Check that the subject name in a proxy cert complies to RFC 3820
authorRichard Levitte <levitte@openssl.org>
Sun, 19 Jun 2016 08:55:16 +0000 (10:55 +0200)
committerRichard Levitte <levitte@openssl.org>
Wed, 29 Jun 2016 23:00:19 +0000 (01:00 +0200)
commit26576cf9cea7841c9abb54e0609cdf09d3f4c663
treec75ced97ee77e3af5e445d57b94040b667444915
parent05200ee5c61ecd38cdcacf9c547b0c3877e8cfef
Check that the subject name in a proxy cert complies to RFC 3820

The subject name MUST be the same as the issuer name, with a single CN
entry added.

RT#1852

Reviewed-by: Rich Salz <rsalz@openssl.org>
(cherry picked from commit 338fb1688fbfb7efe0bdd475b01791a6de5ef94b)
crypto/x509/x509.h
crypto/x509/x509_err.c
crypto/x509/x509_txt.c
crypto/x509/x509_vfy.c
crypto/x509/x509_vfy.h