Don't create an invalid CertificateRequest
authorMatt Caswell <matt@openssl.org>
Mon, 2 Jul 2018 13:09:03 +0000 (14:09 +0100)
committerMatt Caswell <matt@openssl.org>
Tue, 3 Jul 2018 10:24:48 +0000 (11:24 +0100)
commit434af36f9778abe274bb637396f60977fbee98d2
tree86b04b83f0cfcabc8f7b3cc9687673d35cc8e1b3
parent2c739f72e5236a8e0c351c00047c77083dcdb77f
Don't create an invalid CertificateRequest

We should validate that the various fields we put into the
CertificateRequest are not too long. Otherwise we will construct an
invalid message.

Fixes #6609

Reviewed-by: Rich Salz <rsalz@openssl.org>
(Merged from https://github.com/openssl/openssl/pull/6629)
ssl/s3_srvr.c
ssl/ssl.h
ssl/ssl_locl.h