Lay groundwork to support X.509 v3 extensions for IP Addresses and AS Identifiers
authorjob <job@openbsd.org>
Thu, 2 Sep 2021 12:41:44 +0000 (12:41 +0000)
committerjob <job@openbsd.org>
Thu, 2 Sep 2021 12:41:44 +0000 (12:41 +0000)
commit0b5aa37f36f573e8196e695b03eafceb403258ae
tree1bb4af990ca951c555b380d96523eb2d79ac52a2
parentabbaa2745fb6bc1626d89c16a2088aa4589b729d
Lay groundwork to support X.509 v3 extensions for IP Addresses and AS Identifiers

These extensions are defined in RFC 3779 and used in the RPKI (RFC 6482, RFC 8360).
Imported from OpenSSL 1.1.1j (aaf2fcb575cdf6491b98ab4829abf78a3dec8402b8b81efc8f23c00d443981bf)
This changeset is a no-op, as there are 10+ issues and at least 2 security issues.
Work will continue in-tree.

OK tb@, discussed with beck@
lib/libcrypto/asn1/x_x509.c
lib/libcrypto/x509/ext_dat.h
lib/libcrypto/x509/x509.h
lib/libcrypto/x509/x509_addr.c [new file with mode: 0644]
lib/libcrypto/x509/x509_asid.c [new file with mode: 0644]
lib/libcrypto/x509/x509_purp.c
lib/libcrypto/x509/x509v3.h