Fail when parsing unsupported critical extensions in openssl_x509

This commit is contained in:
Martin Willi
2011-01-05 16:46:02 +01:00
parent 2d3ae93832
commit b0892d094c
@@ -841,7 +841,11 @@ static bool parse_extensions(private_openssl_x509_t *this)
ok = parse_crlDistributionPoints_ext(this, ext); ok = parse_crlDistributionPoints_ext(this, ext);
break; break;
default: default:
ok = TRUE; ok = X509_EXTENSION_get_critical(ext) != 0;
if (!ok)
{
DBG1(DBG_LIB, "found unsupported critical X.509 extension");
}
break; break;
} }
if (!ok) if (!ok)