openbsd - A mirror of https://github.com/libressl/openbsd.git

	Commit message (Collapse)	Author	Files	Lines
2024-11-12	The subject of a certificate is not optional	tb	1	-2/+2
	A certificate must have a subject, so X509_get_subject_name() cannot return NULL on a correctly parsed certificate, even if the subject is empty (which is allowed). So if X509_get_subject_name() returns NULL, error instead of silently ignoring it in tls_check_common_name(). This is currently no issue. Where it matters, the match against the common name will fail later, so we fail closed anyway. ok jsing
2024-11-12	Link the new manual page EVP_PKEY_new_CMAC_key(3) to the build	schwarze	2	-29/+5
	and purge the superseded information from the algorithm-independent page EVP_PKEY_new(3).