tree 835aa9311721319c239a1058b0396a9d586cb695
parent 0cce863f7464d7bb70cd337c7205e2fbd9303d4e
author David Benjamin <davidben@google.com> 1477158905 -0400
committer Adam Langley <agl@google.com> 1477339768 +0000

Correctly find all critical CRL extensions.

Unhandled critical CRL extensions were not detected if they appeared
after the handled ones.  (Upstream GitHub issue 1757).  Thanks to John
Chuah for reporting this.

(Imported from upstream's 3ade92e785bb3777c92332f88e23f6ce906ee260.)

This additionally adds a regression test for this issue, generated with
der-ascii.  The signatures on the CRLs were repaired per notes in
https://github.com/google/der-ascii/blob/master/samples/certificates.md

Change-Id: I74a77f92710e6ef7f46dcde5cb6ae9350084ddcb
Reviewed-on: https://boringssl-review.googlesource.com/11720
Commit-Queue: David Benjamin <davidben@google.com>
Reviewed-by: Adam Langley <agl@google.com>