Bug#506853: libgnutls26: 2.4.2-3 breaks OpenLDAP access

[Simon Josefsson]

Simon Josefsson <simon at josefsson.org> writes:

> 		Basic Constraints (not critical):
> 			Certificate Authority (CA): FALSE

Btw, don't forget to mark the basic constraint as critical as well.  See
RFC 5280:

4.2.1.9.  Basic Constraints
...
   Conforming CAs MUST include this extension in all CA certificates
   that contain public keys used to validate digital signatures on
   certificates and MUST mark the extension as critical in such
   certificates.

/Simon