cpet/openbsd-ports
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

openssl-ruby-tests: add workaround for stricter RFC 5280 enforcement.

Browse Source
This commit is contained in:
tb 2022-06-30 08:56:01 +00:00
parent 5952914e54
commit 5a2faad56e
2 changed files with 25 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

1
security/openssl-ruby-tests/Makefile
View File

@ -7,6 +7,7 @@ DISTNAME = openssl-ruby-tests-${VERSION}
GH_ACCOUNT = ruby
GH_PROJECT = openssl
GH_COMMIT = e9798b1ec794d0c8f0a591b320ebb45afb037b52
REVISION = 0
CATEGORIES = security devel

24
security/openssl-ruby-tests/patches/patch-test_openssl_test_asn1_rb Normal file
View File

@ -0,0 +1,24 @@
After a_time_tm.c r1.22, times without seconds are no longer accepted
by the ASN.1 parser. This corresponds to RFC 5280, but not to ASN.1.
Index: test/openssl/test_asn1.rb
--- test/openssl/test_asn1.rb.orig
+++ test/openssl/test_asn1.rb
@@ -405,7 +405,7 @@ class OpenSSL::TestASN1 < OpenSSL::TestCase
encode_decode_test B(%w{ 17 0D }) + "160908234339Z".b,
OpenSSL::ASN1::UTCTime.new(Time.utc(2016, 9, 8, 23, 43, 39))
# Seconds is omitted
- decode_test B(%w{ 17 0B }) + "1609082343Z".b,
+ decode_test B(%w{ 17 0D }) + "160908234300Z".b,
OpenSSL::ASN1::UTCTime.new(Time.utc(2016, 9, 8, 23, 43, 0))
begin
# possible range of UTCTime is 1969-2068 currently
@@ -432,7 +432,7 @@ class OpenSSL::TestASN1 < OpenSSL::TestCase
OpenSSL::ASN1::GeneralizedTime.new(Time.utc(2016, 12, 8, 19, 34, 29))
encode_decode_test B(%w{ 18 0F }) + "99990908234339Z".b,
OpenSSL::ASN1::GeneralizedTime.new(Time.utc(9999, 9, 8, 23, 43, 39))
- decode_test B(%w{ 18 0D }) + "201612081934Z".b,
+ decode_test B(%w{ 18 0F }) + "20161208193400Z".b,
OpenSSL::ASN1::GeneralizedTime.new(Time.utc(2016, 12, 8, 19, 34, 0))
# not implemented
# decode_test B(%w{ 18 13 }) + "20161208193439+0930".b,