CVSROOT: /cvs
Module name: src
Changes by: [email protected] 2026/09/18 12:24:13
Modified files:
regress/lib/libcrypto/x509: name_constraints_test.c
Log message:
Add more name constraint tests.
We have coverage already in the betterTLS stuff for much of the
basics, but it does not cover email name constraints and some
of the other corner cases.
Cover a permitted subject email address, a hostname CN checked when
the SAN carries only an email address, excluded DNS and email
subtrees, and constraints carried by the trust anchor
ok tb@ joshua@
