* Allow x509 certificates which set basicConstraints=CA:FALSE,pathlen:0
to validate, as it is common on self-signed leaf certificates.
(LP: #1926254)
- d/p/lp-1926254-1-Allow-certificates-with-Basic-Constraints-CA-fa.patch
- d/p/lp-1926254-2-Set-X509_V_ERR_INVALID_EXTENSION-error-for-inva.patch
- d/p/lp-1926254-3-Add-test-cases-for-the-non-CA-certificate-with-.patch
* Split d/p/pr12272.patch into multiple patchfiles to fix dpkg-source
error when attempting to build a source package, due to pr12272.patch
patching files multiple times within the same patch. (LP: #1927161)
- d/p/lp-1927161-1-x86-Add-endbranch-to-indirect-branch-targets-fo.patch
- d/p/lp-1927161-2-Use-swapcontext-for-Intel-CET.patch
- d/p/lp-1927161-3-x86-Always-generate-note-gnu-property-section-f.patch
- d/p/lp-1927161-4-x86_64-Always-generate-note-gnu-property-sectio.patch
- d/p/lp-1927161-5-x86_64-Add-endbranch-at-function-entries-for-In.patch
-- Matthew Ruffell <email address hidden> Wed, 05 May 2021 12:13:30 +1200
This bug was fixed in the package openssl - 1.1.1f-1ubuntu4.4
---------------
openssl (1.1.1f-1ubuntu4.4) groovy; urgency=medium
* Allow x509 certificates which set basicConstraint s=CA:FALSE, pathlen: 0 1926254- 1-Allow- certificates- with-Basic- Constraints- CA-fa.patch 1926254- 2-Set-X509_ V_ERR_INVALID_ EXTENSION- error-for- inva.patch 1926254- 3-Add-test- cases-for- the-non- CA-certificate- with-.patch 1927161- 1-x86-Add- endbranch- to-indirect- branch- targets- fo.patch 1927161- 2-Use-swapconte xt-for- Intel-CET. patch 1927161- 3-x86-Always- generate- note-gnu- property- section- f.patch 1927161- 4-x86_64- Always- generate- note-gnu- property- sectio. patch 1927161- 5-x86_64- Add-endbranch- at-function- entries- for-In. patch
to validate, as it is common on self-signed leaf certificates.
(LP: #1926254)
- d/p/lp-
- d/p/lp-
- d/p/lp-
* Split d/p/pr12272.patch into multiple patchfiles to fix dpkg-source
error when attempting to build a source package, due to pr12272.patch
patching files multiple times within the same patch. (LP: #1927161)
- d/p/lp-
- d/p/lp-
- d/p/lp-
- d/p/lp-
- d/p/lp-
-- Matthew Ruffell <email address hidden> Wed, 05 May 2021 12:13:30 +1200