tree 4ad0c6a0c22a7de1d55eeaa6d0adc433ca54518a
parent e833a6dfa2a89420d37070cd9b27688e37e83c8c
author Adam Langley <agl@google.com> 1533588881 -0700
committer CQ bot account: commit-bot@chromium.org <commit-bot@chromium.org> 1533592348 +0000

Don't accept “SSL client” as a substitute for S/MIME in the Netscape cert type extension.

I believe that case was the only way that X509_check_purpose could
return anything other than zero or one. Thus eliminate the last use of
X509_V_FLAG_X509_STRICT.

Change-Id: If2f071dfa934b924491db2b615ec17390564e7de
Reviewed-on: https://boringssl-review.googlesource.com/30344
Commit-Queue: Adam Langley <agl@google.com>
CQ-Verified: CQ bot account: commit-bot@chromium.org <commit-bot@chromium.org>
Reviewed-by: Matt Braithwaite <mab@google.com>