diff options
| author | Viktor Dukhovni <openssl-users@dukhovni.org> | 2018-05-22 14:46:02 -0400 |
|---|---|---|
| committer | Viktor Dukhovni <openssl-users@dukhovni.org> | 2018-05-23 11:08:48 -0400 |
| commit | 6d3cfd13a904a03fc3522da935136dcdd12e9014 (patch) | |
| tree | 9eac6b056b9bc2a5e5dfa19291d3c4a180f9aba1 /crypto/ec/ecp_nistz256.c | |
| parent | c2c2c7b3f1df94f9a447cc3cf8196579543cc57e (diff) | |
Skip CN DNS name constraint checks when not needed
Only check the CN against DNS name contraints if the
`X509_CHECK_FLAG_NEVER_CHECK_SUBJECT` flag is not set, and either the
certificate has no DNS subject alternative names or the
`X509_CHECK_FLAG_ALWAYS_CHECK_SUBJECT` flag is set.
Add pertinent documentation, and touch up some stale text about
name checks and DANE.
Reviewed-by: Matt Caswell <matt@openssl.org>
Reviewed-by: Tim Hudson <tjh@openssl.org>
Diffstat (limited to 'crypto/ec/ecp_nistz256.c')
0 files changed, 0 insertions, 0 deletions