mirror of
https://github.com/wolfSSL/wolfssl.git
synced 2025-07-30 02:37:28 +02:00
improve comments for subject name email matching
This commit is contained in:
@ -14359,7 +14359,13 @@ static int ConfirmNameConstraints(Signer* signer, DecodedCert* cert)
|
|||||||
case ASN_RFC822_TYPE:
|
case ASN_RFC822_TYPE:
|
||||||
/* Shouldn't it validade E= in subject as well? */
|
/* Shouldn't it validade E= in subject as well? */
|
||||||
name = cert->altEmailNames;
|
name = cert->altEmailNames;
|
||||||
if (cert->subjectEmail != NULL) { /* add subject email to list*/
|
|
||||||
|
/* Add subject email to temporary list for checking.
|
||||||
|
* In the case of no subject alt. names, the list will be a
|
||||||
|
* single node having the subject name email address. The node
|
||||||
|
* subjectDnsName is not needed after done being compared with
|
||||||
|
* in this function */
|
||||||
|
if (cert->subjectEmail != NULL) {
|
||||||
/* RFC 5280 section 4.2.1.10
|
/* RFC 5280 section 4.2.1.10
|
||||||
* "When constraints are imposed on the rfc822Name name
|
* "When constraints are imposed on the rfc822Name name
|
||||||
* form, but the certificate does not include a subject
|
* form, but the certificate does not include a subject
|
||||||
|
Reference in New Issue
Block a user