diff options
| author | Kazuki Yamaguchi <k@rhe.jp> | 2024-07-09 21:15:11 +0900 |
|---|---|---|
| committer | Hiroshi SHIBATA <hsbt@ruby-lang.org> | 2024-11-14 11:21:39 +0900 |
| commit | 419fb2f3b94d8b7ccb462177667070e13ed9df8a (patch) | |
| tree | 851af2166f8b30c72d9d59a2a4b9e9d2b24f9c5f /test/ruby/test_method_cache.rb | |
| parent | 97be56fc62e942d882ad12ea299240415cdf404f (diff) | |
[ruby/openssl] x509: fix handling of multiple URIs in Certificate#crl_uris
The implementation of OpenSSL::X509::Certificate#crl_uris makes the
assumption that each DistributionPoint in the CRL distribution points
extension contains a single general name of type URI. This is not
guaranteed by RFC 5280. A DistributionPoint may contain zero or more
than one URIs.
Let's include all URIs found in the extension. If only non-URI pointers
are found, return nil.
Fixes: https://github.com/ruby/openssl/issues/775
https://github.com/ruby/openssl/commit/71f4fef2fa
Diffstat (limited to 'test/ruby/test_method_cache.rb')
0 files changed, 0 insertions, 0 deletions