diff options
| author | Bob Beck <[email protected]> | 2026-09-04 01:28:44 +0200 |
|---|---|---|
| committer | Tomas Mraz <[email protected]> | 2026-09-17 18:44:11 +0200 |
| commit | 403dbe58caa08b30ed2c63dca42db5d952a6ae32 (patch) | |
| tree | 2b280b24cc7d93fd5e7faa5294f02ccb51d7b48c /include | |
| parent | Make the cached CRL fingerprint internal-only (diff) | |
| download | openssl-403dbe58caa08b30ed2c63dca42db5d952a6ae32.tar.gz openssl-403dbe58caa08b30ed2c63dca42db5d952a6ae32.zip | |
Compute X509_get_signature_info() on demand, not in the cache
The signature info was computed once by ossl_x509v3_cache_extensions()
and stored in X509::siginf. Its security bits depend on a digest fetch
under the certificate's libctx/propq, so the cached answer was frozen
to the context the certificate was parsed in.
Compute it in X509_get_signature_info() instead. The siginf field and
ossl_x509_init_sig_info() are removed.
Reviewed-by: Mounir Idrassi <[email protected]>
Reviewed-by: Nikola Pajkovsky <[email protected]>
Merge-date: Thu Sep 17 16:44:34 2026
Merged-from: https://github.com/openssl/openssl/pull/32686
Diffstat (limited to 'include')
| -rw-r--r-- | include/crypto/x509.h | 2 |
1 files changed, 0 insertions, 2 deletions
diff --git a/include/crypto/x509.h b/include/crypto/x509.h index bb575b57a52..515ea155309 100644 --- a/include/crypto/x509.h +++ b/include/crypto/x509.h @@ -178,7 +178,6 @@ struct x509_st { X509_CINF cert_info; X509_ALGOR sig_alg; ASN1_BIT_STRING signature; - X509_SIG_INFO siginf; CRYPTO_REF_COUNT references; CRYPTO_EX_DATA ex_data; /* These contain copies of various extension values */ @@ -318,7 +317,6 @@ int ossl_a2i_ipadd(unsigned char *ipout, const char *ipasc); int ossl_x509_set1_time(int *modified, ASN1_TIME **ptm, const ASN1_TIME *tm); int ossl_x509_print_ex_brief(BIO *bio, const X509 *cert, unsigned long neg_cflags); int ossl_x509v3_cache_extensions(const X509 *x); -int ossl_x509_init_sig_info(const X509 *x, X509_SIG_INFO *info); /** * @brief Compute the internal-use fingerprint of a DER-encodable object. |