User avatar
daniel:// stenberg:// @bagder@mastodon.social
4mo
I'm clearly old and stupid. I can't figure out how to submit an issue for on their gitlab anymore. (I did in the past.)

So here it comes instead: gnutls_certificate_verify_peers2() does not seem to verify ExtendedKeyUsage but gnutls_certificate_verify_peers() does.

Neither case is documented clearly. This has already lead to people submitting vuln reports to gnutls-using apps for this omission.
3
0
0
0
User avatar
daniel:// stenberg:// @bagder@mastodon.social
4mo
they're "work items" now. I don't want to submit a work item. I want to tell them about a bug I found... 🤔
5
0
0
0
User avatar
🪨 @Varpie@peculiar.florist
4mo
@bagder It's just linguo that differs between management strategies, a work item is a unit of project planning that gets assigned to someone to work on (not necessarily the person opening it), it could be a feature or a bug.
0
0
0
0