Add XKU_ANYEKU #define and use it to cache the anyExtendedKeyUsage

extension. This is part of OpenSSL commit df4c395c which didn't make
it into our tree for some reason.

ok jsing

1 files changed, 5 insertions, 1 deletions

diff --git a/src/lib/libcrypto/x509/x509_purp.c b/src/lib/libcrypto/x509/x509_purp.c
index 86ee27407e..3c05cc31b2 100644
--- a/src/lib/libcrypto/x509/x509_purp.c
+++ b/src/lib/libcrypto/x509/x509_purp.c
@@ -1,4 +1,4 @@
-/* $OpenBSD: x509_purp.c,v 1.7 2021/09/13 15:26:53 claudio Exp $ */
+/* $OpenBSD: x509_purp.c,v 1.8 2021/10/21 13:51:52 tb Exp $ */
 /* Written by Dr Stephen N Henson (steve@openssl.org) for the OpenSSL
  * project 2001.
  */
@@ -549,6 +549,10 @@ x509v3_cache_extensions(X509 *x)
                         case NID_dvcs:
                                 x->ex_xkusage |= XKU_DVCS;
                                 break;
+
+                        case NID_anyExtendedKeyUsage:
+                                x->ex_xkusage |= XKU_ANYEKU;
+                                break;
                         }
                 }
                 sk_ASN1_OBJECT_pop_free(extusage, ASN1_OBJECT_free);