check_chain_extensions(): Add check that CA cert includes key usage extension
authorDr. David von Oheimb <David.von.Oheimb@siemens.com>
Tue, 25 Aug 2020 14:58:36 +0000 (16:58 +0200)
committerDr. David von Oheimb <David.von.Oheimb@siemens.com>
Fri, 11 Sep 2020 05:42:22 +0000 (07:42 +0200)
commitbb377c8d6c61920d889b961bd5c862eaac8b28e4
treeacc745971af643a01eb8488800a85a0a5eaca659
parentda6c691d6d417ad413fdc1e7a7a183d005e7fefd
check_chain_extensions(): Add check that CA cert includes key usage extension

Reviewed-by: Kurt Roeckx <kurt@roeckx.be>
Reviewed-by: Tomas Mraz <tmraz@fedoraproject.org>
(Merged from https://github.com/openssl/openssl/pull/12478)
crypto/x509/x509_txt.c
crypto/x509/x509_vfy.c
include/openssl/x509_vfy.h