diff options
| author | Linus Nordberg <linus@nordberg.se> | 2015-02-20 12:20:09 +0100 |
|---|---|---|
| committer | Linus Nordberg <linus@nordberg.se> | 2015-02-20 12:20:09 +0100 |
| commit | 4d2993890fed46c5611735e84d4f737e8c342718 (patch) | |
| tree | 6da78e0a5362b8b7e6b0e6331f58e9b45c44dfbf /tools/testcerts/roots/root2.pem | |
| parent | 7cbbfa7c7e0fba134838c5c9c58d2d3174232882 (diff) | |
Stop validating that cert.issuer matches issuer.subject.
Even canoncalized versions of this data mismatch in otherwise proper
chains. Since we're not here to validate chains for any other reasons
than attribution and spam control, let's stop validate
cert.issuer==candidate.subject. We still verify the cryptographic
chain with signatures of tbsCertificates of course.
Resolves CATLFISH-19.
Diffstat (limited to 'tools/testcerts/roots/root2.pem')
0 files changed, 0 insertions, 0 deletions