Closed gbehrmann closed 11 years ago
Shouldn't we also add a null-pointer check at line 520-or-so of X509ProxyCertPathValidator.java?
That's a different getKeyUsage() method and that method does not return null.
Ok, in that case, I'm merging through...
270e41c6b59f5f113edd18cbad71956444f2090c introduced an enum to represent key usage bits. The patch broke the key usage check for non-proxy certs in that it did not deal correctly with the absence of the extension.