Changeset 91979 in vbox for trunk/src/VBox/Runtime

Timestamp:

Oct 21, 2021 6:11:11 PM (3 years ago)

Author:

vboxsync

svn:sync-xref-src-repo-rev:

147785

Message:

IPRT/RTCrX509CertPaths: Do not flag Subject Key Identifier as invalid when it occurs as a critical extension (spec says it must be non-critical). bugref:10130

File:

• trunk/src/VBox/Runtime/common/crypto/x509-certpaths.cpp (modified) (1 diff)

trunk/src/VBox/Runtime/common/crypto/x509-certpaths.cpp

@@ -2585 +2585 @@
                 && RTAsn1ObjId_CompareWithString(&pCur->ExtnId, RTCR_APPLE_CS_DEVID_IPHONE_SW_DEV_OID) != 0
                 && RTAsn1ObjId_CompareWithString(&pCur->ExtnId, RTCR_APPLE_CS_DEVID_MAC_SW_DEV_OID) != 0
+                && RTAsn1ObjId_CompareWithString(&pCur->ExtnId, RTCRX509_ID_CE_SUBJECT_KEY_IDENTIFIER_OID) != 0     /* Occurred in an Intel cert. Violates RFC5280. */
                )
                 return rtCrX509CpvFailed(pThis, VERR_CR_X509_CPV_UNKNOWN_CRITICAL_EXTENSION,