DVCS (see RFC 3029) was missing among the possible purposes.

Notified privately to me by Peter Sylvester <Peter.Sylvester@EdelWeb.fr>,
one of the authors of said RFC

diff --git a/crypto/x509v3/v3_purp.c b/crypto/x509v3/v3_purp.c
index b739e4fd837cf41093298c1116bfbf7e2afdd87b..4d145f71fd036f420d719b9d6e4a23d42a3f4507 100644 (file)
--- a/crypto/x509v3/v3_purp.c
+++ b/crypto/x509v3/v3_purp.c
@@ -378,6 +378,10 @@ static void x509v3_cache_extensions(X509 *x)
                                case NID_time_stamp:
                                x->ex_xkusage |= XKU_TIMESTAMP;
                                break;
+
+                               case NID_dvcs:
+                               x->ex_xkusage |= XKU_DVCS;
+                               break;
                        }
                }
                sk_ASN1_OBJECT_pop_free(extusage, ASN1_OBJECT_free);

diff --git a/crypto/x509v3/x509v3.h b/crypto/x509v3/x509v3.h
index daecc55271e4dbf46cd9c5e898c89278519c978a..fb07a19016fda76dd68eb0c991cbeed4b0424a09 100644 (file)
--- a/crypto/x509v3/x509v3.h
+++ b/crypto/x509v3/x509v3.h
@@ -352,6 +352,7 @@ DECLARE_ASN1_SET_OF(POLICYINFO)
 #define XKU_SGC                        0x10
 #define XKU_OCSP_SIGN          0x20
 #define XKU_TIMESTAMP          0x40
+#define XKU_DVCS               0x80
 
 #define X509_PURPOSE_DYNAMIC   0x1
 #define X509_PURPOSE_DYNAMIC_NAME      0x2