Re: [libvirt] [PATCH] Add sanity checking of basic contraints, key purpose & key usage

2011-07-15 Thread Eric Blake
On 07/15/2011 01:46 PM, Eric Blake wrote: > On 07/15/2011 05:57 AM, Daniel P. Berrange wrote: >> Gnutls requires that certificates have basic constraints present >> to be used as a CA certificate. OpenSSL doesn't add this data >> by default, so add a sanity check to catch this situation. Also >> va

Re: [libvirt] [PATCH] Add sanity checking of basic contraints, key purpose & key usage

2011-07-15 Thread Eric Blake
On 07/15/2011 05:57 AM, Daniel P. Berrange wrote: > Gnutls requires that certificates have basic constraints present > to be used as a CA certificate. OpenSSL doesn't add this data > by default, so add a sanity check to catch this situation. Also > validate that the key usage and key purpose constr

[libvirt] [PATCH] Add sanity checking of basic contraints, key purpose & key usage

2011-07-15 Thread Daniel P. Berrange
Gnutls requires that certificates have basic constraints present to be used as a CA certificate. OpenSSL doesn't add this data by default, so add a sanity check to catch this situation. Also validate that the key usage and key purpose constraints contain correct data * src/rpc/virnettlscontext.c: