tree b4bd4b4f7e036a93976f89b15aef094648cfe7aa
parent 04601b026a5d3212a8fa00c1c06c28b7474c9cfe
author David Benjamin <davidben@google.com> 1629829478 -0400
committer Adam Langley <agl@google.com> 1629902096 +0000

Rewrite name constraints matching with CBS.

See also 8393de42498f8be75cf0353f5c9f906a43a748d2 from upstream and
CBS-2021-3712. But rather than do that, I've rewritten it with CBS, so
it's a bit clearer. The previous commit added tests.

Change-Id: Ie52e28f07b9bf805c8730eab7be5d40cb5d558b6
Reviewed-on: https://boringssl-review.googlesource.com/c/boringssl/+/49008
Reviewed-by: Adam Langley <agl@google.com>