Re: (ITS#5070) Issues in X.509 certificate parsing

Kurt Zeilenga wrote:

This and other RFC 4511 BER restrictions do not apply to BER/DER-encoded attribute values, such as certificates.

A cleaner and simpler solution is in HEAD for those serials that fit into a long long, when it's available. Otherwise, arbitrary precision support is required (OpenSSL's bignum, GNU's GMP or so).

Please test.

p.

Ing. Pierangelo Masarati OpenLDAP Core Team

SysNet s.r.l. via Dossi, 8 - 27100 Pavia - ITALIA http://www.sys-net.it --------------------------------------- Office: +39 02 23998309 Mobile: +39 333 4963172 Email: pierangelo.masarati@sys-net.it ---------------------------------------