CVSROOT: /cvs
Module name: src
Changes by: [email protected] 2026/09/18 12:21:50
Modified files:
lib/libcrypto/x509: x509_constraints.c
regress/lib/libcrypto/x509: name_constraints_test.c
Log message:
Search the whole subject for email addresses and common names.
The subject lookups started from the index left over from walking
the subjectAltName, so a leaf without a SAN never had its first two
subject entries examined and an emailAddress there escaped the
name constraints check.
Reported by Sina Gogani Khiabani.
ok tb@ joshua@
