Various X509 fixes. Disable broken certificate workarounds
authorDr. Stephen Henson <steve@openssl.org>
Fri, 5 Mar 2004 17:16:35 +0000 (17:16 +0000)
committerDr. Stephen Henson <steve@openssl.org>
Fri, 5 Mar 2004 17:16:35 +0000 (17:16 +0000)
commitbc501570109e7837e1de1689de1eec9420e4cf89
tree6d606d96c898bf7bf25ee9577904d39dd4c86097
parent91180d45f9d92a089080dfef5363edb74d9b741b
Various X509 fixes. Disable broken certificate workarounds
when X509_V_FLAG_X509_STRICT is set. Check for CRLSign in
CRL issuer certificates. Reject CRLs with unhandled (any)
critical extensions.
CHANGES
crypto/x509/x509_txt.c
crypto/x509/x509_vfy.c
crypto/x509/x509_vfy.h
crypto/x509v3/v3_purp.c