Deprecate support for parsing extensions that include an explicit value for "critical" boolean |
|
Issue descriptionIn the DER encoding of extensions, a critical value of "false" should be omitted (as it is "BOOLEAN DEFAULT FALSE"). There are however certificates that rely on such incorrect encodings, and platform verifiers allow it. |
|
►
Sign in to add a comment |
|
Comment 1 by eroman@chromium.org
, May 17 2018