[PATCH v2] OpenSSL: Accept certificates marked for both server and client use

[Anders Kaseorg]

On Sat, 15 Feb 2014, Anders Kaseorg wrote:
> (Change from v1: accept XKU_ANYEKU.)

Argh, it always has to be more complicated: XKU_ANYEKU is new in OpenSSL 
1.1.x Git and not yet in any released version of OpenSSL.  So the only 
correct thing I think we can do is put #ifdef XKU_ANYEKU around the entire 
check, causing it to be skipped for OpenSSL versions that aren’t from the 
future.

Does that sound reasonable?

Anders