From: Dr. Stephen Henson <steve@openssl.org>
Date: Fri, 27 Jun 2014 17:49:32 +0000 (+0100)
Subject: Tolerate critical AKID in CRLs.
X-Git-Tag: OpenSSL_1_0_1i~78
X-Git-Url: https://git.librecmc.org/?a=commitdiff_plain;h=0ace876730c3bf43d38f72cbf35cb959cefc5f12;p=oweals%2Fopenssl.git

Tolerate critical AKID in CRLs.

PR#3014
(cherry picked from commit 11da66f8b1fbe5777fe08cc6ace9e1f2c1576a50)
---

diff --git a/crypto/asn1/x_crl.c b/crypto/asn1/x_crl.c
index c51c690ba9..3f03efbe60 100644
--- a/crypto/asn1/x_crl.c
+++ b/crypto/asn1/x_crl.c
@@ -270,6 +270,7 @@ static int crl_cb(int operation, ASN1_VALUE **pval, const ASN1_ITEM *it,
 				{
 				/* We handle IDP and deltas */
 				if ((nid == NID_issuing_distribution_point)
+					|| (nid == NID_authority_key_identifier)
 					|| (nid == NID_delta_crl))
 					break;;
 				crl->flags |= EXFLAG_CRITICAL;