Fail when parsing unsupported critical extensions in openssl_x509

2011-01-05 16:46:02 +01:00
parent 2d3ae93832
commit b0892d094c
1 changed files with 5 additions and 1 deletions
@@ -841,7 +841,11 @@ static bool parse_extensions(private_openssl_x509_t *this)
 					ok = parse_crlDistributionPoints_ext(this, ext);
 					break;
 				default:
-					ok = TRUE;
+					ok = X509_EXTENSION_get_critical(ext) != 0;
+					if (!ok)
+					{
+						DBG1(DBG_LIB, "found unsupported critical X.509 extension");
+					}
 					break;
 			}
 			if (!ok)