added default setting for CRL sign check

dghgit · dghgit · commit d2ac0bcb9f65 · 2024-05-01T14:03:15.000+10:00
diff --git a/pkix/src/main/java/org/bouncycastle/pkix/jcajce/RFC3280CertPathUtilities.java b/pkix/src/main/java/org/bouncycastle/pkix/jcajce/RFC3280CertPathUtilities.java
@@ -509,7 +509,7 @@ protected static Set processCRLF(
 
             if (keyUsage == null)
             {
-                if (Properties.isOverrideSet("org.bouncycastle.x509.allow_ca_without_crl_sign"))
+                if (Properties.isOverrideSet("org.bouncycastle.x509.allow_ca_without_crl_sign", true))
                 {
                     checkKeys.add(validKeys.get(i));
                 }

Original file line number	Diff line number	Diff line change
`@@ -509,7 +509,7 @@ protected static Set processCRLF(`
`509`	`509`
`510`	`510`	`if (keyUsage == null)`
`511`	`511`	`{`
`512`		`- if (Properties.isOverrideSet("org.bouncycastle.x509.allow_ca_without_crl_sign"))`
	`512`	`+ if (Properties.isOverrideSet("org.bouncycastle.x509.allow_ca_without_crl_sign", true))`
`513`	`513`	`{`
`514`	`514`	`checkKeys.add(validKeys.get(i));`
`515`	`515`	`}`