Master List verification fails

[Fethbita]

Master List verification fails during master list parsing with the following error:

Error while verifying Master List Signer Certificate signature: Certificate public key has explicit ECC parameters

This error is caused by openssl and there are issues for this created in openssl GitHub: openssl/openssl#9286 openssl/openssl#20117 openssl/openssl#20119 however it seems that there won't be an solution implemented anytime soon. The solution that can be currently implemented is to use the X509_STORE_CTX_set_verify_cb function, however that one is not exposed by rust-openssl. An issue for exposing this function is created in rust-openssl GitHub: sfackler/rust-openssl#2220.

[tzippy84]

If you dont mind me asking, how would you use the X509_STORE_CTX_set_verify_cb in a potential solution to this problem?

[Fethbita]

@tzippy84 As I explained in the sfackler/rust-openssl#2220 issue, with this callback function we can check the error that is passed, and if it is X509_V_ERR_EC_KEY_EXPLICIT_PARAMS then we can return false. That would make the x509_vfy.c#172 check invalid (it would not return) and the code would continue running.