Re: [openssl-users] x509_config nameConstraints

2015-05-12 Thread Ben Humpert
I love that when it happens :) 2015-05-12 16:56 GMT+02:00 Ben Humpert : > Ok, after plenty of testing and some googling: the name constraints > extension is ... improvable. I ran plenty of tests but it looks like > that the extension is not very well implemented in todays browsers. > > I have atta

Re: [openssl-users] x509_config nameConstraints

2015-05-12 Thread Ben Humpert
Ok, after plenty of testing and some googling: the name constraints extension is ... improvable. I ran plenty of tests but it looks like that the extension is not very well implemented in todays browsers. I have attached three txt files (DOS format) with the settings and results of each test run.