AxisCommunications/signed-video-framework

Replace deprecated OpenSSL APIs

Closed this issue · 0 comments

Please do not disclose security vulnerabilities as issues. See our security policy for responsible disclosures.

Describe the bug

Some code in vendor/axis-communications has been inactivated if OpenSSL 3.0 or newer is used. This makes supplementary validation results marked as invalid.
This should be solved for validation applications running newer OpenSSL versions to be able to fully validate the authenticity of an Axis Communications signed video.