Key usage violations are allowed when the COMPAT keyword is specified.
commit1b81fafee31153ac2f59070fa6cda02f9721027e
authorNikos Mavrogiannopoulos <nmav@gnutls.org>
Sat, 15 Sep 2012 18:21:02 +0000 (15 20:21 +0200)
committerNikos Mavrogiannopoulos <nmav@gnutls.org>
Sat, 15 Sep 2012 18:24:40 +0000 (15 20:24 +0200)
tree90a82dd4944e19879a93175d04aa3bc6cb564b11
parent6b085e750c3371e80604dfbd33bdd6b1b191c967
Key usage violations are allowed when the COMPAT keyword is specified.

I've noticed in the SSL observatory data that most key usage bits in
a certificate are set randomly (e.g., there are DSA certificates marked
for encryption, and most RSA certificates marked for signature only are used
for encryption anyway). There is no point of being strict in such environment.
lib/gnutls_int.h
lib/gnutls_priority.c
lib/gnutls_sig.c