[openssl/openssl] d879f3: x509: check inner/outer signatureAlgorithm match i...

  Branch: refs/heads/openssl-3.0
  Home:   https://github.com/openssl/openssl
  Commit: d879f38ed42a619cb29616babce3c575d4328eff
      https://github.com/openssl/openssl/commit/d879f38ed42a619cb29616babce3c575d4328eff
  Author: Viktor Dukhovni <[email protected]>
  Date:   2026-06-11 (Thu, 11 Jun 2026)

  Changed paths:
    M crypto/err/openssl.txt
    M crypto/x509/x509_err.c
    M crypto/x509/x_crl.c
    M include/openssl/x509err.h
    M test/crltest.c

  Log Message:
  -----------
  x509: check inner/outer signatureAlgorithm match in X509_CRL_verify

RFC 5280 section 5.1.1.2 requires the signatureAlgorithm in the outer
CertificateList wrapper to be identical to the signature field inside
the signed TBSCertList.  def_crl_verify() did not enforce this, unlike
X509_verify() and X509_ACERT_verify() which both carry an X509_ALGOR_cmp
guard.

Add the same guard to def_crl_verify().  A mismatch raises
X509_R_CRL_SIGNATURE_ALGORITHM_MISMATCH.  No known attack results from
the missing check; this is a conformance and hardening fix only.

Add a regression test: a CRL with a valid RSA-SHA256 signature over a
TBSCertList whose inner signatureAlgorithm claims ecdsaWithSHA256 is
now rejected.

Reviewed-by: Neil Horman <[email protected]>
Reviewed-by: Norbert Pocs <[email protected]>
MergeDate: Thu Jun 11 08:52:54 2026
(Merged from https://github.com/openssl/openssl/pull/31213)



To unsubscribe from these emails, change your notification settings at https://github.com/openssl/openssl/settings/notifications

-- 
You received this message because you are subscribed to the Google Groups "openssl-commits" group.
To unsubscribe from this group and stop receiving emails from it, send an email to [email protected].
To view this discussion visit https://groups.google.com/a/openssl.org/d/msgid/openssl-commits/openssl/openssl/push/refs/heads/openssl-3.0/5bc153-d879f3%40github.com.