[openssl/openssl] 0ffaa2: Rework v3nametest for SAN-first matching, add flag...

  Branch: refs/heads/master
  Home:   https://github.com/openssl/openssl
  Commit: 0ffaa24c6148514fa77f76a48ae48852df7be9e7
      https://github.com/openssl/openssl/commit/0ffaa24c6148514fa77f76a48ae48852df7be9e7
  Author: Bob Beck <[email protected]>
  Date:   2026-07-30 (Thu, 30 Jul 2026)

  Changed paths:
    M test/v3nametest.c

  Log Message:
  -----------
  Rework v3nametest for SAN-first matching, add flag and long-name coverage

Drive the match matrix primarily through SAN dNSName/rfc822Name rather
than subject CN/emailAddress (subject setters cut to one each, decoy
multi-SAN variants added). Add explicit coverage of ALWAYS/NEVER_CHECK_
SUBJECT and the non-matching-SAN-plus-matching-subject case, and a
long-name test for the 64/68-byte dNSName boundary and truncation guards.

Test only; no behavioural change.

Reviewed-by: Neil Horman <[email protected]>
Reviewed-by: Andrew Dinh <[email protected]>
MergeDate: Thu Jul 30 09:11:28 2026
(Merged from https://github.com/openssl/openssl/pull/31981)



To unsubscribe from these emails, change your notification settings at https://github.com/openssl/openssl/settings/notifications

-- 
You received this message because you are subscribed to the Google Groups "openssl-commits" group.
To unsubscribe from this group and stop receiving emails from it, send an email to [email protected].
To view this discussion visit https://groups.google.com/a/openssl.org/d/msgid/openssl-commits/openssl/openssl/push/refs/heads/master/30be19-0ffaa2%40github.com.