CVSROOT:        /cvs
Module name:    src
Changes by:     [email protected]    2026/09/21 14:54:21

Modified files:
        lib/libcrypto/x509: x509_ncons.c 

Log message:
x509/x509_ncons: More checking for embedded NULs in name constraints

NAME_CONSTRAINTS_check() accepts an out-of-subtree DNS subjectAltName
when the IA5String contains an embedded NUL.

Based on a patch by Frank Denis

tweak/ok beck

Reply via email to