From e66a73adce7dd3fc627f222a078d15d093d3b0ca Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?Love=20H=C3=B6rnquist=20=C3=85strand?= Date: Wed, 22 Feb 2006 13:11:44 +0000 Subject: [PATCH] x git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@16758 ec53bebd-3082-4978-b11e-865c3cabbd6b --- lib/hx509/ChangeLog | 15 ++++++++++++++- 1 file changed, 14 insertions(+), 1 deletion(-) diff --git a/lib/hx509/ChangeLog b/lib/hx509/ChangeLog index 89e1945be..c692466ae 100644 --- a/lib/hx509/ChangeLog +++ b/lib/hx509/ChangeLog @@ -1,4 +1,17 @@ -2006-02-14 Love Hörnquist Åstrand +2006-02-22 Love Hörnquist Åstrand + + * cert.c: Name constraits needs to be evaluated in block as they + appear in the certificates, they can not be joined to one + list. One example of this is: + + - cert is cn=foo,dc=bar,dc=baz + - subca is dc=foo,dc=baz with name restriction dc=kaka,dc=baz + - ca is dc=baz with name restriction dc=baz + + If the name restrictions are merged to a list, the certificate + will pass this test. + +2006-02-14 Love Hörnquist Åstrand * cert.c: Handle more name constraints cases.