Files
wolfssl/wolfcrypt
Ruby Martin bc26ce05cd walk cert chain to apply ancestor name constraints
- Ancestor walk added to ParseCertRelative
  - FindSignerByAkidOrName helper: AKID->SKID with name-hash
    validation, name-only fallback only when AKID is absent
  - Signer fields: authKeyIdSet, authKeyIdHash
  - issuerNameHash ifdef widened to include !IGNORE_NAME_CONSTRAINTS
  - WOLFSSL_MAX_CHAIN_DEPTH macro (default 20)
  - Self-loop and A->B->A cycle termination
  - CN-as-DNS fallback in ConfirmNameConstraints gated on !cert->isCA
2026-06-18 14:52:08 -06:00
..