Re: Bug 728213 - Segmenation Fault with self signed certificate

Nick Cloward <[email protected]>
Newsgroups gmane.text.xml.xmlsec
Message-ID <[email protected]>
It depends on openssl c_rehash creating the symlink to the certificate.  Since its self signed it needs to find one thats an exact match in the store.  If those are not there it works just fine.  Our temporary fix for it is removing those symlinks so it cannot match the self signed cert.  

It makes sense that the key type is not correct in xmlSecOpenSSLKeyDataX509VerifyAndExtractKey().

--
Nick Cloward


On May 1, 2014 at 9:35:27 AM, Aleksey Sanin ([email protected]) wrote:

Just a very general thought is that the key type is not set correctly  
in xmlSecOpenSSLKeyDataX509VerifyAndExtractKey() or somewhere around it.  

Unfortunately, I wasn't able to repro the crash on my centos VM (I might  
be missing the cert you have or something).  

Aleksey  

On 5/1/14, 7:57 AM, Nick Cloward wrote:  
> I am mostly just curious on the status of this bug or if anyone has any  
> ideas/thoughts on it. I should have asked here first before submitting  
> a bug report. If its not a real bug we can just close the ticket or  
> mark it as resolved.  
>  
> Here is a link to it: https://bugzilla.gnome.org/show_bug.cgi?id=728213  
>  
> Anyways… What do you think?  
>  
>  
> Thank You!!!  
>  
> --  
> Nick Cloward  
> Software Engineer  
> Canvas by Instructure  
>  
>  
> _______________________________________________  
> xmlsec mailing list  
> [email protected]  
> http://www.aleksey.com/mailman/listinfo/xmlsec  
>

_______________________________________________
xmlsec mailing list
[email protected]
http://www.aleksey.com/mailman/listinfo/xmlsec
lmpx.com only provides a reader for public news (NNTP) servers. It is not affiliated with the servers or forums shown here and is not responsible for the content of articles, which is written by their respective authors.