OpenBSD/src FK7SMOolib/libcrypto/x509v3 v3_purp.c x509v3.h

   Distinguish between self-issued certificates and self-signed certificates.
   The certificate verification code has special cases for self-signed
   certificates and without this change, self-issued certificates (which it
   seems are common place with openvpn/easyrsa) were also being included in
   this category.

   Based on BoringSSL.

   Thanks to Dale Ghent <daleg at elemental dot org> for assisting in
   identifying the issue and testing this fix.

   ok inoguchi@
VersionDeltaFile
1.30+25-13lib/libcrypto/x509v3/v3_purp.c
1.22+15-17lib/libcrypto/x509v3/x509v3.h
+40-302 files

UnifiedSplitRaw