diff options
| author | Dr. David von Oheimb <David.von.Oheimb@siemens.com> | 2020-08-25 16:58:36 +0200 |
|---|---|---|
| committer | Dr. David von Oheimb <David.von.Oheimb@siemens.com> | 2020-09-11 07:42:22 +0200 |
| commit | bb377c8d6c61920d889b961bd5c862eaac8b28e4 (patch) | |
| tree | acc745971af643a01eb8488800a85a0a5eaca659 /include | |
| parent | da6c691d6d417ad413fdc1e7a7a183d005e7fefd (diff) | |
check_chain_extensions(): Add check that CA cert includes key usage extension
Reviewed-by: Kurt Roeckx <kurt@roeckx.be>
Reviewed-by: Tomas Mraz <tmraz@fedoraproject.org>
(Merged from https://github.com/openssl/openssl/pull/12478)
Diffstat (limited to 'include')
| -rw-r--r-- | include/openssl/x509_vfy.h | 1 |
1 files changed, 1 insertions, 0 deletions
diff --git a/include/openssl/x509_vfy.h b/include/openssl/x509_vfy.h index 53dff234ce..50ae14f240 100644 --- a/include/openssl/x509_vfy.h +++ b/include/openssl/x509_vfy.h @@ -232,6 +232,7 @@ X509_LOOKUP_ctrl_with_libctx((x), X509_L_ADD_STORE, (name), 0, NULL, \ # define X509_V_ERR_CA_BCONS_NOT_CRITICAL 89 # define X509_V_ERR_AUTHORITY_KEY_IDENTIFIER_CRITICAL 90 # define X509_V_ERR_SUBJECT_KEY_IDENTIFIER_CRITICAL 91 +# define X509_V_ERR_CA_CERT_MISSING_KEY_USAGE 92 /* Certificate verify flags */ # ifndef OPENSSL_NO_DEPRECATED_1_1_0 |