commit | fd6c85c3eb39a59231843bcabc46e5fcbfba30d5 | [log] [tgz] |
---|---|---|
author | Manuel Pégourié-Gonnard <mpg@elzevir.fr> | Thu Nov 20 16:34:20 2014 +0100 |
committer | Manuel Pégourié-Gonnard <mpg@elzevir.fr> | Thu Nov 20 16:37:41 2014 +0100 |
tree | 65b8af116a7702a23e96b46f2d9a885f476a069f | |
parent | 89d69b398ce52956f21eddb0586d75ba9c2b1f2f [diff] [blame] |
Set a compile-time limit to X.509 chain length
diff --git a/ChangeLog b/ChangeLog index d1a87be..1b6770a 100644 --- a/ChangeLog +++ b/ChangeLog
@@ -16,6 +16,8 @@ Features * Add function pk_check_pair() to test if public and private keys match. * Add x509_crl_parse_der(). + * Add compile-time option POLARSSL_X509_MAX_INTERMEDIATE_CA to limit the + length of an X.509 verification chain. Bugfix * User set CFLAGS were ignore by Cmake with gcc (introduced in 1.3.9, found