X509_cmp(): Fix comparison in case x509v3_cache_extensions() failed to due to invalid...
authorDr. David von Oheimb <David.von.Oheimb@siemens.com>
Wed, 30 Dec 2020 08:57:49 +0000 (09:57 +0100)
committerDr. David von Oheimb <dev@ddvo.net>
Thu, 14 Jan 2021 13:36:09 +0000 (14:36 +0100)
commitfb1e2411042f0367c2560e4ec5e4b1189ca9cd45
tree76ff10c7eecdbbddaeda44c71d0ede617c2db80c
parent2a9785c252df6836da90da33aaeed8edb506e556
X509_cmp(): Fix comparison in case x509v3_cache_extensions() failed to due to invalid cert

This is the backport of #13755 to v1.1.1.
Fixes #13698

Reviewed-by: Tomas Mraz <tmraz@fedoraproject.org>
(Merged from https://github.com/openssl/openssl/pull/13756)
crypto/x509/x509_cmp.c
crypto/x509/x_all.c
crypto/x509v3/v3_purp.c
doc/man3/X509_get_extension_flags.pod
include/openssl/x509v3.h
test/certs/invalid-cert.pem [new file with mode: 0644]
test/recipes/80-test_x509aux.t
test/x509aux.c