summaryrefslogtreecommitdiffstats
path: root/crypto/asn1
diff options
context:
space:
mode:
authorDr. Stephen Henson <steve@openssl.org>2014-06-27 18:49:32 +0100
committerDr. Stephen Henson <steve@openssl.org>2014-06-27 18:50:45 +0100
commitf05bce4f2fe554d3769192bc53eaf47c63f79c1c (patch)
tree025f2b8b94451f579f279359599ed717f8e3da6f /crypto/asn1
parent5cd3ae9f181b70eb1001f993dafa13b843aa6d2c (diff)
Tolerate critical AKID in CRLs.
PR#3014 (cherry picked from commit 11da66f8b1fbe5777fe08cc6ace9e1f2c1576a50)
Diffstat (limited to 'crypto/asn1')
-rw-r--r--crypto/asn1/x_crl.c1
1 files changed, 1 insertions, 0 deletions
diff --git a/crypto/asn1/x_crl.c b/crypto/asn1/x_crl.c
index c51c690ba9..3f03efbe60 100644
--- a/crypto/asn1/x_crl.c
+++ b/crypto/asn1/x_crl.c
@@ -270,6 +270,7 @@ static int crl_cb(int operation, ASN1_VALUE **pval, const ASN1_ITEM *it,
{
/* We handle IDP and deltas */
if ((nid == NID_issuing_distribution_point)
+ || (nid == NID_authority_key_identifier)
|| (nid == NID_delta_crl))
break;;
crl->flags |= EXFLAG_CRITICAL;