Skip to content

Commit fb001e6

Browse files
authored
Handle X509 policy constraints on macOS.
1 parent 0fcfa46 commit fb001e6

File tree

2 files changed

+358
-37
lines changed

2 files changed

+358
-37
lines changed

src/libraries/Native/Unix/System.Security.Cryptography.Native.Apple/pal_x509chain.c

Lines changed: 2 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -171,6 +171,8 @@ static void MergeStatusCodes(CFTypeRef key, CFTypeRef value, void* context)
171171
*pStatus |= PAL_X509ChainHasNotSupportedCriticalExtension;
172172
else if (CFEqual(keyString, CFSTR("NameConstraints")))
173173
*pStatus |= PAL_X509ChainInvalidNameConstraints;
174+
else if (CFEqual(keyString, CFSTR("PolicyConstraints")))
175+
*pStatus |= PAL_X509ChainInvalidPolicyConstraints;
174176
else if (CFEqual(keyString, CFSTR("UnparseableExtension")))
175177
{
176178
// 10.15 introduced new status code value which is not reported by Windows. Ignoring for now.

0 commit comments

Comments
 (0)