check_chain_extensions(): Add check that Basic Constraints of CA cert are marked...
authorDr. David von Oheimb <David.von.Oheimb@siemens.com>
Tue, 25 Aug 2020 13:37:46 +0000 (15:37 +0200)
committerDr. David von Oheimb <David.von.Oheimb@siemens.com>
Fri, 11 Sep 2020 05:42:22 +0000 (07:42 +0200)
commit8a639b9d7234ed490f85ea46e4e8c74620452acd
treeeed8a164f5d7d89ff6ac066b8d95e93082ba6232
parent1e41dadfa7b9f792ed0f4714a3d3d36f070cf30e
check_chain_extensions(): Add check that Basic Constraints of CA cert are marked critical

Reviewed-by: Kurt Roeckx <kurt@roeckx.be>
Reviewed-by: Tomas Mraz <tmraz@fedoraproject.org>
(Merged from https://github.com/openssl/openssl/pull/12478)
crypto/x509/v3_purp.c
crypto/x509/x509_txt.c
crypto/x509/x509_vfy.c
include/openssl/x509_vfy.h
include/openssl/x509v3.h