0c4d7da Do stricter validation of CA certificates

2 files Authored by jcholast 5 years ago , Committed by mkosek 5 years ago ,
    Do stricter validation of CA certificates
    
    Every CA certificate must have non-empty subject and basic constraints
    extension with the CA flag set.
    
    https://fedorahosted.org/freeipa/ticket/4477
    
    Reviewed-By: Petr Viktorin <pviktori@redhat.com>
    
        
file modified
+4 -0