Bug#513534: isakmpd: Does not properly check the return value of X509_verify

2009-01-30 Thread Jochen Friedrich
Hi Kurt, I was looking at return codes for applications making use of openssl functions and found this in x509.c: if (X509_verify(cert, key) == -1) { log_print(x509_cert_validate: self-signed cert is bad); return 0; } X509_verify returns

Bug#513534: isakmpd: Does not properly check the return value of X509_verify

2009-01-29 Thread Kurt Roeckx
Package: isakmpd Severity: serious Tags: security Hi, I was looking at return codes for applications making use of openssl functions and found this in x509.c: if (X509_verify(cert, key) == -1) { log_print(x509_cert_validate: self-signed cert is bad);