[gnutls-devel] GnuTLS | GnuTLS accpepts a certificate wihtout subject public key (#1160)
Read-only notification of GnuTLS library development activities
gnutls-devel at lists.gnutls.org
Tue Jan 26 02:04:03 CET 2021
GOODPWDCETCSZ created an issue: https://gitlab.com/gnutls/gnutls/-/issues/1160
## Description of problem:
GnuTLS accpepts a certificate wihtout subject public key. However, OpenSSL, mbedTLS, wolfSSL and NSS reject it.
## Version of gnutls used:
## Distributor of gnutls (e.g., Ubuntu, Fedora, RHEL)
## How reproducible:
Steps to Reproduce:
* `certtool --verify --load-ca-certificate ca.pem --infile seed-0u0.pem`
## Actual results:
Chain verification output: Verified. The certificate is trusted.
## Expected results:
The certificate is rejected.
Reply to this email directly or view it on GitLab: https://gitlab.com/gnutls/gnutls/-/issues/1160
You're receiving this email because of your account on gitlab.com.
-------------- next part --------------
An HTML attachment was scrubbed...
More information about the Gnutls-devel