Andres Amaya Garcia 75d24d8e35 Fail when ExtendedKeyUsage extension not present ...

The existing Mbed TLS API to check whether the ExtendedKeyUsage
extension allows an operation. However, this API succeeds when the
extension is not present in the certificate. In the case of authorised
signers for OCSP responses, the certificate MUST have the extension AND
the OCSPSigning field set to be accepted.

This commit creates the new function
mbedtls_x509_crt_check_extended_key_usage_ext() which is a version of
mbedtls_x509_crt_check_extended_key_usage() that returns an error code
if the extension is not present in the certificate in question.

2018-03-15 21:52:46 +00:00

..

mbedtls

Fail when ExtendedKeyUsage extension not present

2018-03-15 21:52:46 +00:00

.gitignore

Rename include directory to mbedtls

2015-03-10 11:23:56 +00:00

CMakeLists.txt

Fix whitespace in CMakeLists.txt

2015-06-25 10:59:57 +02:00