On Thu, Apr 01, 2021 at 11:59:15AM +0900, Michael Paquier wrote: > Please find attached a patch to tighten a bit all that. The errors > produced by OpenSSL down to 1.0.1 are the same. I have noticed one > extra place where we just check for a FATAL, where the trust > authentication failed after a CN mismatch.
Sorry for the late reply here. This has been applied as of 8d3a4c3. -- Michael
signature.asc
Description: PGP signature