CVSROOT: /cvs
Module name: src
Changes by: [email protected] 2026/11/07 02:51:12
Modified files:
lib/libcrypto/x509: x509_purp.c
Log message:
Ignore the Netscape certificate type extension
The 90's were amazing, but this is well past time to let it go.
x509v3_cache_extensions no longer reads nsCertType, so it no longer
makes a certificate a CA or restricts its purposes. A critical
nsCertType is now an unhandled critical extension.
This is only an initial defang, code removal for this will follow
ok tb@
