Merge pull request #1773 from ejohnstown/critical-option

Certificate Extension Critical Check Optionality
This commit is contained in:
toddouska
2018-08-23 08:21:19 -07:00
committed by GitHub

View File

@@ -7000,13 +7000,15 @@ static int DecodeCertExtensions(DecodedCert* cert)
break; break;
default: default:
#ifndef WOLFSSL_NO_ASN_STRICT
/* While it is a failure to not support critical extensions, /* While it is a failure to not support critical extensions,
* still parse the certificate ignoring the unsupported * still parse the certificate ignoring the unsupported
* extension to allow caller to accept it with the verify * extension to allow caller to accept it with the verify
* callback. */ * callback. */
if (critical) if (critical)
criticalFail = 1; criticalFail = 1;
break; #endif
break;
} }
idx += length; idx += length;
} }