On Tue, 03 Nov 2015 12:53:13 GMT, Stephan Dilly wrote:

Maybe add a auo test with self signed certificates to make it regression safe ?

I had prepared a test that works, but unfortunately it doesn't fail for the particular issue fixed because apparently OpenSSL itself is more liberal here. I'll add that anyway, because it could catch a lot of other issues.