The source project of this merge request has been removed.
x509: Adjust IP name constraints behavior
- Modified IPv4/IPv6 interaction in name constraints -- IPv4 and IPv6 no have empty intersection (previously: were treated independently).
- Current behavior is more conservative -- in case of IPv4 constraint cert, subcerts will not be able to have IPv6 addresses.
- Tests updated accordingly.
- Behavior now matches NSS.