Revert "Check certificate extensions in trusted certificates"
authorbeck <beck@openbsd.org>
Thu, 17 Nov 2022 00:42:12 +0000 (00:42 +0000)
committerbeck <beck@openbsd.org>
Thu, 17 Nov 2022 00:42:12 +0000 (00:42 +0000)
commit5822070f84708d84fa2bf715a3c3272c5437e707
tree685c97be3c4c8dec19531633834a8838018e910a
parent57d013cdfbf48e187778e3055a1593ea1998496b
Revert "Check certificate extensions in trusted certificates"

There are some possible strange side effects noticed by the
openssl cms regress tests that I missed. Backing this out
until I untangle it

ok tb@
lib/libcrypto/x509/x509_internal.h
lib/libcrypto/x509/x509_trs.c
lib/libcrypto/x509/x509_vfy.c