Add missing changelog entry
Add missing changelog entry for 3698: Mark basic constraints critical as appropriate. Signed-off-by: Dave Rodgman <dave.rodgman@arm.com>
This commit is contained in:
parent
2d83ac100d
commit
b4fe1053e4
1 changed files with 8 additions and 0 deletions
8
ChangeLog.d/basic-constraints-critical.txt
Normal file
8
ChangeLog.d/basic-constraints-critical.txt
Normal file
|
@ -0,0 +1,8 @@
|
|||
Bugfix
|
||||
* This change makes 'mbedtls_x509write_crt_set_basic_constraints'
|
||||
consistent with RFC 5280 4.2.1.9 which says: "Conforming CAs MUST
|
||||
include this extension in all CA certificates that contain public keys
|
||||
used to validate digital signatures on certificates and MUST mark the
|
||||
extension as critical in such certificates." Previous to this change,
|
||||
the extension was always marked as non-critical. This was fixed by
|
||||
#3698.
|
Loading…
Reference in a new issue