Change #271608

Category	wget
Changed by	vlefebvre <valentin.lefebvreohnoyoudont@suse.com>
Changed at	Thu 18 Jun 2026 14:10:11
Repository	https://gitlab.com/gnuwget/wget.git
Project	wget
Branch	master
Revision	228c8924792a277ac4de4ec799a9ba7849bfad05

Comments

Validate purpose of SSL/TLS certificate checks
* Checks key purpose before validation
  - only gnutls backend affected
* Create tests to reproduce issue

Fixes #24
Fixes CVE-2026-1858

Copyright-paperwork-exempt: Yes

Changed files

src/gnutls.c
tests/Makefile.am
tests/Test-https-key-usage.px
tests/certs/create-certs.sh
tests/certs/server-bad-eku-cert.pem
tests/certs/server-bad-eku-template.txt
tests/certs/server-bad-ku-cert.pem
tests/certs/server-bad-ku-template.txt