bangcheng

When applying this patch to my own environment, I was getting errors when calling the SSL_write function. The function's call stack fails at the WPACKET_reserve_bytes function. ``` #0 WPACKET_reserve_bytes (allocbytes=0x0,...

For the reasons you mentioned, I can't add `&& !ku_reject(x, KU_KEY_CERT_SIGN)` directly. The current code will cause some certificates lacking **akid** extensions fields to not be recognized correctly. I think...

Thank you for your detailed explanation of this issue. To solve the problem of misidentification, can I add `X509_verify(x, pkey)` for myself when akid extension is missing? In this way,...

@DDvO I put the modifications you provided into the source code, but I get an error when I run the test case. This shows that a test case is not...

> And I'm pretty sure that the cert in question is not marked as a CA, right @bangcheng? > BTW, please post the contents of your cert such that we...

Will you merge the above commits into the master and 1.1.1 branches?

Thanks a lot for your answer.