run(app([@args]));
}
-plan tests => 159;
+plan tests => 160;
# Canonical success
ok(verify("ee-cert", "sslserver", ["root-cert"], ["ca-cert"]),
ok(verify("goodcn1-cert", "", ["root-cert"], ["ncca1-cert"], ),
"Name Constraints CNs permitted");
+ok(verify("goodcn2-cert", "", ["root-cert"], ["ncca1-cert"], ),
+ "Name Constraints CNs permitted - no SAN extension");
+
ok(!verify("badcn1-cert", "", ["root-cert"], ["ncca1-cert"], ),
"Name Constraints CNs not permitted");