From: Martin Willi <martin@revosec.ch>
Date: Thu, 30 Oct 2014 10:42:04 +0000 (+0100)
Subject: Merge branch 'policy-constraints'
X-Git-Tag: 5.2.2dr1~49
X-Git-Url: http://git.ipfire.org/cgi-bin/gitweb.cgi?a=commitdiff_plain;h=8131d180a81159273c7f6e1aefee85144921453b;p=thirdparty%2Fstrongswan.git

Merge branch 'policy-constraints'

Fixes handling of invalid policies in end entity certificates by not rejecting
the full certificate, but just invalidating the affected policy. Additionally
adds a bunch of unit tests for the constraints plugin, and some minor fixes
to the nameConstraints handling.

Currently we still reject CAs that use invalid policy mapping; we should accept
such certificates and just invalid affected policies in a next iteration.

Fixes #453.
---

8131d180a81159273c7f6e1aefee85144921453b