[openssl/openssl] 399c2d: Update X509 fuzzer to verify a chain

Kurt Roeckx noreply at github.com
Fri Sep 1 09:14:12 UTC 2023


  Branch: refs/heads/master
  Home:   https://github.com/openssl/openssl
  Commit: 399c2da08ab9c6a382f8e9950742a022e847fec0
      https://github.com/openssl/openssl/commit/399c2da08ab9c6a382f8e9950742a022e847fec0
  Author: Kurt Roeckx <kurt at roeckx.be>
  Date:   2023-09-01 (Fri, 01 Sep 2023)

  Changed paths:
    M fuzz/build.info
    M fuzz/x509.c
    M test/recipes/99-test_fuzz_x509.t

  Log Message:
  -----------
  Update X509 fuzzer to verify a chain

It add supports for verifying that it's been signed by a CA, and
checks the CRL and OCSP status

Can find CVE-2022-4203 and CVE-2023-0286

Reviewed-by: Bernd Edlinger <bernd.edlinger at hotmail.de>
Reviewed-by: Tomas Mraz <tomas at openssl.org>
Reviewed-by: Dmitry Belyavskiy <beldmit at gmail.com>
Reviewed-by: Hugo Landau <hlandau at openssl.org>
(Merged from https://github.com/openssl/openssl/pull/20243)




More information about the openssl-commits mailing list