From: Dr. Stephen Henson <steve@openssl.org>
Date: Sun, 2 Dec 2012 16:48:25 +0000 (+0000)
Subject: add -badsig option to corrupt CRL signatures for testing too
X-Git-Tag: OpenSSL_1_0_2-beta1~283
X-Git-Url: https://git.librecmc.org/?a=commitdiff_plain;h=9ecf6e93af1c42321743e281a86a2cacf2148dad;p=oweals%2Fopenssl.git

add -badsig option to corrupt CRL signatures for testing too
(cherry picked from commit 139cd16cc58330840890f914c318f00de6bfd831)
---

diff --git a/apps/crl.c b/apps/crl.c
index 3520c4cbb8..745469d1b8 100644
--- a/apps/crl.c
+++ b/apps/crl.c
@@ -102,7 +102,7 @@ int MAIN(int argc, char **argv)
 	unsigned long nmflag = 0;
 	X509_CRL *x=NULL;
 	char *CAfile = NULL, *CApath = NULL;
-	int ret=1,i,num,badops=0;
+	int ret=1,i,num,badops=0,badsig=0;
 	BIO *out=NULL;
 	int informat,outformat, keyformat;
 	char *infile=NULL,*outfile=NULL, *crldiff = NULL, *keyfile = NULL;
@@ -224,6 +224,8 @@ int MAIN(int argc, char **argv)
 			fingerprint= ++num;
 		else if (strcmp(*argv,"-crlnumber") == 0)
 			crlnumber= ++num;
+		else if (strcmp(*argv,"-badsig") == 0)
+			badsig = 1;
 		else if ((md_alg=EVP_get_digestbyname(*argv + 1)))
 			{
 			/* ok */
@@ -426,6 +428,9 @@ bad:
 		goto end;
 		}
 
+	if (badsig)
+		x->signature->data[x->signature->length - 1] ^= 0x1;
+
 	if 	(outformat == FORMAT_ASN1)
 		i=(int)i2d_X509_CRL_bio(out,x);
 	else if (outformat == FORMAT_PEM)