Age | Commit message (Collapse) | Author | |
---|---|---|---|
2021-01-20 | make various test CA certs RFC 5280 compliant w.r.t. X509 extensions | Dr. David von Oheimb | |
Reviewed-by: Tomas Mraz <tomas@openssl.org> (Merged from https://github.com/openssl/openssl/pull/13719) | |||
2016-01-31 | Compat self-signed trust with reject-only aux data | Viktor Dukhovni | |
When auxiliary data contains only reject entries, continue to trust self-signed objects just as when no auxiliary data is present. This makes it possible to reject specific uses without changing what's accepted (and thus overring the underlying EKU). Added new supported certs and doubled test count from 38 to 76. Reviewed-by: Dr. Stephen Henson <steve@openssl.org> |