> This was already requested in #2049 > /Ann. > *************************************************** > issue: > X509 certificate serial numbers are displayed as negative, > e.g. in > -----BEGIN CERTIFICATE----- > MIIB2zCCAUSgAwIBAgIFAKoSExQwDQYJKoZIhvcNAQEFBQAwNTEzMDEGA1UEAxMq > TmVnU2VyaWFsIFBLSSBSb290IENlcnRpZmljYXRpb24gQXV0aG9yaXR5MB4XDTA3 > MTIyODA5NTA1MloXDTEwMTIzMTExNTkwMFowLzELMAkGA1UEBhMCVVQxIDAeBgNV > BAMTF05lZ1NlcmlhbCBQS0kgVXRvcGlhIENBMIGeMA0GCSqGSIb3DQEBAQUAA4GM > ADCBiAKBgQC1hZUNUa0lyv5ttAn7ZRyfI4zO+Bc2fmTilpAIBfJ/2yqfdHKCd/r2 > czeCme85S298uhCrDtKZXQp6wZpxGsZrZw5n8mrXVVy6HUTFTyKapz/4W3vS0f3f > KljpUioJ9lBUwQyARDcNzCP63+Iv9OqrHgb4QoSfmDlrX5KmaGDavQICAQEwDQYJ > KoZIhvcNAQEFBQADgYEAu9se/fhAmSALMn3a2vEJaQaZ5qEYVDxlAIWWB5oAjl3Y > Hwr1dUnsh26gRPGr569Z8NqJQEdqFDpzagL26G6ojsV9+wGftlCOZy3UF9Ip0VLJ > pOX/VRfeF65foy7GoTkBuGPx9EsbXJzZ/ygab947O5yIAqr6bibMh7i1ZDcpnac= > -----END CERTIFICATE----- > > solution: > drop the comparision with 0 and check whether or not the serial is of > ASN1_NEG_INTEGER type > > patch: > --- crypto/asn1/t_x509.c 2011-10-10 02:00:19.000000000 +0200 > +++ t_x509.c 2011-12-14 13:57:56.043220700 +0100 > @@ -142,5 +142,5 @@ > { > l=ASN1_INTEGER_get(bs); > - if (l < 0) > + if (bs->type == V_ASN1_NEG_INTEGER) > { > l= -l; >
http://cvs.openssl.org/chngview?cn=22000. thank you for report. ______________________________________________________________________ OpenSSL Project http://www.openssl.org Development Mailing List openssl-dev@openssl.org Automated List Manager majord...@openssl.org