Fail when parsing unsupported critical extensions in openssl_x509
This commit is contained in:
@@ -841,7 +841,11 @@ static bool parse_extensions(private_openssl_x509_t *this)
|
|||||||
ok = parse_crlDistributionPoints_ext(this, ext);
|
ok = parse_crlDistributionPoints_ext(this, ext);
|
||||||
break;
|
break;
|
||||||
default:
|
default:
|
||||||
ok = TRUE;
|
ok = X509_EXTENSION_get_critical(ext) != 0;
|
||||||
|
if (!ok)
|
||||||
|
{
|
||||||
|
DBG1(DBG_LIB, "found unsupported critical X.509 extension");
|
||||||
|
}
|
||||||
break;
|
break;
|
||||||
}
|
}
|
||||||
if (!ok)
|
if (!ok)
|
||||||
|
|||||||
Reference in New Issue
Block a user