aboutsummaryrefslogtreecommitdiffstats
path: root/crypto/asn1/x_x509.c
diff options
context:
space:
mode:
authorDr. Stephen Henson <steve@openssl.org>2008-08-08 15:35:29 +0000
committerDr. Stephen Henson <steve@openssl.org>2008-08-08 15:35:29 +0000
commite9746e03ee222b0123ac118f8952e161e7d48a2d (patch)
tree76d0d19a95ea0b66ea735c561ccd4afaaa742e49 /crypto/asn1/x_x509.c
parentab9c689ad387fcd209017fe45985b1938a0ee0df (diff)
downloadopenssl-e9746e03ee222b0123ac118f8952e161e7d48a2d.tar.gz
Initial support for name constraints certificate extension.
TODO: robustness checking on name forms.
Diffstat (limited to 'crypto/asn1/x_x509.c')
-rw-r--r--crypto/asn1/x_x509.c2
1 files changed, 2 insertions, 0 deletions
diff --git a/crypto/asn1/x_x509.c b/crypto/asn1/x_x509.c
index a3cae2c128..dafd3cc921 100644
--- a/crypto/asn1/x_x509.c
+++ b/crypto/asn1/x_x509.c
@@ -116,6 +116,8 @@ static int x509_cb(int operation, ASN1_VALUE **pval, const ASN1_ITEM *it,
AUTHORITY_KEYID_free(ret->akid);
CRL_DIST_POINTS_free(ret->crldp);
policy_cache_free(ret->policy_cache);
+ GENERAL_NAMES_free(ret->altname);
+ NAME_CONSTRAINTS_free(ret->nc);
#ifndef OPENSSL_NO_RFC3779
sk_IPAddressFamily_pop_free(ret->rfc3779_addr, IPAddressFamily_free);
ASIdentifiers_free(ret->rfc3779_asid);