[openssl-dev] [openssl.org #3821] Possible bug/request for help0.9.8 on windows - OpenSSL verify error.

[陈雨亭]

Are the AKID(s) of the target certificates same as SKID(s) of the issuers?
As what I have observed and reported, OpenSSL cannot tackle such
kind of problems.

Yuting

-----Original Message----- 
From: Jason.Kubicki at wellsfargo.com via RT
Sent: Saturday, April 25, 2015 2:13 AM
Cc: openssl-dev at openssl.org
Subject: [openssl-dev] [openssl.org #3821] Possible bug/request for 
help0.9.8 on windows - OpenSSL verify error.

When I try to verify a SHA-2 certificate that chains up to a SHA-1 root I 
get error 20 at depth 0. If I leave the SHA-1 root off of the CAfile I get 
past depth 0. Verizon support was able to replicate this issue as well.

We are trying to use OpenSSL verify to check our intermediate issuing CA 
(WellsSecure CA 01 G2) against the chain with the SHA-1 Baltimore Root at 
the top of the hierarchy.

With the Baltimore root our chain looks like this:
SHA-1 Baltimore root --> SHA-2 WellsSecure Public Root --> SHA-2 WellsSecure 
CA 01 G2 --> SHA-2 End-Entities

With version 0.9.8 of OpenSSL we are seeing the following error:
OpenSSL> version
OpenSSL 0.9.8ze 15 Jan 2015
OpenSSL> verify -CAfile C:\test\CAfile_Baltimore_root+WSPRCA01G2cc.cer 
C:\test\WellsSecure_CA_01_G2.cer
C:\test\WellsSecure_CA_01_G2.cer: /C=US/O=Wells Fargo/OU=WellsSecure 
Certification Authorities/CN=WellsSecure Certification Authority 01 G2
error 20 at 0 depth lookup:unable to get local issuer certificate
I believe this error indicates that OpenSSL is unable to determine the 
issuer of our issuing intermediate CA. We only get this error when we try to 
verify the chain up to the SHA-1 Baltimore Root. It works in newer versions 
of OpenSSL and it works with our SHA-2 self-signed root and the 
cross-certificate from the SHA-2 Verizon Global root as seen below.

With version 1.0.1 and 1.0.2 of OpenSSL we do not see the error.
OpenSSL> version
OpenSSL 1.0.1l 15 Jan 2015
OpenSSL> verify -CAfile C:\test\CAfile_Baltimore_root+WSPRCA01G2cc.cer 
C:\test\WellsSecure_CA_01_G2.cer
C:\test\WellsSecure_CA_01_G2.cer: OK
OpenSSL> version
OpenSSL 1.0.2 22 Jan 2015
OpenSSL> verify -CAfile C:\test\CAfile_Baltimore_root+WSPRCA01G2cc.cer 
C:\test\WellsSecure_CA_01_G2.cer
C:\test\WellsSecure_CA_01_G2.cer: OK

We do not see this issue in OpenSSL 0.9.8 if we validate the intermediate 
issuing CA against the existing Verizon Global root cross cert chain.
OpenSSL> version
OpenSSL 0.9.8ze 15 Jan 2015
OpenSSL> verify -CAfile C:\test\CAfile_Verizon_root+WSPRCA01G2cc.cer 
C:\test\WellsSecure_CA_01_G2.cer
C:\test\WellsSecure_CA_01_G2.cer: OK

We also do not see the issue when we validate the intermediate issuing CA 
against our WellsSecure Public Root self-signed certificate.
OpenSSL> version
OpenSSL 0.9.8ze 15 Jan 2015
OpenSSL> verify -CAfile C:\test\WellsSecure_Public_Root_01_G2.cer 
C:\test\WellsSecure_CA_01_G2.cer
C:\test\WellsSecure_CA_01_G2.cer: OK

OpenSSL 0.9.8 does not appear to support the -partial_chain command so we 
cannot test the intermediate issuing CA against just the cross-certificate 
as issued by the SHA-1 Baltimore root without error but the error is 
expected.
OpenSSL> version
OpenSSL 0.9.8ze 15 Jan 2015
OpenSSL> verify -CAfile "C:\test\WSPRCA CC from Baltimore.cer" 
C:\test\WellsSecure_CA_01_G2.cer
C:\test\WellsSecure_CA_01_G2.cer: /C=US/O=Wells Fargo WellsSecure/OU=Wells 
Fargo Bank NA/CN=WellsSecure Public Root Certification Authority 01 G2
error 2 at 1 depth lookup:unable to get issuer certificate
I believe this error means that OpenSSL was able to find the issuer of our 
issuing intermediate CA, which it could not do when the Baltimore root is 
present, and tie it to the cross-certificate issued by the Baltimore root. 
The reason this error is happening is that my CAfile for this test did not 
contain the Baltimore self-signed root.

There appears to be some sort of issue that is causing OpenSSL 0.9.8 to be 
unable to validate our chain when the SHA-1 Baltimore self signed root is at 
the top of the chain. Have you encountered this error before with a mixed 
hierarchy or are you able to shed any light on what may be causing this 
issue? I am attaching PEM encoded versions of the files for your own testing 
and validation.

Jason Kubicki,  CISSP
Information Security Analyst
Cryptographic Services - Enterprise Key Management & Public Key 
Infrastructure | Wells Fargo







-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgIKYQyP4AAAAAAAAjANBgkqhkiG9w0BAQsFADCBjTELMAkG
A1UEBhMCVVMxIDAeBgNVBAoTF1dlbGxzIEZhcmdvIFdlbGxzU2VjdXJlMRwwGgYD
VQQLExNXZWxscyBGYXJnbyBCYW5rIE5BMT4wPAYDVQQDEzVXZWxsc1NlY3VyZSBQ
dWJsaWMgUm9vdCBDZXJ0aWZpY2F0aW9uIEF1dGhvcml0eSAwMSBHMjAeFw0xMjEw
MDEyMDQwMDVaFw0yMjEwMDEyMDUwMDVaMIGHMQswCQYDVQQGEwJVUzEUMBIGA1UE
ChMLV2VsbHMgRmFyZ28xLjAsBgNVBAsTJVdlbGxzU2VjdXJlIENlcnRpZmljYXRp
b24gQXV0aG9yaXRpZXMxMjAwBgNVBAMTKVdlbGxzU2VjdXJlIENlcnRpZmljYXRp
b24gQXV0aG9yaXR5IDAxIEcyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA1idl7QU1OQVGPn51Pb62YWCvWOVOWPm1zs4OKIMSq+zR5EiVs0ve7lLo5VP+
WV3c/Er6yOxXXV01ocnN9N6hmOWhVn5KyDATGNCM5nHMHHdQQbfCAzFVycW1TO9H
rjw74B1P+4jjy+B0nMRie3XSGACXEb11bDuummHCLYEM+6VanCOx41eRSd8VDcEK
cP6NUkS4tujEwZojiujP0h7t/Jf3rtey7ORWGkq/rj9AH7Lo23Gr6bxeu3o3Auzv
UejLKfUjh4cA2eZWgDMiGIRW4f9V7ZY9P+jwevl2D619qGPlYMsRBfcZ36xJs03C
pWRFZxjHWJ9+u/nb4knLxy8jHwIDAQABo4IBbTCCAWkwDgYDVR0PAQH/BAQDAgGG
MB0GA1UdDgQWBBRZmgHl58Pm8yV48VrZqOnxcpSOMDBMBgNVHSAERTBDMEEGC2CG
SAGG+3uDdAAAMDIwMAYIKwYBBQUHAgEWJGh0dHA6Ly93d3cud2VsbHNmYXJnby5j
b20vcmVwb3NpdG9yeTASBgNVHRMBAf8ECDAGAQH/AgEAMB8GA1UdIwQYMBaAFCHJ
JdNq/qQS/+bdV1fPjz5yhAjNMD0GA1UdHwQ2MDQwMqAwoC6GLGh0dHA6Ly9jcmwu
cGtpLndlbGxzZmFyZ28uY29tL3dzcHJjYTAxRzIuY3JsMHYGCCsGAQUFBwEBBGow
aDA4BggrBgEFBQcwAoYsaHR0cDovL2NybC5wa2kud2VsbHNmYXJnby5jb20vd3Nw
cmNhMDFHMi5jcnQwLAYIKwYBBQUHMAGGIGh0dHA6Ly92YWxpZGF0b3Iud2VsbHNm
YXJnby5jb20vMA0GCSqGSIb3DQEBCwUAA4IBAQAd4xIa2AexQNSrmBK7RX5cFrh0
tFPydFSlXRo12TOvC0BexgvATrfuN6GPGemgt3nI/iTmNW+N4iw1phVnySyAr23Z
nI8Hj73zy8Imyf42dfBIDN7dJFWKAU+sZRpFpuH358v0kBbbeZXQRLt/W4Ax0RJ9
TLbqIa3DiQ7tqo6LUvt7+yXH310YCu3722QGFXFfJmGmjmo5R+dL1vc5OQpNwpWo
tfvKwpKHBXOCFqtzXU+X+IMbeSo6fajs5Qaqq1StCmzwCEYHiRQU8hyzUghcaMHF
NDfxncSsdp2lgzAioW4ly0Qc8xzQlkUlSSHKv103SDDLJUVFPB4t82yCyDlK
-----END CERTIFICATE-----






-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----






-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----







-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----







-----BEGIN CERTIFICATE-----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-----END CERTIFICATE----- 





_______________________________________________
openssl-dev mailing list
To unsubscribe: https://mta.openssl.org/mailman/listinfo/openssl-dev