Josef Kolář 26dc074328
x509: test Name Constraints parsing and verification
Parsing: every supported name form, an explicit zero minimum, and
malformed extensions (empty, empty subtrees, non-zero minimum, maximum,
bad iPAddress lengths, wrong tags and order).

Verification: permitted and excluded dNSName, iPAddress, rfc822Name and
directoryName subtrees, leading-dot and label-wise dNSName matching, case
insensitivity, wildcards, the CN of an end entity without
subjectAltName, a non-critical extension, nested constrained CAs, and
an unsupported constrained form failing closed. Also run some of them
with restartable verification.

Update the framework submodule for the test certificates and the
ChangeLog entry.

Signed-off-by: Josef Kolář <josef.kolar@firma.seznam.cz>
2026-10-26 14:57:25 +01:00
..
.jenkins
configs Remove deprecated items 2025-08-01 11:45:14 +01:00
git-scripts
include/test Merge pull request #10394 from gilles-peskine-arm/threading-1.0-alt-build-mbedtls 2026-09-01 11:00:04 +02:00
opt-testcases Do not check fail cases for verify skipped 2026-03-13 18:04:16 +00:00
scripts Removed explicit include path from consistency check 2026-10-19 14:12:30 +01:00
src tests: ssl_helpers: run ssl_context reset check only when the SSL context is setup 2026-06-24 15:37:00 +02:00
suites x509: test Name Constraints parsing and verification 2026-10-26 14:57:25 +01:00
.gitignore cmake: Generate test_keys.h and test_certs.h in the build tree 2025-03-26 21:19:28 +01:00
CMakeLists.txt Add fix for -DENABLE_PROGRAMS=OFF build error 2026-06-30 15:36:19 +01:00
compat-in-docker.sh
compat.sh Merge pull request #10663 from yiwu0b11/remove_unused_ffdh_code 2026-05-13 16:49:20 +00:00
context-info.sh Fix test and formatting in ssl_context_info 2025-04-29 22:02:24 +02:00
Descriptions.txt
make-in-docker.sh
Makefile Make installable pqcp headers available to the libtestdriver1 build 2026-08-18 16:07:13 +02:00
ssl-opt.sh Merge pull request #10620 from mpg/ref-for-drivers 2026-08-13 09:56:09 +00:00