summaryrefslogtreecommitdiffstats
path: root/crypto/asn1/x_crl.c
diff options
context:
space:
mode:
authorDr. Stephen Henson <steve@openssl.org>2014-06-27 18:49:32 +0100
committerDr. Stephen Henson <steve@openssl.org>2014-06-27 18:50:19 +0100
commit22228d2d407763d234a2463f694df77dca8158fc (patch)
treefe77e5be906625fcd9a97524756ea164742644a8 /crypto/asn1/x_crl.c
parentc57745596c60a84adaf1f5289ec165abc066d551 (diff)
Tolerate critical AKID in CRLs.
PR#3014 (cherry picked from commit 11da66f8b1fbe5777fe08cc6ace9e1f2c1576a50)
Diffstat (limited to 'crypto/asn1/x_crl.c')
-rw-r--r--crypto/asn1/x_crl.c1
1 files changed, 1 insertions, 0 deletions
diff --git a/crypto/asn1/x_crl.c b/crypto/asn1/x_crl.c
index a4dfee8473..dc0106365a 100644
--- a/crypto/asn1/x_crl.c
+++ b/crypto/asn1/x_crl.c
@@ -270,6 +270,7 @@ static int crl_cb(int operation, ASN1_VALUE **pval, const ASN1_ITEM *it,
{
/* We handle IDP and deltas */
if ((nid == NID_issuing_distribution_point)
+ || (nid == NID_authority_key_identifier)
|| (nid == NID_delta_crl))
break;;
crl->flags |= EXFLAG_CRITICAL;