From: Dr. Stephen Henson <steve@openssl.org>
Date: Fri, 27 Jun 2014 17:49:32 +0000 (+0100)
Subject: Tolerate critical AKID in CRLs.
X-Git-Tag: OpenSSL_1_0_2-beta2~87
X-Git-Url: https://granicus.if.org/sourcecode?a=commitdiff_plain;h=22228d2d407763d234a2463f694df77dca8158fc;p=openssl

Tolerate critical AKID in CRLs.

PR#3014
(cherry picked from commit 11da66f8b1fbe5777fe08cc6ace9e1f2c1576a50)
---

diff --git a/crypto/asn1/x_crl.c b/crypto/asn1/x_crl.c
index a4dfee8473..dc0106365a 100644
--- a/crypto/asn1/x_crl.c
+++ b/crypto/asn1/x_crl.c
@@ -270,6 +270,7 @@ static int crl_cb(int operation, ASN1_VALUE **pval, const ASN1_ITEM *it,
 				{
 				/* We handle IDP and deltas */
 				if ((nid == NID_issuing_distribution_point)
+					|| (nid == NID_authority_key_identifier)
 					|| (nid == NID_delta_crl))
 					break;;
 				crl->flags |= EXFLAG_CRITICAL;