diff options
| author | Matt Campbell <[email protected]> | 2016-02-05 14:43:18 -0600 |
|---|---|---|
| committer | Ingela Anderton Andin <[email protected]> | 2016-02-08 17:29:13 +0100 |
| commit | 64724376b145aced17c9d518e5c41f25a2d85cc9 (patch) | |
| tree | 3768a2c386c805bf706ff3d8081009d1b32d9711 /lib/ssl/src/ssl_crl_cache_api.erl | |
| parent | 1430a673d453ab330a93930719c41a2e786c948f (diff) | |
| download | otp-64724376b145aced17c9d518e5c41f25a2d85cc9.tar.gz otp-64724376b145aced17c9d518e5c41f25a2d85cc9.tar.bz2 otp-64724376b145aced17c9d518e5c41f25a2d85cc9.zip | |
ssl: verify cert signature against original cert binary
When searching for a certificate's issuer in the `CertDB`, verify the signature
against the original DER certificate from the handshake instead of a re-encoding
of the parsed certificate. This avoids false negatives due to differences
between DER encoding implementations of OTP and other platforms.
Diffstat (limited to 'lib/ssl/src/ssl_crl_cache_api.erl')
0 files changed, 0 insertions, 0 deletions