CVSROOT: /cvs
Module name: src
Changes by: [email protected] 2026/09/29 08:03:40
Modified files:
lib/libcrypto/man: x509v3.cnf.5
lib/libcrypto/x509: x509_crld.c x509_purp.c
Log message:
libcrypto: remove support for nameRelativeToCRLIssuer
Drop support for nameRelativeToCRLIssuer from the CRL Distribution Point
extension. Per RFC 5280, 4.2.1.13, conforming CAs SHOULD not use it, which
is sound advice since this garbage was eating memory for breakfast before
signature thanks to the wonderful gem that is the extension cache.
One has to wonder why this was needed in libcrypto... This isn't worth
fixing, so off to the bit bucket it goes.
ok beck jsing
