2026-08-09 06:06:02 +0200 |
| commit | 1b25e3fca5772fce2edd71a6adfc306dbe254c3e (patch) | |
| tree | 02c91ca18a6e23cf7abec6a95fb2a5b578ce4c28 /include | |
| parent | Fix memory leaks in x509v3 config handling (diff) | |
| download | openssl-1b25e3fca5772fce2edd71a6adfc306dbe254c3e.tar.gz openssl-1b25e3fca5772fce2edd71a6adfc306dbe254c3e.zip | |
Reject duplicate fields in X509v3 config
Reject repeated fields in policyConstraints, basicConstraints
and basicAttConstraints instead of silently accepting the last value.
Assisted-by: ChatGPT:gpt-5.6
Reviewed-by: Viktor Dukhovni <[email protected]>
Reviewed-by: Andrew Dinh <[email protected]>
MergeDate: Sun Aug 9 04:06:37 2026
(Merged from https://github.com/openssl/openssl/pull/32181)
Diffstat (limited to 'include')
| -rw-r--r-- | include/crypto/x509v3err.h | 2 | ||||
| -rw-r--r-- | include/openssl/x509v3err.h | 3 |
2 files changed, 3 insertions, 2 deletions
diff --git a/include/crypto/x509v3err.h b/include/crypto/x509v3err.h index b3874fc4721..279acb7e612 100644 --- a/include/crypto/x509v3err.h +++ b/include/crypto/x509v3err.h @@ -1,6 +1,6 @@ /* * Generated by util/mkerr.pl DO NOT EDIT - * Copyright 2020-2021 The OpenSSL Project Authors. All Rights Reserved. + * Copyright 2020-2026 The OpenSSL Project Authors. All Rights Reserved. * * Licensed under the Apache License 2.0 (the "License"). You may not use * this file except in compliance with the License. You can obtain a copy diff --git a/include/openssl/x509v3err.h b/include/openssl/x509v3err.h index 19f938626bd..75d9e7d3e48 100644 --- a/include/openssl/x509v3err.h +++ b/include/openssl/x509v3err.h @@ -1,6 +1,6 @@ /* * Generated by util/mkerr.pl DO NOT EDIT - * Copyright 1995-2025 The OpenSSL Project Authors. All Rights Reserved. + * Copyright 1995-2026 The OpenSSL Project Authors. All Rights Reserved. * * Licensed under the Apache License 2.0 (the "License"). You may not use * this file except in compliance with the License. You can obtain a copy @@ -27,6 +27,7 @@ #define X509V3_R_BN_TO_ASN1_INTEGER_ERROR 101 #define X509V3_R_DIRNAME_ERROR 149 #define X509V3_R_DISTPOINT_ALREADY_SET 160 +#define X509V3_R_DUPLICATE_FIELD 174 #define X509V3_R_DUPLICATE_ZONE_ID 133 #define X509V3_R_EMPTY_KEY_USAGE 169 #define X509V3_R_ERROR_CONVERTING_ZONE 131 |