tree 13af5d0926f8dc16fd465d923c80a5d473038b86
parent fd86eaa868534ac480b0ae391d6e86c121835a53
author David Benjamin <davidben@google.com> 1592443062 -0400
committer CQ bot account: commit-bot@chromium.org <commit-bot@chromium.org> 1592590571 +0000

Check the X.509 version when parsing.

This checks the X.509 version is valid and consistent with fields new to
those versions. These checks are also implemented by Chromium's
certificate verifier and should be compatible.

Update-Note: The X.509 parser is now a bit stricter. This may break some
malformed certificates which were previously incorrectly accepted.

Bug: 348, 351
Change-Id: I56f35d768d5e72948d22a9546fba3d257a75f409
Reviewed-on: https://boringssl-review.googlesource.com/c/boringssl/+/41746
Reviewed-by: Adam Langley <agl@google.com>
Commit-Queue: David Benjamin <davidben@google.com>