Various X509 fixes. Disable broken certificate workarounds
authorDr. Stephen Henson <steve@openssl.org>
Fri, 5 Mar 2004 17:16:06 +0000 (17:16 +0000)
committerDr. Stephen Henson <steve@openssl.org>
Fri, 5 Mar 2004 17:16:06 +0000 (17:16 +0000)
commit01fc051e8ab8c73ae54b74184222fd2a5908f9e4
treef537c5768025969f8c65411317d9cab46c30b8d2
parentae43f344af259ffab7cb5c82bb50620c1f96a0a2
Various X509 fixes. Disable broken certificate workarounds
when X509_V_FLAG_X509_STRICT is set. Check for CRLSign in
CRL issuer certificates. Reject CRLs with unhandled (any)
critical extensions.
CHANGES
crypto/x509/x509_txt.c
crypto/x509/x509_vfy.c
crypto/x509/x509_vfy.h
crypto/x509v3/v3_purp.c