Check that the subject name in a proxy cert complies to RFC 3820
authorRichard Levitte <levitte@openssl.org>
Sun, 19 Jun 2016 08:55:16 +0000 (10:55 +0200)
committerRichard Levitte <levitte@openssl.org>
Wed, 29 Jun 2016 21:13:54 +0000 (23:13 +0200)
commit338fb1688fbfb7efe0bdd475b01791a6de5ef94b
tree0a630d586e6b9f62e6c6da840d9c1bd0b1eb24b4
parentad64a69e02f7dda422d0f4f53dce7b1278715380
Check that the subject name in a proxy cert complies to RFC 3820

The subject name MUST be the same as the issuer name, with a single CN
entry added.

RT#1852

Reviewed-by: Rich Salz <rsalz@openssl.org>
crypto/x509/x509.h
crypto/x509/x509_err.c
crypto/x509/x509_txt.c
crypto/x509/x509_vfy.c
crypto/x509/x509_vfy.h