Re: [Openvpn-devel] [PATCH] Fix mbedtls fingerprint calculation

2017-06-18 Thread Arne Schwabe
Am 20.05.17 um 14:57 schrieb Steffan Karger: > Commit 'Migrate to mbed TLS 2.x' (86d8cd68) introduced a bug in mbedtls > builds where we would calculate the certificate fingerprint over the > (too-short) 'to-be-signed' length of the certificate, rather than over the > certificate including the sign

[Openvpn-devel] [PATCH] Fix mbedtls fingerprint calculation

2017-05-20 Thread Steffan Karger
Commit 'Migrate to mbed TLS 2.x' (86d8cd68) introduced a bug in mbedtls builds where we would calculate the certificate fingerprint over the (too-short) 'to-be-signed' length of the certificate, rather than over the certificate including the signature. Fix that. The security impact of the incorre