pkcs1-pad self-check fails?

Nikos Mavrogiannopoulos nmav at
Tue Mar 16 23:48:48 CET 2010

Simon Josefsson wrote:

> Thanks.  I think the problem is that the PKIX chain used to be rejected
> (in 2.8.x) because the signature validation fails, but now the entire
> chain is accepted.  Presumably the particular signature is no longer
> validated.  That could be wrong, or there is a problem in that self
> test.

I fixed the chain verification to behave as it used to be.


More information about the Gnutls-devel mailing list