mirror of
https://github.com/google/boringssl.git
synced 2026-10-28 16:47:07 +08:00
The maximum length is now 32 bytes. Also check that OID components are correct. Update-Note: This is technically not wire-compatible, if someone was using an invalid or unreasonably long trust anchor ID, but TAI deployment is minimal enough for now that I think we can safely do this. Let's get it enforced while we can. Change-Id: I3c1570d1afa0012dcbf7fd2cbf5a4cdf403931aa Reviewed-on: https://boringssl-review.googlesource.com/c/boringssl/+/103427 Auto-Submit: David Benjamin <davidben@google.com> Commit-Queue: David Benjamin <davidben@google.com> Reviewed-by: Lily Chen <chlily@google.com>