From df5614ef1d3785161558bf40c5a0f0c5657796df Mon Sep 17 00:00:00 2001 From: Gilles Peskine Date: Sun, 12 Apr 2020 14:21:30 +0200 Subject: [PATCH] Enable X509_ALLOW_EXTENSIONS_NON_V3 in config full Enable MBEDTLS_X509_ALLOW_EXTENSIONS_NON_V3 in the full config. There's no reason to keep it out. We weren't testing it at all on the CI. Signed-off-by: Gilles Peskine --- scripts/config.pl | 2 -- 1 file changed, 2 deletions(-) diff --git a/scripts/config.pl b/scripts/config.pl index 817c67941..805704f05 100755 --- a/scripts/config.pl +++ b/scripts/config.pl @@ -31,7 +31,6 @@ # MBEDTLS_REMOVE_3DES_CIPHERSUITES # MBEDTLS_SSL_HW_RECORD_ACCEL # MBEDTLS_RSA_NO_CRT -# MBEDTLS_X509_ALLOW_EXTENSIONS_NON_V3 # MBEDTLS_X509_ALLOW_UNSUPPORTED_CRITICAL_EXTENSION # - this could be enabled if the respective tests were adapted # MBEDTLS_ZLIB_SUPPORT @@ -94,7 +93,6 @@ MBEDTLS_RSA_NO_CRT MBEDTLS_REMOVE_ARC4_CIPHERSUITES MBEDTLS_REMOVE_3DES_CIPHERSUITES MBEDTLS_SSL_HW_RECORD_ACCEL -MBEDTLS_X509_ALLOW_EXTENSIONS_NON_V3 MBEDTLS_X509_ALLOW_UNSUPPORTED_CRITICAL_EXTENSION MBEDTLS_ZLIB_SUPPORT MBEDTLS_PKCS11_C