tree 5c4bd5401284b943ff2bcccc3999a514e32f54f1
parent ad36a4fc4a825b7874fde30c95a196b71ae044a8
author Bob Beck <bbe@google.com> 1712857658 -0600
committer Boringssl LUCI CQ <boringssl-scoped@luci-project-accounts.iam.gserviceaccount.com> 1713801134 +0000

Add a CLIENT_AUTH_STRICT_LEAF and SERVER_AUTH_STRICT_LEAF which
do STRICT requirements on the leaf certificate, and not STRICT on
the rest of the chain.

Bug: 721
Change-Id: Ieec5940c0ab40aa7ea9e8fe192e5734326b976c3
Reviewed-on: https://boringssl-review.googlesource.com/c/boringssl/+/67787
Reviewed-by: David Benjamin <davidben@google.com>
Auto-Submit: Bob Beck <bbe@google.com>
Commit-Queue: Bob Beck <bbe@google.com>