Bug#513534: isakmpd: Does not properly check the return value of X509_verify

2009-01-30 Thread Jochen Friedrich
Hi Kurt, > I was looking at return codes for applications making use of > openssl functions and found this in x509.c: > if (X509_verify(cert, key) == -1) { > log_print("x509_cert_validate: self-signed cert is bad"); > return 0; > } > > X509_verify r

Bug#513534: isakmpd: Does not properly check the return value of X509_verify

2009-01-29 Thread Kurt Roeckx
Package: isakmpd Severity: serious Tags: security Hi, I was looking at return codes for applications making use of openssl functions and found this in x509.c: if (X509_verify(cert, key) == -1) { log_print("x509_cert_validate: self-signed cert is bad"); retu