diff options
Diffstat (limited to '')
| -rw-r--r-- | sm/certchain.c | 6 |
1 files changed, 6 insertions, 0 deletions
diff --git a/sm/certchain.c b/sm/certchain.c index 2745129eb..d4147b3f7 100644 --- a/sm/certchain.c +++ b/sm/certchain.c @@ -137,6 +137,12 @@ unknown_criticals (ksba_cert_t cert, int listmode, FILE *fp) { static const char *known[] = { "2.5.29.15", /* keyUsage */ + "2.5.29.17", /* subjectAltName + Japanese DoCoMo certs mark them as critical. PKIX + only requires them as critical if subjectName is + empty. I don't know whether our code gracefully + handles such empry subjectNames but that is + another story. */ "2.5.29.19", /* basic Constraints */ "2.5.29.32", /* certificatePolicies */ "2.5.29.37", /* extendedKeyUsage - handled by certlist.c */ |