artulab
projects / openbsd / commit
? search:
summary | shortlog | log | commit | commitdiff | tree
(parent: 6defba5) | patch
Flip the default of explicitText to UTF8String
authortb <tb@openbsd.org>
Thu, 20 Apr 2023 18:29:08 +0000 (18:29 +0000)
committertb <tb@openbsd.org>
Thu, 20 Apr 2023 18:29:08 +0000 (18:29 +0000)
commit3201f0b18674cca57acbfd835546e81c55db3a8b
tree0b8d5ed8345bcbea6a86f4c10f211fe791e33859tree | snapshot
parent6defba5495bff49dccc61a8916cc1fd8287b2ea2commit | diff
Flip the default of explicitText to UTF8String

While it may have been reasonable to use VisibleString back when this
code was written, it's an anachronism nowadays. In particular, configuring
BoringSSL reports that they have seen malformed certificates with exactly
the issue caused by this unfortuante default.

Reported by Alex Gaynor in OpenSSL issue 20772

ok jsing
lib/libcrypto/x509/x509_cpols.c diff | blob | history
OpenBSD src
by Ahmet Artu Yildirim