Skip to content

Pingora's patch disabling cert version validation for extensions#495

Merged
bwesterb merged 4 commits into
masterfrom
bad-certs
Jun 4, 2026
Merged

Pingora's patch disabling cert version validation for extensions#495
bwesterb merged 4 commits into
masterfrom
bad-certs

Conversation

@kornelski
Copy link
Copy Markdown
Collaborator

Needed by Pingora to unfork boring.

@kornelski kornelski requested a review from cjpatton April 21, 2026 17:08
Copy link
Copy Markdown
Collaborator

@cjpatton cjpatton left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

This is unfortunate but seems relatively harmless. Sometimes you just have to match OpenSSL.

Note that OpenSSL can be configured to be as strict as BoringSSL here, but is not configured this way by default. See X509_V_FLAG_X509_STRICT in https://docs.openssl.org/master/man3/X509_VERIFY_PARAM_set_flags/#description

Comment thread boring-sys/Cargo.toml Outdated
Co-authored-by: Christopher Patton <cpatton@cloudflare.com>
@johnhurt
Copy link
Copy Markdown
Contributor

johnhurt commented Jun 4, 2026

Where did we land on this one? I was operating under the assumption that it was already merged 😅

@bwesterb bwesterb merged commit f0fb1e4 into master Jun 4, 2026
26 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

4 participants