If extensions are encountered on a X.509 V1 cert, mark as invalid
authorjob <job@openbsd.org>
Sun, 23 Apr 2023 21:39:19 +0000 (21:39 +0000)
committerjob <job@openbsd.org>
Sun, 23 Apr 2023 21:39:19 +0000 (21:39 +0000)
commit36d21cc0f766b159f5d80598edb13310e6ee9520
tree17150e4a91fa3a905b595dc93b292ee426f87e0b
parent75cc5d0abf1f734c4d3011da63b223ea6dcb4a4c
If extensions are encountered on a X.509 V1 cert, mark as invalid

While there, explicitly check for 0 - as X509_get_version() is a wrapper
around the less than beloved ASN1_INTEGER_get().

OK tb@
lib/libcrypto/x509/x509_purp.c