Avoid only exact duplicates when creating the accepted CA names list
authorTomas Mraz <tmraz@fedoraproject.org>
Mon, 11 Dec 2017 12:09:13 +0000 (13:09 +0100)
committerRich Salz <rsalz@openssl.org>
Mon, 8 Jan 2018 20:03:14 +0000 (15:03 -0500)
commit3e41defe469831236ea25ab9bd7609877cf96c13
tree22d1ee4583485e19a74364041ce53474177caff1
parentc81c38cb2786dd308256c55ce8d5337e6a3f14ce
Avoid only exact duplicates when creating the accepted CA names list

This avoids situations where third party client is unable to recognize
that the client certificate was issued by the same CA with name differring
only by case or insignificant characters.

Reviewed-by: Matt Caswell <matt@openssl.org>
Reviewed-by: Tim Hudson <tjh@openssl.org>
Reviewed-by: Rich Salz <rsalz@openssl.org>
(Merged from https://github.com/openssl/openssl/pull/4731)
ssl/ssl_cert.c