From 22228d2d407763d234a2463f694df77dca8158fc Mon Sep 17 00:00:00 2001 From: "Dr. Stephen Henson" Date: Fri, 27 Jun 2014 18:49:32 +0100 Subject: [PATCH] Tolerate critical AKID in CRLs. PR#3014 (cherry picked from commit 11da66f8b1fbe5777fe08cc6ace9e1f2c1576a50) --- crypto/asn1/x_crl.c | 1 + 1 file changed, 1 insertion(+) diff --git a/crypto/asn1/x_crl.c b/crypto/asn1/x_crl.c index a4dfee8473..dc0106365a 100644 --- a/crypto/asn1/x_crl.c +++ b/crypto/asn1/x_crl.c @@ -270,6 +270,7 @@ static int crl_cb(int operation, ASN1_VALUE **pval, const ASN1_ITEM *it, { /* We handle IDP and deltas */ if ((nid == NID_issuing_distribution_point) + || (nid == NID_authority_key_identifier) || (nid == NID_delta_crl)) break;; crl->flags |= EXFLAG_CRITICAL; -- 2.34.1