Add a few regress test cases for name constraints.

From Alex Wilson

1 files changed, 5 insertions, 1 deletions

diff --git a/src/regress/lib/libcrypto/CA/intermediate.cnf b/src/regress/lib/libcrypto/CA/intermediate.cnf
index bbf189d268..d0057ca13f 100644
--- a/src/regress/lib/libcrypto/CA/intermediate.cnf
+++ b/src/regress/lib/libcrypto/CA/intermediate.cnf
@@ -1,4 +1,4 @@
-#       $OpenBSD: intermediate.cnf,v 1.3 2020/12/26 00:48:56 bluhm Exp $
+#       $OpenBSD: intermediate.cnf,v 1.4 2022/03/14 21:30:48 tb Exp $
 # For regression tests
 default_ca = CA_regress
 
@@ -105,6 +105,10 @@ subjectKeyIdentifier = hash
 authorityKeyIdentifier = keyid,issuer
 keyUsage = critical, nonRepudiation, digitalSignature, keyEncipherment
 extendedKeyUsage = clientAuth, emailProtection
+subjectAltName = critical, @usr_san
+
+[ usr_san ]
+email.0 = evilsoandsos@test.openbsd.org
 
 [ server_cert ]
 # Extensions for server certificates (`man x509v3_config`).