Josh Holtrop 8aeaa52de2 Fix directoryName NameConstraints bypass ...

Excluded and permitted directoryName subtrees were compared with a byte
prefix memcmp, so a leaf DN escaped an exclusion by varying case, string
type or spacing.

Compare the RDN sequence per RFC 5280 Sec. 7.1 instead.
UTF-8 decoding provided by wc_Utf8_DecodeChar() in coding.c.

2026-08-18 08:53:54 -04:00

1.6 KiB

Raw Permalink Blame History

View Raw