Skip to content

Handle not supported name constraints on Linux #115308

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
merged 8 commits into from
May 6, 2025

Conversation

vcsjones
Copy link
Member

@vcsjones vcsjones commented May 5, 2025

OpenSSL reported X509_V_ERR_UNSUPPORTED_CONSTRAINT_TYPE for constraints that it does not handle, however we did not map this in the chain PAL, which would result in an exception when building an X.509 chain.

Closes #87413

@bartonjs
Copy link
Member

bartonjs commented May 6, 2025

LGTM, but since it's marked as draft, no checkmark.

@vcsjones vcsjones marked this pull request as ready for review May 6, 2025 16:24
@vcsjones vcsjones merged commit 3912272 into dotnet:main May 6, 2025
82 of 85 checks passed
@vcsjones vcsjones deleted the upn-name-constraints branch May 6, 2025 22:20
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Projects
None yet
Development

Successfully merging this pull request may close these issues.

[Linux] X509 chains with user principal name (UPN) name constraints fail to build
2 participants