Bring back r1.3, ok beck
authortb <tb@openbsd.org>
Thu, 28 Oct 2021 10:58:23 +0000 (10:58 +0000)
committertb <tb@openbsd.org>
Thu, 28 Oct 2021 10:58:23 +0000 (10:58 +0000)
commite35ec605ffd94a06f2cdeb73f3f4ae7913e4d777
tree3a054c890395af230765c8e15be038959f5cccb6
parenta1c11753b970f2dc16d85ad9fffac0f76245c3f3
Bring back r1.3, ok beck

Original commit message from beck:

Validate Subject Alternate Names when they are being added to certificates.

With this change we will reject adding SAN DNS, EMAIL, and IP addresses
that are malformed at certificate creation time.

ok jsing@ tb@
lib/libcrypto/x509/x509_alt.c