diff options
| author | Martin Willi <martin@revosec.ch> | 2014-10-30 11:42:04 +0100 |
|---|---|---|
| committer | Martin Willi <martin@revosec.ch> | 2014-10-30 11:42:04 +0100 |
| commit | 8131d180a81159273c7f6e1aefee85144921453b (patch) | |
| tree | 6a65a828d79021d18f67703160e6e96cab524f46 /src/libhydra/attributes/mem_pool.c | |
| parent | 34fed1538b81681e5843286bf5edb36e360fd910 (diff) | |
| parent | b9d38c9fa2397fffb7cfdc56d91292c93f84b2ba (diff) | |
| download | strongswan-8131d180a81159273c7f6e1aefee85144921453b.tar.bz2 strongswan-8131d180a81159273c7f6e1aefee85144921453b.tar.xz | |
Merge branch 'policy-constraints'
Fixes handling of invalid policies in end entity certificates by not rejecting
the full certificate, but just invalidating the affected policy. Additionally
adds a bunch of unit tests for the constraints plugin, and some minor fixes
to the nameConstraints handling.
Currently we still reject CAs that use invalid policy mapping; we should accept
such certificates and just invalid affected policies in a next iteration.
Fixes #453.
Diffstat (limited to 'src/libhydra/attributes/mem_pool.c')
0 files changed, 0 insertions, 0 deletions