DigiNews

Tech Watch by Johan Denoyer

← Back to articles

Three TLS Bugs in GoAhead

Quality: 8/10 Relevance: 9/10

Summary

Three TLS-related bugs in GoAhead affect mTLS verification, DH parameter handling, and chain-depth verification across OpenSSL-compatible, LibreSSL legacy verifier, and mbed TLS backends. The issues can allow revoked certificates to pass, enable potential decryption of sessions, and bypass depth checks, with advisories and a fix released in 6.1.1.

🚀 Service construit par Johan Denoyer