diff options
| author | Werner Koch <[email protected]> | 2007-01-05 11:49:19 +0000 |
|---|---|---|
| committer | Werner Koch <[email protected]> | 2007-01-05 11:49:19 +0000 |
| commit | 05277262bc2d4ebc42eb8ae76f5922010a36665a (patch) | |
| tree | 5a32ec5bb63d42e1f8fb52c70d053e3ff9ac52b3 /sm/certchain.c | |
| parent | Installed revised and updated translation (diff) | |
| download | gnupg-05277262bc2d4ebc42eb8ae76f5922010a36665a.tar.gz gnupg-05277262bc2d4ebc42eb8ae76f5922010a36665a.zip | |
Add subjectAltName to the list of known critical extensions
Diffstat (limited to 'sm/certchain.c')
| -rw-r--r-- | sm/certchain.c | 6 |
1 files changed, 6 insertions, 0 deletions
diff --git a/sm/certchain.c b/sm/certchain.c index 2745129eb..d4147b3f7 100644 --- a/sm/certchain.c +++ b/sm/certchain.c @@ -137,6 +137,12 @@ unknown_criticals (ksba_cert_t cert, int listmode, FILE *fp) { static const char *known[] = { "2.5.29.15", /* keyUsage */ + "2.5.29.17", /* subjectAltName + Japanese DoCoMo certs mark them as critical. PKIX + only requires them as critical if subjectName is + empty. I don't know whether our code gracefully + handles such empry subjectNames but that is + another story. */ "2.5.29.19", /* basic Constraints */ "2.5.29.32", /* certificatePolicies */ "2.5.29.37", /* extendedKeyUsage - handled by certlist.c */ |