Check ipAddrBlock and autonomousSysNum for criticality
authortb <tb@openbsd.org>
Sun, 26 Dec 2021 12:30:11 +0000 (12:30 +0000)
committertb <tb@openbsd.org>
Sun, 26 Dec 2021 12:30:11 +0000 (12:30 +0000)
commit0bb66b69ddfdd1940b9af3b2e86d87c1c2ce2263
tree5a22a656dd523068e9d2b33469f3d87d1af00a85
parent6b82fc60da251473619f39ac3cb81179c8804b4b
Check ipAddrBlock and autonomousSysNum for criticality

These extensions MUST be marked critical. Criticality is determined by the
ASN1_BOOLEAN that is extracted and ignored after the FIXME a few lines
below each of the two hunks. Rather than getting the info from there, it's
easier to use an API call that checks what was already parsed by d2i_X509().

ok claudio job
usr.sbin/rpki-client/cert.c