Viktor Dukhovni 55a6250f1e Skip CN DNS name constraint checks when not needed
Only check the CN against DNS name contraints if the
`X509_CHECK_FLAG_NEVER_CHECK_SUBJECT` flag is not set, and either the
certificate has no DNS subject alternative names or the
`X509_CHECK_FLAG_ALWAYS_CHECK_SUBJECT` flag is set.

Add pertinent documentation, and touch up some stale text about
name checks and DANE.

Reviewed-by: Matt Caswell <matt@openssl.org>
Reviewed-by: Tim Hudson <tjh@openssl.org>
2018-05-23 11:12:17 -04:00
..
2018-03-20 13:08:46 +00:00
2017-04-25 11:13:39 +01:00
2017-12-15 19:33:48 +01:00
2017-03-20 16:25:22 -04:00
2018-04-03 13:57:12 +01:00
2018-04-03 13:57:12 +01:00
2017-03-11 08:56:44 -05:00
2018-05-01 14:23:27 +01:00
2017-03-11 08:56:44 -05:00
2017-04-07 13:48:19 -04:00
2017-07-05 12:53:28 -05:00
2017-03-11 08:56:44 -05:00
2017-07-03 19:26:56 -04:00
2017-03-11 08:56:44 -05:00
2018-01-23 09:38:42 -05:00
2018-03-20 13:08:46 +00:00
2018-03-10 13:13:23 -05:00
2018-04-03 13:57:12 +01:00
2017-10-12 02:40:30 +01:00
2016-11-11 13:06:43 +01:00
2018-04-03 13:57:12 +01:00
2018-03-20 13:08:46 +00:00
2018-04-17 15:18:40 +02:00
2018-03-20 13:08:46 +00:00
2017-11-24 16:38:37 +01:00
2018-03-20 13:08:46 +00:00
2018-03-20 13:08:46 +00:00
2018-04-03 13:57:12 +01:00
2018-03-20 13:08:46 +00:00
2018-01-24 07:09:46 +10:00
2017-09-02 09:35:50 -04:00
2018-02-13 13:59:25 +00:00
2018-04-17 15:18:40 +02:00
2018-04-17 15:18:40 +02:00
2018-03-09 11:30:06 -06:00
2018-03-10 13:13:23 -05:00
2018-03-10 13:13:23 -05:00
2017-05-08 21:17:28 +02:00
2017-06-11 16:21:33 -04:00
2018-04-03 13:57:12 +01:00
2017-07-03 10:40:33 -04:00
2018-02-13 13:59:25 +00:00
2017-03-29 07:18:57 +02:00
2018-02-13 13:59:25 +00:00
2018-04-03 13:57:12 +01:00
2018-05-01 13:34:30 +01:00
2018-05-01 13:34:30 +01:00
2017-03-30 14:18:11 +02:00
2018-03-20 13:08:46 +00:00
2017-03-29 07:14:29 +02:00
2017-07-03 10:40:33 -04:00
2018-04-03 13:57:12 +01:00
2017-06-11 16:21:33 -04:00
2018-03-20 13:08:46 +00:00
2018-02-13 13:59:25 +00:00
2017-04-25 22:12:35 +01:00
2018-03-20 13:08:46 +00:00