diff options
| author | Dr. Stephen Henson <steve@openssl.org> | 2004-12-01 01:45:30 +0000 |
|---|---|---|
| committer | Dr. Stephen Henson <steve@openssl.org> | 2004-12-01 01:45:30 +0000 |
| commit | 1862dae862e149cce5f9ef75a219419a52a4814a (patch) | |
| tree | a342c300a81df284a96f2e8db42e4a9de96845d7 /CHANGES | |
| parent | b7b46c9a87c9fe7275a84c5ecb9f5f3459d7b307 (diff) | |
| download | openssl-1862dae862e149cce5f9ef75a219419a52a4814a.tar.gz | |
Perform partial comparison of different character types in X509_NAME_cmp().
Diffstat (limited to 'CHANGES')
| -rw-r--r-- | CHANGES | 6 |
1 files changed, 6 insertions, 0 deletions
@@ -745,6 +745,12 @@ Changes between 0.9.7e and 0.9.7f [XX xxx XXXX] + *) Perform some character comparisons of different types in X509_NAME_cmp: + this is needed for some certificates that reencode DNs into UTF8Strings + (in violation of RFC3280) and can't or wont issue name rollover + certificates. + [Steve Henson] + *) Make an explicit check during certificate validation to see that the CA setting in each certificate on the chain is correct. As a side effect always do the following basic checks on extensions, |