From 77cf30c361d5805c9a5745dc9b2cfe3bca157ab5 Mon Sep 17 00:00:00 2001
From: Peter Dettman <peter.dettman@bouncycastle.org>
Date: Thu, 16 Feb 2023 15:36:18 +0700
Subject: Remove ExtendedKeyUsage from criticalExtensions

see https://github.com/bcgit/bc-csharp/issues/395
---
 crypto/src/pkix/PkixCertPathValidator.cs | 1 +
 1 file changed, 1 insertion(+)

diff --git a/crypto/src/pkix/PkixCertPathValidator.cs b/crypto/src/pkix/PkixCertPathValidator.cs
index 431ed8c6d..82b5aa0e5 100644
--- a/crypto/src/pkix/PkixCertPathValidator.cs
+++ b/crypto/src/pkix/PkixCertPathValidator.cs
@@ -404,6 +404,7 @@ namespace Org.BouncyCastle.Pkix
                 criticalExtensions.Remove(X509Extensions.SubjectAlternativeName.Id);
                 criticalExtensions.Remove(X509Extensions.NameConstraints.Id);
                 criticalExtensions.Remove(X509Extensions.CrlDistributionPoints.Id);
+                criticalExtensions.Remove(X509Extensions.ExtendedKeyUsage.Id);
             }
             else
             {
-- 
cgit 1.5.1