[PATCH v2] OpenSSL: Accept certificates marked for both server and client use

Anders Kaseorg andersk at MIT.EDU
Sat Feb 15 05:46:00 EST 2014

On Sat, 15 Feb 2014, Anders Kaseorg wrote:
> (Change from v1: accept XKU_ANYEKU.)

Argh, it always has to be more complicated: XKU_ANYEKU is new in OpenSSL 
1.1.x Git and not yet in any released version of OpenSSL.  So the only 
correct thing I think we can do is put #ifdef XKU_ANYEKU around the entire 
check, causing it to be skipped for OpenSSL versions that aren’t from the 

Does that sound reasonable?


More information about the HostAP mailing list