Handle more basic constraints chain statuses on macOS
authorKevin Jones <kevin@vcsjones.com>
Mon, 27 Apr 2020 21:21:40 +0000 (17:21 -0400)
committerGitHub <noreply@github.com>
Mon, 27 Apr 2020 21:21:40 +0000 (14:21 -0700)
commit92cd5cde62aa7f8d85ab886677a4b674c847ac95
treee10b04c8a0f13c8c7bd71a5f3d224421bb0109da
parent1e2195d38fe900f9592bd87340bf57652539a07d
Handle more basic constraints chain statuses on macOS

macOS can return additional chain status strings for a certificate that
was issued by a certificate that violated its basic constraints.

If a leaf certificate is issued from a certificate with CA:FALSE,
the strings BasicConstraintsCA and BasicConstraintsPathLen are
reported. We map these the same for BasicConstraints.
src/libraries/Native/Unix/System.Security.Cryptography.Native.Apple/pal_x509chain.c
src/libraries/System.Security.Cryptography.X509Certificates/tests/DynamicChainTests.cs
src/libraries/System.Security.Cryptography.X509Certificates/tests/TestDataGenerator.cs