> This was already requested in #2049
> /Ann.
> ***************************************************
> issue:
> X509 certificate serial numbers are displayed as negative,
> e.g. in
> -----BEGIN CERTIFICATE-----
> MIIB2zCCAUSgAwIBAgIFAKoSExQwDQYJKoZIhvcNAQEFBQAwNTEzMDEGA1UEAxMq
> TmVnU2VyaWFsIFBLSSBSb290IENlcnRpZmljYXRpb24gQXV0aG9yaXR5MB4XDTA3
> MTIyODA5NTA1MloXDTEwMTIzMTExNTkwMFowLzELMAkGA1UEBhMCVVQxIDAeBgNV
> BAMTF05lZ1NlcmlhbCBQS0kgVXRvcGlhIENBMIGeMA0GCSqGSIb3DQEBAQUAA4GM
> ADCBiAKBgQC1hZUNUa0lyv5ttAn7ZRyfI4zO+Bc2fmTilpAIBfJ/2yqfdHKCd/r2
> czeCme85S298uhCrDtKZXQp6wZpxGsZrZw5n8mrXVVy6HUTFTyKapz/4W3vS0f3f
> KljpUioJ9lBUwQyARDcNzCP63+Iv9OqrHgb4QoSfmDlrX5KmaGDavQICAQEwDQYJ
> KoZIhvcNAQEFBQADgYEAu9se/fhAmSALMn3a2vEJaQaZ5qEYVDxlAIWWB5oAjl3Y
> Hwr1dUnsh26gRPGr569Z8NqJQEdqFDpzagL26G6ojsV9+wGftlCOZy3UF9Ip0VLJ
> pOX/VRfeF65foy7GoTkBuGPx9EsbXJzZ/ygab947O5yIAqr6bibMh7i1ZDcpnac=
> -----END CERTIFICATE-----
>
> solution:
> drop the comparision with 0 and check whether or not the serial is of
> ASN1_NEG_INTEGER type
>
> patch:
> --- crypto/asn1/t_x509.c 2011-10-10 02:00:19.000000000 +0200
> +++ t_x509.c 2011-12-14 13:57:56.043220700 +0100
> @@ -142,5 +142,5 @@
> {
> l=ASN1_INTEGER_get(bs);
> - if (l < 0)
> + if (bs->type == V_ASN1_NEG_INTEGER)
> {
> l= -l;
>
http://cvs.openssl.org/chngview?cn=22000. thank you for report.
______________________________________________________________________
OpenSSL Project http://www.openssl.org
Development Mailing List [email protected]
Automated List Manager [email protected]
