openssl/crypto/asn1
Viktor Dukhovni d02d80b2e8 Limit scope of CN name constraints
Don't apply DNS name constraints to the subject CN when there's a
least one DNS-ID subjectAlternativeName.

Don't apply DNS name constraints to subject CN's that are sufficiently
unlike DNS names.  Checked name must have at least two labels, with
all labels non-empty, no trailing '.' and all hyphens must be
internal in each label.  In addition to the usual LDH characters,
we also allow "_", since some sites use these for hostnames despite
all the standards.

Reviewed-by: Matt Caswell <matt@openssl.org>
Reviewed-by: Tim Hudson <tjh@openssl.org>
2018-05-23 11:12:13 -04:00
..
a_bitstr.c
a_d2i_fp.c
a_digest.c
a_dup.c
a_gentm.c
a_i2d_fp.c
a_int.c
a_mbstr.c
a_object.c Update copyright year 2018-04-17 15:18:40 +02:00
a_octet.c
a_print.c
a_sign.c
a_strex.c Limit scope of CN name constraints 2018-05-23 11:12:13 -04:00
a_strnid.c Update copyright year 2018-04-17 15:18:40 +02:00
a_time.c
a_type.c
a_utctm.c
a_utf8.c
a_verify.c
ameth_lib.c Add functions for setting the new EVP_PKEY_ASN1_METHOD functions 2018-03-15 12:47:27 +00:00
asn1_err.c a_strex.c: prevent out of bound read in do_buf() 2018-05-02 20:36:21 +02:00
asn1_gen.c
asn1_item_list.c
asn1_item_list.h
asn1_lib.c
asn1_locl.h
asn1_par.c
asn_mime.c Fix a text canonicalisation bug in CMS 2018-04-03 15:52:31 +01:00
asn_moid.c Update copyright year 2018-04-17 15:18:40 +02:00
asn_mstbl.c
asn_pack.c
bio_asn1.c Update copyright year 2018-04-17 15:18:40 +02:00
bio_ndef.c Update copyright year 2018-04-17 15:18:40 +02:00
build.info
charmap.h Generate copyright year properly 2018-02-13 13:22:30 -05:00
charmap.pl Update copyright year 2018-02-27 13:59:42 +00:00
d2i_pr.c
d2i_pu.c
evp_asn1.c
f_int.c
f_string.c
i2d_pr.c
i2d_pu.c
n_pkey.c
nsseq.c
p5_pbe.c
p5_pbev2.c
p5_scrypt.c Update copyright year 2018-05-01 13:34:30 +01:00
p8_pkey.c
standard_methods.h Update copyright year 2018-03-20 13:08:46 +00:00
t_bitst.c
t_pkey.c
t_spki.c
tasn_dec.c Update copyright year 2018-04-03 13:57:12 +01:00
tasn_enc.c Set error code on alloc failures 2018-04-03 11:31:16 -04:00
tasn_fre.c
tasn_new.c Update copyright year 2018-04-17 15:18:40 +02:00
tasn_prn.c
tasn_scn.c
tasn_typ.c
tasn_utl.c Update copyright year 2018-04-17 15:18:40 +02:00
tbl_standard.h
x_algor.c
x_bignum.c
x_info.c
x_int64.c Update copyright year 2018-04-17 15:18:40 +02:00
x_long.c
x_pkey.c
x_sig.c
x_spki.c
x_val.c