Check that the subject name in a proxy cert complies to RFC 3820
authorRichard Levitte <levitte@openssl.org>
Sun, 19 Jun 2016 08:55:16 +0000 (10:55 +0200)
committerRichard Levitte <levitte@openssl.org>
Mon, 20 Jun 2016 19:34:37 +0000 (21:34 +0200)
commitc8223538cb05e5aac6418a5ba6dc4775b7ab486b
tree470e805fe8d9dc9da5fbfca69ee103c86a0dec8a
parent54f24e3ed411b19a3647a0aa114b0ea20421bbe7
Check that the subject name in a proxy cert complies to RFC 3820

The subject name MUST be the same as the issuer name, with a single CN
entry added.

RT#1852

Reviewed-by: Rich Salz <rsalz@openssl.org>
Reviewed-by: Stephen Henson <steve@openssl.org>
crypto/x509/x509_txt.c
crypto/x509/x509_vfy.c
include/openssl/x509_vfy.h