Import policy.c from BoringSSL as x509_policy.c
authorbeck <beck@openbsd.org>
Wed, 26 Apr 2023 18:56:52 +0000 (18:56 +0000)
committerbeck <beck@openbsd.org>
Wed, 26 Apr 2023 18:56:52 +0000 (18:56 +0000)
commit25478f0306a141c41bb38ecdf548f2446bedb642
treeceb9f2186c5bf0f4f5776ee1d83233323ec4c053
parente3c1235880528190055241fa1872bbf68fbc1411
Import policy.c from BoringSSL as x509_policy.c

This is an implementation of the X509 policy processing using a
DAG instead of a tree to avoid the problem of exponential expansion
of the policy tree as specified in RFC 5280

For details see:
https://boringssl-review.googlesource.com/c/boringssl/+/55762

ok tb@ jsing@
lib/libcrypto/x509/x509_policy.c [new file with mode: 0644]