[M] Change in openvpn[release/2.7]: Check for null-bytes in certificate subjects

Attention is currently required from: MaxF, plaisthos.

syzzer has posted comments on this change by MaxF. ( http://gerrit.openvpn.net/c/openvpn/+/1902?usp=email )

Change subject: Check for null-bytes in certificate subjects
......................................................................


Patch Set 1:

(1 comment)

File src/openvpn/ssl_verify_openssl.c:

http://gerrit.openvpn.net/c/openvpn/+/1902/comment/210ac99e_88f02f74?usp=email :
PS1, Line 389:                            | ASN1_STRFLGS_ESC_CTRL);
> Hmm, but that still changes user-visible behavior, since we now no longer escape all the other contr […]
(Where that last remark about using RFC2253 is about master, not release/2.7)



-- 
To view, visit http://gerrit.openvpn.net/c/openvpn/+/1902?usp=email
To unsubscribe, or for help writing mail filters, visit http://gerrit.openvpn.net/settings?usp=email

Gerrit-MessageType: comment
Gerrit-Project: openvpn
Gerrit-Branch: release/2.7
Gerrit-Change-Id: Iea1481e94ba1abe18c39d81cd797187c88427571
Gerrit-Change-Number: 1902
Gerrit-PatchSet: 1
Gerrit-Owner: MaxF <[email protected]>
Gerrit-Reviewer: plaisthos <[email protected]>
Gerrit-Reviewer: syzzer <[email protected]>
Gerrit-CC: openvpn-devel <[email protected]>
Gerrit-Attention: plaisthos <[email protected]>
Gerrit-Attention: MaxF <[email protected]>
Gerrit-Comment-Date: Mon, 07 Sep 2026 13:47:38 +0000
Gerrit-HasComments: Yes
Gerrit-Has-Labels: No
Comment-In-Reply-To: syzzer <[email protected]>
Comment-In-Reply-To: MaxF <[email protected]>

_______________________________________________
Openvpn-devel mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/openvpn-devel