Fix URI name constraints, allow for URI's with no host part.
authorbeck <beck@openbsd.org>
Sun, 26 Jun 2022 11:29:27 +0000 (11:29 +0000)
committerbeck <beck@openbsd.org>
Sun, 26 Jun 2022 11:29:27 +0000 (11:29 +0000)
commit8e3291af1e0f6fd63cae7c1511b0d04f99b74692
tree2949b11ded0cbc7f0cd6799f23a9289332f1044a
parent1fd6e0f27a1b79aefcbc7bda5f618c8c59842dce
Fix URI name constraints, allow for URI's with no host part.

Such uri's must be parsed and allowed, but then should
fail if a name constraint is present.

Adds regress testing for this same case.

fixes https://github.com/libressl-portable/openbsd/issues/131

ok tb@
lib/libcrypto/x509/x509_constraints.c
regress/lib/libcrypto/x509/constraints.c