-
Notifications
You must be signed in to change notification settings - Fork 577
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
[BUG][STIR_SHAKEN] stir_shaken_verify random issue load_cert/PEM_X509_INFO_read_bio #3446
Comments
update. focus on load_cert function, the 'error reading certificate stack' point here:
To change the sk init, only cbio is relevant. Next step is to very cbio value before call PEM_X509_INFO_read_bio.
Unfortunately, the "error reading certificate stack" continue where cbio hashes have been identified similar. |
update. To avoid race condition around sk and PEM_X509_INFO_read_bio. The idea is to clean the openssl error structure and force sk to NULL value before the init. Then after PEM_X509_INFO_read_bio try to check if we can find any error in the stack. Error handler:
Load cert:
After a while the problem persists randomly, but in some cases it is possible to deal with an error code. This error completely troubles me because we previously checked the integrity of cbio. Next test is to check the cbio before and after the PEM_X509_INFO_read_bio !!! Core log:
|
update. Resume:
WIP - Let a chance to init sk with several attempts before return an error.
|
WIP - partial FIX - no more internal error "Failed to load certificate".
vector:
|
Any updates here? No progress has been made in the last 15 days, marking as stale. Will close this issue if no further updates are made in the next 30 days. |
Version:
Issue:
In previous tests, stir_shaken_verify randomly did returned an -1 ret code with an internal error during the checks.
the PR aspire to return more explicite information to hook a path of investigation.
After inspection we have new informations with an explicit error reason.
Starting point :
Entry point error:
Other info:
The text was updated successfully, but these errors were encountered: