CVSROOT: /cvs Module name: src Changes by: t...@cvs.openbsd.org 2023/06/20 08:21:19
Modified files:
lib/libcrypto/x509: x509_purp.c
Log message:
Improve certificate version checks in x509v3_cache_extensions()
Only allow version v1-v3, disallow issuerUID and subjectUID in v1 certs
and require that if X509v3 extensions are present that the cert be v3.
Initial diff from job
ok job jsing
