CVSROOT: /cvs Module name: src Changes by: [email protected] 2021/10/26 03:09:53
Modified files:
lib/libcrypto/x509: x509_alt.c x509_constraints.c
x509_internal.h
Log message:
Validate Subject Alternate Names when they are being added to certificates.
With this change we will reject adding SAN DNS, EMAIL, and IP addresses
that are malformed at certificate creation time.
ok jsing@ tb@
