Merge pull request #2084 from reaperhulk/name-constraints-ossl

Name constraints ossl