From dev-return-37412-archive-asf-public=cust-asf.ponee.io@subversion.apache.org Sat Feb 3 09:18:11 2018 Return-Path: X-Original-To: archive-asf-public@eu.ponee.io Delivered-To: archive-asf-public@eu.ponee.io Received: from cust-asf.ponee.io (cust-asf.ponee.io [163.172.22.183]) by mx-eu-01.ponee.io (Postfix) with ESMTP id 40054180621 for ; Sat, 3 Feb 2018 09:18:11 +0100 (CET) Received: by cust-asf.ponee.io (Postfix) id 301FB160C3B; Sat, 3 Feb 2018 08:18:11 +0000 (UTC) Delivered-To: archive-asf-public@cust-asf.ponee.io Received: from mail.apache.org (hermes.apache.org [140.211.11.3]) by cust-asf.ponee.io (Postfix) with SMTP id 6DFE5160C38 for ; Sat, 3 Feb 2018 09:18:10 +0100 (CET) Received: (qmail 25714 invoked by uid 500); 3 Feb 2018 08:18:04 -0000 Mailing-List: contact dev-help@subversion.apache.org; run by ezmlm Precedence: bulk List-Help: List-Unsubscribe: List-Post: List-Id: Delivered-To: mailing list dev@subversion.apache.org Received: (qmail 25704 invoked by uid 99); 3 Feb 2018 08:18:04 -0000 Received: from mail-relay.apache.org (HELO mail-relay.apache.org) (140.211.11.15) by apache.org (qpsmtpd/0.29) with ESMTP; Sat, 03 Feb 2018 08:18:04 +0000 Received: from zulu.23.e-reka.si (89-233-126-4.dynamic.t-2.net [89.233.126.4]) by mail-relay.apache.org (ASF Mail Server at mail-relay.apache.org) with ESMTPSA id 585C01A008E for ; Sat, 3 Feb 2018 08:18:01 +0000 (UTC) Subject: Re: svn commit: r1822996 - in /subversion/trunk/subversion: libsvn_subr/x509parse.c tests/libsvn_subr/x509-test.c To: dev@subversion.apache.org References: <20180202182744.954E33A023A@svn01-us-west.apache.org> From: =?UTF-8?Q?Branko_=c4=8cibej?= Organization: The Apache Software Foundation Message-ID: Date: Sat, 3 Feb 2018 09:17:38 +0100 User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.13; rv:52.0) Gecko/20100101 Thunderbird/52.6.0 MIME-Version: 1.0 In-Reply-To: <20180202182744.954E33A023A@svn01-us-west.apache.org> Content-Type: text/plain; charset=utf-8 Content-Transfer-Encoding: 7bit Content-Language: en-GB On 02.02.2018 19:27, philip@apache.org wrote: > Author: philip > Date: Fri Feb 2 18:27:44 2018 > New Revision: 1822996 > > URL: http://svn.apache.org/viewvc?rev=1822996&view=rev > Log: > Fix x509 parser to accept RSASSA-PSS certs by no longer assuming that > algorithm parameters are NULL for all algorithms. This change doesn't > affect whether clients can verify RSASSA-PSS certs, that decision is > delegated to OpenSSL, but it does allow JavaHL clients to accept a > failure to verify such certs. Backport for 1.10? -- Brane