Add support for unusal 'othername' subjectAltNames
authorDirk-Willem van Gulik <dirkx@webweaving.org>
Tue, 21 Apr 2020 21:06:38 +0000 (23:06 +0200)
committerDmitry Belyavskiy <beldmit@gmail.com>
Sat, 25 Apr 2020 15:52:30 +0000 (18:52 +0300)
commit47f387e98ebc9867ee7902a43d7bb35462175ce6
tree2f15725a735fdfec62b5cd784e579b9f043c8417
parenta3ab4d63e0da2614b80bce3173001034a4c54e12
Add support for unusal 'othername' subjectAltNames

Increasingly certificates seem to have special things in the subjectAltName that have arbitrary strings in them.

E.g. some (now) common in EU export certificates and, for a few years now, certificates issued to medical doctors (in for example the netherlands, the full spec is https://www.uziregister.nl/Media/Default/PDF/20200325%20CA%20model%20pasmodel%20certificaatprofielen%20v10_0.pdf, section 4.8, page 16 for an example of one country).

Reviewed-by: Tomas Mraz <tmraz@fedoraproject.org>
Reviewed-by: Dmitry Belyavskiy <beldmit@gmail.com>
(Merged from https://github.com/openssl/openssl/pull/11599)
crypto/x509/v3_alt.c
test/certs/fake-gp.pem [new file with mode: 0644]
test/recipes/25-test_x509.t