mirror of
https://github.com/Icinga/icinga2.git
synced 2025-08-20 09:08:16 +02:00
Old versions of OpenSSL stored a valid flag in the certificate (see inline code comment for details) that if already set, causes parts of the verification to be skipped and return that the certificate is valid, even if it's not actually signed by the CA in the trust store. This issue was assigned CVE-2025-48057.