Don't create an invalid CertificateRequest
authorMatt Caswell <matt@openssl.org>
Mon, 2 Jul 2018 13:09:03 +0000 (14:09 +0100)
committerMatt Caswell <matt@openssl.org>
Tue, 3 Jul 2018 10:22:06 +0000 (11:22 +0100)
commit9d4167241c8fa15b3ae77651109aac7fa66ac17b
tree59be8e82136b7ae8248d7e2c99ae73838681dd9e
parent1e8cb18d499604c1766bfcec23a358888eaf6551
Don't create an invalid CertificateRequest

We should validate that the various fields we put into the
CertificateRequest are not too long. Otherwise we will construct an
invalid message.

Fixes #6609

Reviewed-by: Rich Salz <rsalz@openssl.org>
(Merged from https://github.com/openssl/openssl/pull/6628)
ssl/ssl_locl.h
ssl/statem/statem_srvr.c