tree 18000a532221024de2a820226dcfa24145c70949
parent ec61aba5517ba6967efafc73de06c9e4215c0ade
author Kenny Root <kroot@google.com> 1363369169 -0700
committer Kenny Root <kroot@google.com> 1363370089 -0700

NativeCrypto: reject non-IA5String altnames

Certificates with rfc822Name, dNSName, or uniformResourceLocator must be
an IA5String, but OpenSSL doesn't enforce that during parsing. Return
NULL for those entries that don't comply.

Change-Id: I26727007196980648955f861df1d1cc013506911