Age | Commit message (Collapse) | Author |
|
|
|
|
|
|
|
|
|
Report & fix from James <list@xdrv.co.uk>; additional tidying and testcase by JGH
Broken-by: acec9514b1
|
|
directories. Bug 2213
|
|
This is because we cannot do the required CA-anchor and names checks for TA-mode
and not for EE-mode, without knowing which usage TLSA was used.
|
|
|
|
|
|
|
|
|
|
|
|
|
|
Not quite right for a mixed TA+EE set of TLSA records, but better than always-enforcing
|
|
|
|
|
|
|
|
GnuTLS version 3.0.0 onwards; still Experimental
|
|
OpenSSL 1.0.1t is known bad. 1.0.2 and 1.1.0 are apparently ok.
|
|
|
|
|
|
|
|
|
|
Issue found by: Frank Elsner
|
|
|
|
|
|
Broken-by: 838d897c8e
|
|
|
|
|
|
|
|
|
|
|
|
Broken-by: 838d897c8e
|
|
|
|
configured
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
The new store_newblock() includes the required safety checck, plus the alocate
and data-copy operations.
|
|
|
|
|
|
|
|
|
|
|
|
|
|
OpenBSD seems to prioritize the child of a fork; Linux & FreeBSD the parent
|