Mbed-TLS/mbedtls
1
0
Fork 0
mirror of https://github.com/Mbed-TLS/mbedtls.git synced 2026-08-31 07:19:57 +00:00
Code Issues Packages Projects Releases Wiki Activity

Add missing changelog entry

Browse Source 
Add missing changelog entry for 3698: Mark basic constraints critical
as appropriate.

Signed-off-by: Dave Rodgman <[email protected]>
This commit is contained in:
Dave Rodgman
2021-03-08 18:34:24 +00:00
parent 2d83ac100d
commit b4fe1053e4
1 changed files with 8 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files
ChangeLog.d/basic-constraints-critical.txt
+8
View File
@@ -0,0 +1,8 @@
Bugfix
* This change makes 'mbedtls_x509write_crt_set_basic_constraints'
consistent with RFC 5280 4.2.1.9 which says: "Conforming CAs MUST
include this extension in all CA certificates that contain public keys
used to validate digital signatures on certificates and MUST mark the
extension as critical in such certificates." Previous to this change,
the extension was always marked as non-critical. This was fixed by
#3698.