tree e89f61fe4fac9e4aabf72dfc498af5a3d5e694ec
parent ed44d6f8deb450d8178908027ff46a0252b2d405
author Lily Chen <chlily@google.com> 1760032463 -0400
committer Boringssl LUCI CQ <boringssl-scoped@luci-project-accounts.iam.gserviceaccount.com> 1760033408 -0700

Allow empty extension lists in X.509

Empty X.509 extension lists should be rejected according to spec, but
this change reverts the parts of
https://boringssl-review.googlesource.com/c/boringssl/+/82087 that
reject empty extension lists, to avoid breakage due to invalid certs
with empty extension lists that were previously accepted as valid.

CRLs with empty extension lists are still rejected.

Change-Id: I945bec9684c5315d26ea364c62f7809f20be4909
Bug: 442221114
Reviewed-on: https://boringssl-review.googlesource.com/c/boringssl/+/82707
Reviewed-by: David Benjamin <davidben@google.com>
Commit-Queue: David Benjamin <davidben@google.com>
Auto-Submit: Lily Chen <chlily@google.com>