OpenBSD 5.9 Errata for OCSP available
28 June, 2016 by firstname.lastname@example.org | openbsd
This errata fixes several issues in the OCSP code that could result in the incorrect generation and parsing of OCSP requests. This remediates a lack of error checking on time parsing in these functions, and ensures that only GENERALIZEDTIME formats are accepted for OCSP, as per RFC 6960. Issues reported, and fixes provided by Kazuki Yamaguchi <email@example.com> and Kinichiro Inoguchi <firstname.lastname@example.org> Patches for OpenBSD 5.9 are available at: http://ftp.openbsd.org/pub/OpenBSD/patches/5.9/common/012_crypto.patch.sig and have been committed to -current. Portable LibreSSL releases will appear shortly.