[gnutls-devel] GnuTLS | keyusage extension parsing (#1608)

[Read-only notification of GnuTLS library development activities]

dulanshuangqiao commented on a discussion: https://gitlab.com/gnutls/gnutls/-/issues/1608#note_2210695293


openssl gives other views on this
While RFC 5280 states that "at least one of the bits MUST be set to 1," X.509 does not. X.509 just says that if the extension is present and all bits are zero, then the key is intended for a purpose other than the ones listed.

-- 
Reply to this email directly or view it on GitLab: https://gitlab.com/gnutls/gnutls/-/issues/1608#note_2210695293
You're receiving this email because of your account on gitlab.com.


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.gnupg.org/pipermail/gnutls-devel/attachments/20241114/c4f3d7fa/attachment.html>