This was already requested in #2049
/Ann.
***************************************************
issue:
X509 certificate serial numbers are displayed as negative,
e.g. in
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
solution:
drop the comparision with 0 and check whether or not the serial is of
ASN1_NEG_INTEGER type
patch:
--- crypto/asn1/t_x509.c 2011-10-10 02:00:19.000000000 +0200
+++ t_x509.c 2011-12-14 13:57:56.043220700 +0100
@@ -142,5 +142,5 @@
{
l=ASN1_INTEGER_get(bs);
- if (l < 0)
+ if (bs->type == V_ASN1_NEG_INTEGER)
{
l= -l;
______________________________________________________________________
OpenSSL Project http://www.openssl.org
Development Mailing List openssl-dev@openssl.org
Automated List Manager majord...@openssl.org
