untrusted comment: verify with openbsd-71-base.pub RWR2eHwZTOEiTfhkdd2m1IScTRS2i92ja3unHrN5cZ33atiFDiM5X3qFTFO4dqL6w7GwgZtSJvAeiv1Jp3sPUI/nnvRULjTGvgk= OpenBSD 7.1 errata 004, May 16, 2022: libcrypto would incorrectly decode certain ASN.1 objects. Apply by doing: signify -Vep /etc/signify/openbsd-71-base.pub -x 004_asn1.patch.sig \ -m - | (cd /usr/src && patch -p0) And then rebuild and install libcrypto and unwind: cd /usr/src/lib/libcrypto make obj make includes make make install cd /usr/src/sbin/unwind make obj make make install Index: lib/libcrypto/asn1/a_object.c =================================================================== RCS file: /cvs/src/lib/libcrypto/asn1/a_object.c,v diff -u -p -r1.46 a_object.c --- lib/libcrypto/asn1/a_object.c 10 Apr 2022 12:42:33 -0000 1.46 +++ lib/libcrypto/asn1/a_object.c 13 May 2022 16:09:45 -0000 @@ -651,7 +651,7 @@ d2i_ASN1_OBJECT(ASN1_OBJECT **out_aobj, if (!c2i_ASN1_OBJECT_cbs(&aobj, &content)) return NULL; - *pp = CBS_data(&content); + *pp = CBS_data(&cbs); if (out_aobj != NULL) *out_aobj = aobj;