mirror of
https://github.com/Mbed-TLS/mbedtls.git
synced 2026-10-28 18:07:34 +08:00
16bd0ff4c6
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com> Signed-off-by: Christopher Müller <chris@mechatronikmonkey.de>
8 lines
413 B
Plaintext
8 lines
413 B
Plaintext
Bugfix
|
|
* Accept X.509 certificates whose AuthorityKeyIdentifier extension is an
|
|
empty SEQUENCE. All of its fields are optional, so such certificates
|
|
are syntactically valid, but they were rejected with
|
|
MBEDTLS_ERR_X509_INVALID_EXTENSIONS. This affected, for example, the
|
|
root certificate that some antivirus products install for HTTPS
|
|
scanning. Reported by CodingMarkus. Fixes #10253.
|