Luke Howard 8350f34a05 krb5: don't require krbtgt otherName match for Win2K ...

Merged from Apple branch: when the Win2K PKINIT compatibility option is set, do
not require krbtgt otherName to match when validating KDC certificate.

2019-05-18 23:19:06 -04:00

12 KiB

Raw Blame History

View Raw