OpenSSL Vulnerability Allows Forged Certificate Chains to be Accepted

The OpenSSL Project team has disclosed more details about a new “high severity” flaw in OpenSSL, which can result in an “alternative chains certificate forgery” that makes it possible for invalid certificates to appear trustworthy.