Opened 8 years ago
Closed 8 years ago
#1024 closed defect (wontfix)
openssl: crl processing fails with X509_NAME_EX_D2I:too long
| Reported by: | Owned by: | ||
|---|---|---|---|
| Priority: | critical | Milestone: | |
| Component: | other | Version: | 1.11.x |
| Keywords: | Cc: | ||
| uname -a: | Windows 7 | ||
| nginx -V: |
nginx version: nginx/1.11.2
built by cl 16.00.30319.01 for 80x86 built with OpenSSL 1.0.2h 3 May 2016 TLS SNI support enabled configure arguments: --with-cc=cl --builddir=objs.msvc8 --with-debug --prefix= - -conf-path=conf/nginx.conf --pid-path=logs/nginx.pid --http-log-path=logs/access .log --error-log-path=logs/error.log --sbin-path=nginx.exe --http-client-body-te mp-path=temp/client_body_temp --http-proxy-temp-path=temp/proxy_temp --http-fast cgi-temp-path=temp/fastcgi_temp --http-scgi-temp-path=temp/scgi_temp --http-uwsg i-temp-path=temp/uwsgi_temp --with-cc-opt=-DFD_SETSIZE=1024 --with-pcre=objs.msv c8/lib/pcre-8.39 --with-zlib=objs.msvc8/lib/zlib-1.2.8 --with-select_module --wi th-http_realip_module --with-http_addition_module --with-http_sub_module --with- http_dav_module --with-http_stub_status_module --with-http_flv_module --with-htt p_mp4_module --with-http_gunzip_module --with-http_gzip_static_module --with-htt p_auth_request_module --with-http_random_index_module --with-http_secure_link_mo dule --with-http_slice_module --with-mail --with-stream --with-openssl=objs.msvc 8/lib/openssl-1.0.2h --with-openssl-opt=no-asm --with-http_ssl_module --with-mai l_ssl_module --with-stream_ssl_module --with-ipv6 |
||
Description
Hello,
Is it possible to port this bugfix into NGINX Windows Binary?
https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=826552
Thanks,
Tarik
Change History (2)
comment:1 by , 8 years ago
comment:2 by , 8 years ago
| Resolution: | → wontfix |
|---|---|
| Status: | new → closed |
Any OpenSSL fixes are expected to be available once a new version of OpenSSL is released, nginx for Windows is generally build with the latest available OpenSSL.
If you can't wait, consider building a binary yourself, see http://nginx.org/en/docs/howto_build_on_win32.html for basic instructions.
Note:
See TracTickets
for help on using tickets.
Here is the fix, can someone please patch this and provide a windows binary?
https://github.com/openssl/openssl/commit/a1eef756cc1948ed4d1f175d97367a