Avoid SHA1 weakness
authorRich Salz <rsalz@akamai.com>
Fri, 9 Oct 2015 18:14:34 +0000 (14:14 -0400)
committerRich Salz <rsalz@openssl.org>
Fri, 9 Oct 2015 21:06:21 +0000 (17:06 -0400)
commitbfc19297cddd5bc2192c02c7f8896d804b0456cb
tree89182fb670c2b85d1733b5f5cce60fee80ee2694
parent978b5d709a6d7fc75665a837df2ad57fe9653dcf
Avoid SHA1 weakness

In X509_cmp, if cert digest is equal, look at DER of the
signed part.  This is what master and 1.0.2 already do.

Reviewed-by: Dr. Stephen Henson <steve@openssl.org>
crypto/x509/x509_cmp.c