Marco Oliverio a39e8ae976 Route DNS name-constraint checks through one helper ...

Add wolfssl_local_MatchDnsNameConstraint() dispatching wildcard names
to the subtree matcher and literal names to plain base-name matching,
and use it for the ASN_DNS_TYPE branches of PermittedListOk() and
IsInExcludedList().

This also drops the outer name->len >= base len byte-length guard for
literal DNS names. That guard ran before MatchBaseName() could strip
the absolute-FQDN trailing dot, so a constraint base like
DNS:example.com. never matched the SAN example.com it denotes.

2026-06-15 12:09:56 +02:00

..

benchmark

Merge pull request #10571 from Frauschi/mlkem_rename

2026-06-05 11:00:44 -05:00

src

Route DNS name-constraint checks through one helper

2026-06-15 12:09:56 +02:00

test

Merge pull request #10668 from holtrop-wolfssl/f-5394

2026-06-12 16:35:31 -07:00