Adam Langley bb50783805 Don't allow SGC EKUs for server certificates. ...

The Server Gated Cryptography EKUs are a left-over from 1990's export
regulations. For historical reaons, the SGC EKUs are accepted as a valid
substitute for a server authentication EKU, but they shouldn't be. This
change makes it so that we ignore them.

Change-Id: Ie184c52f588ae391a95d61c474ee6324bdd8f4f2
Reviewed-on: https://boringssl-review.googlesource.com/c/boringssl/+/37545
Commit-Queue: Adam Langley <agl@google.com>
Reviewed-by: David Benjamin <davidben@google.com>

2019-09-19 19:56:46 +00:00

..

ext_dat.h

Restore some revocation-related X.509 extensions.

2018-05-15 23:36:08 +00:00

internal.h

Require certificates under name constraints use SANs.

2019-04-22 21:32:29 +00:00

pcy_cache.c

Avoid modifying stack in sk_find.

2018-04-12 21:02:12 +00:00

pcy_data.c

OpenSSL reformat x509/, x509v3/, pem/ and asn1/.

2016-01-19 17:01:51 +00:00

pcy_int.h

Convert stack.h to use inline functions.

2017-05-22 15:06:04 +00:00

pcy_lib.c

Delete some dead code from crypto/x509.

2017-06-09 19:58:08 +00:00

pcy_map.c

OpenSSL reformat x509/, x509v3/, pem/ and asn1/.

2016-01-19 17:01:51 +00:00

pcy_node.c

Avoid modifying stack in sk_find.

2018-04-12 21:02:12 +00:00

pcy_tree.c

Avoid modifying stack in sk_find.

2018-04-12 21:02:12 +00:00

tab_test.cc

Convert the tests in x509v3 to GTest.

2017-07-10 19:05:04 +00:00

v3_akey.c

Unexport and rename hex_to_string, string_to_hex, and name_cmp.

2018-11-27 00:08:39 +00:00

v3_akeya.c

OpenSSL reformat x509/, x509v3/, pem/ and asn1/.

2016-01-19 17:01:51 +00:00

v3_alt.c

Replace BIO_printf with ASN1_STRING_print in GENERAL_NAME_print

2019-09-18 21:26:39 +00:00

v3_bcons.c

OpenSSL reformat x509/, x509v3/, pem/ and asn1/.

2016-01-19 17:01:51 +00:00

v3_bitst.c

OpenSSL reformat x509/, x509v3/, pem/ and asn1/.

2016-01-19 17:01:51 +00:00

v3_conf.c

Unexport and rename hex_to_string, string_to_hex, and name_cmp.

2018-11-27 00:08:39 +00:00

v3_cpols.c

Unexport and rename hex_to_string, string_to_hex, and name_cmp.

2018-11-27 00:08:39 +00:00

v3_crld.c

OpenSSL reformat x509/, x509v3/, pem/ and asn1/.

2016-01-19 17:01:51 +00:00

v3_enum.c

OpenSSL reformat x509/, x509v3/, pem/ and asn1/.

2016-01-19 17:01:51 +00:00

v3_extku.c

OpenSSL reformat x509/, x509v3/, pem/ and asn1/.

2016-01-19 17:01:51 +00:00

v3_genn.c

Fix undefined function pointer casts in {d2i,i2d}_Foo_{bio,fp}

2018-10-01 17:34:53 +00:00

v3_ia5.c

Work around language and compiler bug in memcpy, etc.

2016-12-21 20:34:47 +00:00

v3_info.c

Clear some _CRT_SECURE_NO_WARNINGS warnings.

2017-10-25 04:14:28 +00:00

v3_int.c

OpenSSL reformat x509/, x509v3/, pem/ and asn1/.

2016-01-19 17:01:51 +00:00

v3_lib.c

Avoid modifying stack in sk_find.

2018-04-12 21:02:12 +00:00

v3_ncons.c

Guard against DoS in name constraints handling.

2017-09-06 22:00:46 +00:00

v3_ocsp.c

Restore some revocation-related X.509 extensions.

2018-05-15 23:36:08 +00:00

v3_pci.c

Unexport and rename hex_to_string, string_to_hex, and name_cmp.

2018-11-27 00:08:39 +00:00

v3_pcia.c

OpenSSL reformat x509/, x509v3/, pem/ and asn1/.

2016-01-19 17:01:51 +00:00

v3_pcons.c

OpenSSL reformat x509/, x509v3/, pem/ and asn1/.

2016-01-19 17:01:51 +00:00

v3_pku.c

OpenSSL reformat x509/, x509v3/, pem/ and asn1/.

2016-01-19 17:01:51 +00:00

v3_pmaps.c

OpenSSL reformat x509/, x509v3/, pem/ and asn1/.

2016-01-19 17:01:51 +00:00

v3_prn.c

Remove ASN1_parse and ASN1_parse_dump.

2016-06-14 17:39:17 +00:00

v3_purp.c

Don't allow SGC EKUs for server certificates.

2019-09-19 19:56:46 +00:00

v3_skey.c

Unexport and rename hex_to_string, string_to_hex, and name_cmp.

2018-11-27 00:08:39 +00:00

v3_sxnet.c

OpenSSL reformat x509/, x509v3/, pem/ and asn1/.

2016-01-19 17:01:51 +00:00

v3_utl.c

Require certificates under name constraints use SANs.

2019-04-22 21:32:29 +00:00

v3name_test.cc

Fix misspelled TODO.

2019-07-31 18:09:55 +00:00