mirror of
https://git.suyu.dev/suyu/mbedtls.git
synced 2026-02-04 21:04:08 +00:00
18a8698e76
Add missing changelog entry for 4044: Mark basic constraints critical as appropriate. Signed-off-by: Dave Rodgman <dave.rodgman@arm.com>
9 lines
457 B
Plaintext
9 lines
457 B
Plaintext
Bugfix
|
|
* This change makes 'mbedtls_x509write_crt_set_basic_constraints'
|
|
consistent with RFC 5280 4.2.1.9 which says: "Conforming CAs MUST
|
|
include this extension in all CA certificates that contain public keys
|
|
used to validate digital signatures on certificates and MUST mark the
|
|
extension as critical in such certificates." Previous to this change,
|
|
the extension was always marked as non-critical. This was fixed by
|
|
#4044.
|