TrustedFirmware Git Browser
Code Review Sign In
review.trustedfirmware.org / mirror / mbed-tls / 3020abb9a957d9391cf5bf4ad5550ceefe7b86fd / . / tests / suites / test_suite_x509parse.data
blob: 281e9eba3ea1b4b665ec0241c1541a4a96b397a7 [file] [log] [blame]
Hanno Becker2389d162019-02-14 12:52:47 +0000[diff] [blame]1X509 CRT information #1
palaviva07ecda2016-08-07 11:15:29 +0300[diff] [blame]2depends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_RSA_C:MBEDTLS_SHA1_C
Jerry Yue42257c2023-06-01 13:30:06 +0800[diff] [blame]3x509_cert_info:"data_files/parse_input/server1.crt":"cert. version \: 3\nserial number \: 01\nissuer name \: C=NL, O=PolarSSL, CN=PolarSSL Test CA\nsubject name \: C=NL, O=PolarSSL, CN=PolarSSL Server 1\nissued on \: 2019-02-10 14\:44\:06\nexpires on \: 2029-02-10 14\:44\:06\nsigned using \: RSA with SHA1\nRSA key size \: 2048 bits\nbasic constraints \: CA=false\n"
Paul Bakker37940d9f2009-07-10 22:38:58 +0000[diff] [blame]4
Hanno Becker2389d162019-02-14 12:52:47 +0000[diff] [blame]5X509 CRT information #1 (DER)
Hanno Becker462c3e52019-01-31 10:55:42 +0000[diff] [blame]6depends_on:MBEDTLS_RSA_C:MBEDTLS_SHA1_C
Jerry Yue42257c2023-06-01 13:30:06 +0800[diff] [blame]7x509_cert_info:"data_files/parse_input/server1.crt.der":"cert. version \: 3\nserial number \: 01\nissuer name \: C=NL, O=PolarSSL, CN=PolarSSL Test CA\nsubject name \: C=NL, O=PolarSSL, CN=PolarSSL Server 1\nissued on \: 2019-02-10 14\:44\:06\nexpires on \: 2029-02-10 14\:44\:06\nsigned using \: RSA with SHA1\nRSA key size \: 2048 bits\nbasic constraints \: CA=false\n"
Hanno Becker462c3e52019-01-31 10:55:42 +0000[diff] [blame]8
Hanno Becker2389d162019-02-14 12:52:47 +0000[diff] [blame]9X509 CRT information #2
palaviva07ecda2016-08-07 11:15:29 +0300[diff] [blame]10depends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_RSA_C:MBEDTLS_SHA1_C
Jerry Yue42257c2023-06-01 13:30:06 +0800[diff] [blame]11x509_cert_info:"data_files/parse_input/server2.crt":"cert. version \: 3\nserial number \: 02\nissuer name \: C=NL, O=PolarSSL, CN=PolarSSL Test CA\nsubject name \: C=NL, O=PolarSSL, CN=localhost\nissued on \: 2019-02-10 14\:44\:06\nexpires on \: 2029-02-10 14\:44\:06\nsigned using \: RSA with SHA1\nRSA key size \: 2048 bits\nbasic constraints \: CA=false\n"
Paul Bakker37940d9f2009-07-10 22:38:58 +0000[diff] [blame]12
Hanno Becker2389d162019-02-14 12:52:47 +0000[diff] [blame]13X509 CRT information #2 (DER)
Hanno Becker462c3e52019-01-31 10:55:42 +0000[diff] [blame]14depends_on:MBEDTLS_RSA_C:MBEDTLS_SHA1_C
Jerry Yue42257c2023-06-01 13:30:06 +0800[diff] [blame]15x509_cert_info:"data_files/parse_input/server2.crt.der":"cert. version \: 3\nserial number \: 02\nissuer name \: C=NL, O=PolarSSL, CN=PolarSSL Test CA\nsubject name \: C=NL, O=PolarSSL, CN=localhost\nissued on \: 2019-02-10 14\:44\:06\nexpires on \: 2029-02-10 14\:44\:06\nsigned using \: RSA with SHA1\nRSA key size \: 2048 bits\nbasic constraints \: CA=false\n"
Hanno Becker462c3e52019-01-31 10:55:42 +0000[diff] [blame]16
Hanno Becker2389d162019-02-14 12:52:47 +0000[diff] [blame]17X509 CRT information #3
palaviva07ecda2016-08-07 11:15:29 +0300[diff] [blame]18depends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_RSA_C:MBEDTLS_SHA1_C
Jerry Yue42257c2023-06-01 13:30:06 +0800[diff] [blame]19x509_cert_info:"data_files/parse_input/test-ca.crt":"cert. version \: 3\nserial number \: 03\nissuer name \: C=NL, O=PolarSSL, CN=PolarSSL Test CA\nsubject name \: C=NL, O=PolarSSL, CN=PolarSSL Test CA\nissued on \: 2019-02-10 14\:44\:00\nexpires on \: 2029-02-10 14\:44\:00\nsigned using \: RSA with SHA1\nRSA key size \: 2048 bits\nbasic constraints \: CA=true\n"
Paul Bakker37940d9f2009-07-10 22:38:58 +0000[diff] [blame]20
Hanno Becker2389d162019-02-14 12:52:47 +0000[diff] [blame]21X509 CRT information #3 (DER)
Hanno Becker462c3e52019-01-31 10:55:42 +0000[diff] [blame]22depends_on:MBEDTLS_RSA_C:MBEDTLS_SHA1_C
Jerry Yue42257c2023-06-01 13:30:06 +0800[diff] [blame]23x509_cert_info:"data_files/parse_input/test-ca.crt.der":"cert. version \: 3\nserial number \: 03\nissuer name \: C=NL, O=PolarSSL, CN=PolarSSL Test CA\nsubject name \: C=NL, O=PolarSSL, CN=PolarSSL Test CA\nissued on \: 2019-02-10 14\:44\:00\nexpires on \: 2029-02-10 14\:44\:00\nsigned using \: RSA with SHA1\nRSA key size \: 2048 bits\nbasic constraints \: CA=true\n"
Hanno Becker462c3e52019-01-31 10:55:42 +0000[diff] [blame]24
Hanno Becker2389d162019-02-14 12:52:47 +0000[diff] [blame]25X509 CRT information MD2 Digest
palaviva07ecda2016-08-07 11:15:29 +0300[diff] [blame]26depends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_RSA_C:MBEDTLS_MD2_C
Jerry Yue42257c2023-06-01 13:30:06 +0800[diff] [blame]27x509_cert_info:"data_files/parse_input/cert_md2.crt":"cert. version \: 3\nserial number \: 09\nissuer name \: C=NL, O=PolarSSL, CN=PolarSSL Test CA\nsubject name \: C=NL, O=PolarSSL, CN=PolarSSL Cert MD2\nissued on \: 2000-01-01 12\:12\:12\nexpires on \: 2030-01-01 12\:12\:12\nsigned using \: RSA with MD2\nRSA key size \: 2048 bits\nbasic constraints \: CA=false\n"
Paul Bakkerc26a1892009-07-19 20:30:14 +0000[diff] [blame]28
Hanno Becker2389d162019-02-14 12:52:47 +0000[diff] [blame]29X509 CRT information MD4 Digest
palaviva07ecda2016-08-07 11:15:29 +0300[diff] [blame]30depends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_RSA_C:MBEDTLS_MD4_C
Jerry Yue42257c2023-06-01 13:30:06 +0800[diff] [blame]31x509_cert_info:"data_files/parse_input/cert_md4.crt":"cert. version \: 3\nserial number \: 05\nissuer name \: C=NL, O=PolarSSL, CN=PolarSSL Test CA\nsubject name \: C=NL, O=PolarSSL, CN=PolarSSL Cert MD4\nissued on \: 2000-01-01 12\:12\:12\nexpires on \: 2030-01-01 12\:12\:12\nsigned using \: RSA with MD4\nRSA key size \: 2048 bits\nbasic constraints \: CA=false\n"
Paul Bakkerc26a1892009-07-19 20:30:14 +0000[diff] [blame]32
Hanno Becker2389d162019-02-14 12:52:47 +0000[diff] [blame]33X509 CRT information MD5 Digest
palaviva07ecda2016-08-07 11:15:29 +0300[diff] [blame]34depends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_RSA_C:MBEDTLS_MD5_C
Jerry Yue42257c2023-06-01 13:30:06 +0800[diff] [blame]35x509_cert_info:"data_files/parse_input/cert_md5.crt":"cert. version \: 3\nserial number \: 06\nissuer name \: C=NL, O=PolarSSL, CN=PolarSSL Test CA\nsubject name \: C=NL, O=PolarSSL, CN=PolarSSL Cert MD5\nissued on \: 2000-01-01 12\:12\:12\nexpires on \: 2030-01-01 12\:12\:12\nsigned using \: RSA with MD5\nRSA key size \: 2048 bits\nbasic constraints \: CA=false\n"
Paul Bakkerc26a1892009-07-19 20:30:14 +0000[diff] [blame]36
Hanno Becker2389d162019-02-14 12:52:47 +0000[diff] [blame]37X509 CRT information SHA1 Digest
palaviva07ecda2016-08-07 11:15:29 +0300[diff] [blame]38depends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_RSA_C:MBEDTLS_SHA1_C
Jerry Yue42257c2023-06-01 13:30:06 +0800[diff] [blame]39x509_cert_info:"data_files/parse_input/cert_sha1.crt":"cert. version \: 3\nserial number \: 07\nissuer name \: C=NL, O=PolarSSL, CN=PolarSSL Test CA\nsubject name \: C=NL, O=PolarSSL, CN=PolarSSL Cert SHA1\nissued on \: 2019-02-10 14\:44\:06\nexpires on \: 2029-02-10 14\:44\:06\nsigned using \: RSA with SHA1\nRSA key size \: 2048 bits\nbasic constraints \: CA=false\n"
Paul Bakkerc26a1892009-07-19 20:30:14 +0000[diff] [blame]40
Hanno Becker2389d162019-02-14 12:52:47 +0000[diff] [blame]41X509 CRT information SHA224 Digest
palaviva07ecda2016-08-07 11:15:29 +0300[diff] [blame]42depends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_RSA_C:MBEDTLS_SHA256_C
Jerry Yue42257c2023-06-01 13:30:06 +0800[diff] [blame]43x509_cert_info:"data_files/parse_input/cert_sha224.crt":"cert. version \: 3\nserial number \: 08\nissuer name \: C=NL, O=PolarSSL, CN=PolarSSL Test CA\nsubject name \: C=NL, O=PolarSSL, CN=PolarSSL Cert SHA224\nissued on \: 2019-02-10 14\:44\:06\nexpires on \: 2029-02-10 14\:44\:06\nsigned using \: RSA with SHA-224\nRSA key size \: 2048 bits\nbasic constraints \: CA=false\n"
Paul Bakkerc26a1892009-07-19 20:30:14 +0000[diff] [blame]44
Hanno Becker2389d162019-02-14 12:52:47 +0000[diff] [blame]45X509 CRT information SHA256 Digest
palaviva07ecda2016-08-07 11:15:29 +0300[diff] [blame]46depends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_RSA_C:MBEDTLS_SHA256_C
Jerry Yue42257c2023-06-01 13:30:06 +0800[diff] [blame]47x509_cert_info:"data_files/parse_input/cert_sha256.crt":"cert. version \: 3\nserial number \: 09\nissuer name \: C=NL, O=PolarSSL, CN=PolarSSL Test CA\nsubject name \: C=NL, O=PolarSSL, CN=PolarSSL Cert SHA256\nissued on \: 2019-02-10 14\:44\:06\nexpires on \: 2029-02-10 14\:44\:06\nsigned using \: RSA with SHA-256\nRSA key size \: 2048 bits\nbasic constraints \: CA=false\n"
Paul Bakkerc26a1892009-07-19 20:30:14 +0000[diff] [blame]48
Hanno Becker2389d162019-02-14 12:52:47 +0000[diff] [blame]49X509 CRT information SHA384 Digest
Gilles Peskine049feff2020-03-09 20:52:19 +0100[diff] [blame]50depends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_RSA_C:MBEDTLS_SHA512_C:!MBEDTLS_SHA512_NO_SHA384
Jerry Yue42257c2023-06-01 13:30:06 +0800[diff] [blame]51x509_cert_info:"data_files/parse_input/cert_sha384.crt":"cert. version \: 3\nserial number \: 0A\nissuer name \: C=NL, O=PolarSSL, CN=PolarSSL Test CA\nsubject name \: C=NL, O=PolarSSL, CN=PolarSSL Cert SHA384\nissued on \: 2019-02-10 14\:44\:06\nexpires on \: 2029-02-10 14\:44\:06\nsigned using \: RSA with SHA-384\nRSA key size \: 2048 bits\nbasic constraints \: CA=false\n"
Paul Bakkerc26a1892009-07-19 20:30:14 +0000[diff] [blame]52
Hanno Becker2389d162019-02-14 12:52:47 +0000[diff] [blame]53X509 CRT information SHA512 Digest
palaviva07ecda2016-08-07 11:15:29 +0300[diff] [blame]54depends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_RSA_C:MBEDTLS_SHA512_C
Jerry Yue42257c2023-06-01 13:30:06 +0800[diff] [blame]55x509_cert_info:"data_files/parse_input/cert_sha512.crt":"cert. version \: 3\nserial number \: 0B\nissuer name \: C=NL, O=PolarSSL, CN=PolarSSL Test CA\nsubject name \: C=NL, O=PolarSSL, CN=PolarSSL Cert SHA512\nissued on \: 2019-02-10 14\:44\:06\nexpires on \: 2029-02-10 14\:44\:06\nsigned using \: RSA with SHA-512\nRSA key size \: 2048 bits\nbasic constraints \: CA=false\n"
Paul Bakkerc26a1892009-07-19 20:30:14 +0000[diff] [blame]56
Hanno Becker2389d162019-02-14 12:52:47 +0000[diff] [blame]57X509 CRT information RSA-PSS, SHA1 Digest
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200[diff] [blame]58depends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_X509_RSASSA_PSS_SUPPORT:MBEDTLS_SHA1_C
Jerry Yue42257c2023-06-01 13:30:06 +0800[diff] [blame]59x509_cert_info:"data_files/parse_input/server9.crt":"cert. version \: 3\nserial number \: 16\nissuer name \: C=NL, O=PolarSSL, CN=PolarSSL Test CA\nsubject name \: C=NL, O=PolarSSL, CN=localhost\nissued on \: 2014-01-20 13\:38\:16\nexpires on \: 2024-01-18 13\:38\:16\nsigned using \: RSASSA-PSS (SHA1, MGF1-SHA1, 0xEA)\nRSA key size \: 1024 bits\nbasic constraints \: CA=false\n"
Manuel Pégourié-Gonnarde76b7502014-01-23 19:15:29 +0100[diff] [blame]60
Hanno Becker2389d162019-02-14 12:52:47 +0000[diff] [blame]61X509 CRT information RSA-PSS, SHA224 Digest
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200[diff] [blame]62depends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_X509_RSASSA_PSS_SUPPORT:MBEDTLS_SHA256_C
Jerry Yue42257c2023-06-01 13:30:06 +0800[diff] [blame]63x509_cert_info:"data_files/parse_input/server9-sha224.crt":"cert. version \: 3\nserial number \: 17\nissuer name \: C=NL, O=PolarSSL, CN=PolarSSL Test CA\nsubject name \: C=NL, O=PolarSSL, CN=localhost\nissued on \: 2014-01-20 13\:57\:36\nexpires on \: 2024-01-18 13\:57\:36\nsigned using \: RSASSA-PSS (SHA224, MGF1-SHA224, 0xE2)\nRSA key size \: 1024 bits\nbasic constraints \: CA=false\n"
Manuel Pégourié-Gonnarde76b7502014-01-23 19:15:29 +0100[diff] [blame]64
Hanno Becker2389d162019-02-14 12:52:47 +0000[diff] [blame]65X509 CRT information RSA-PSS, SHA256 Digest
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200[diff] [blame]66depends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_X509_RSASSA_PSS_SUPPORT:MBEDTLS_SHA256_C
Jerry Yue42257c2023-06-01 13:30:06 +0800[diff] [blame]67x509_cert_info:"data_files/parse_input/server9-sha256.crt":"cert. version \: 3\nserial number \: 18\nissuer name \: C=NL, O=PolarSSL, CN=PolarSSL Test CA\nsubject name \: C=NL, O=PolarSSL, CN=localhost\nissued on \: 2014-01-20 13\:57\:45\nexpires on \: 2024-01-18 13\:57\:45\nsigned using \: RSASSA-PSS (SHA256, MGF1-SHA256, 0xDE)\nRSA key size \: 1024 bits\nbasic constraints \: CA=false\n"
Manuel Pégourié-Gonnarde76b7502014-01-23 19:15:29 +0100[diff] [blame]68
Hanno Becker2389d162019-02-14 12:52:47 +0000[diff] [blame]69X509 CRT information RSA-PSS, SHA384 Digest
Gilles Peskine049feff2020-03-09 20:52:19 +0100[diff] [blame]70depends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_X509_RSASSA_PSS_SUPPORT:MBEDTLS_SHA512_C:!MBEDTLS_SHA512_NO_SHA384
Jerry Yue42257c2023-06-01 13:30:06 +0800[diff] [blame]71x509_cert_info:"data_files/parse_input/server9-sha384.crt":"cert. version \: 3\nserial number \: 19\nissuer name \: C=NL, O=PolarSSL, CN=PolarSSL Test CA\nsubject name \: C=NL, O=PolarSSL, CN=localhost\nissued on \: 2014-01-20 13\:57\:58\nexpires on \: 2024-01-18 13\:57\:58\nsigned using \: RSASSA-PSS (SHA384, MGF1-SHA384, 0xCE)\nRSA key size \: 1024 bits\nbasic constraints \: CA=false\n"
Manuel Pégourié-Gonnarde76b7502014-01-23 19:15:29 +0100[diff] [blame]72
Hanno Becker2389d162019-02-14 12:52:47 +0000[diff] [blame]73X509 CRT information RSA-PSS, SHA512 Digest
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200[diff] [blame]74depends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_X509_RSASSA_PSS_SUPPORT:MBEDTLS_SHA512_C
Jerry Yue42257c2023-06-01 13:30:06 +0800[diff] [blame]75x509_cert_info:"data_files/parse_input/server9-sha512.crt":"cert. version \: 3\nserial number \: 1A\nissuer name \: C=NL, O=PolarSSL, CN=PolarSSL Test CA\nsubject name \: C=NL, O=PolarSSL, CN=localhost\nissued on \: 2014-01-20 13\:58\:12\nexpires on \: 2024-01-18 13\:58\:12\nsigned using \: RSASSA-PSS (SHA512, MGF1-SHA512, 0xBE)\nRSA key size \: 1024 bits\nbasic constraints \: CA=false\n"
Manuel Pégourié-Gonnard59a75d52014-01-22 10:12:57 +0100[diff] [blame]76
Hanno Becker2389d162019-02-14 12:52:47 +0000[diff] [blame]77X509 CRT information EC, SHA1 Digest
Manuel Pégourié-Gonnard43be6cd2017-06-20 09:53:42 +0200[diff] [blame]78depends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_ECDSA_C:MBEDTLS_ECP_DP_SECP256R1_ENABLED:MBEDTLS_SHA1_C
Jerry Yue42257c2023-06-01 13:30:06 +0800[diff] [blame]79x509_cert_info:"data_files/parse_input/server5-sha1.crt":"cert. version \: 3\nserial number \: 12\nissuer name \: C=NL, O=PolarSSL, CN=Polarssl Test EC CA\nsubject name \: C=NL, O=PolarSSL, CN=localhost\nissued on \: 2013-09-24 16\:21\:27\nexpires on \: 2023-09-22 16\:21\:27\nsigned using \: ECDSA with SHA1\nEC key size \: 256 bits\nbasic constraints \: CA=false\n"
Manuel Pégourié-Gonnard6d29ff22013-08-10 09:44:43 +0200[diff] [blame]80
Hanno Becker2389d162019-02-14 12:52:47 +0000[diff] [blame]81X509 CRT information EC, SHA224 Digest
Manuel Pégourié-Gonnard43be6cd2017-06-20 09:53:42 +0200[diff] [blame]82depends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_ECDSA_C:MBEDTLS_ECP_DP_SECP256R1_ENABLED:MBEDTLS_SHA256_C
Jerry Yue42257c2023-06-01 13:30:06 +0800[diff] [blame]83x509_cert_info:"data_files/parse_input/server5-sha224.crt":"cert. version \: 3\nserial number \: 13\nissuer name \: C=NL, O=PolarSSL, CN=Polarssl Test EC CA\nsubject name \: C=NL, O=PolarSSL, CN=localhost\nissued on \: 2013-09-24 16\:21\:27\nexpires on \: 2023-09-22 16\:21\:27\nsigned using \: ECDSA with SHA224\nEC key size \: 256 bits\nbasic constraints \: CA=false\n"
Manuel Pégourié-Gonnard6d29ff22013-08-10 09:44:43 +0200[diff] [blame]84
Hanno Becker2389d162019-02-14 12:52:47 +0000[diff] [blame]85X509 CRT information EC, SHA256 Digest
Manuel Pégourié-Gonnard43be6cd2017-06-20 09:53:42 +0200[diff] [blame]86depends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_ECDSA_C:MBEDTLS_ECP_DP_SECP256R1_ENABLED:MBEDTLS_SHA256_C
Jerry Yue42257c2023-06-01 13:30:06 +0800[diff] [blame]87x509_cert_info:"data_files/parse_input/server5.crt":"cert. version \: 3\nserial number \: 09\nissuer name \: C=NL, O=PolarSSL, CN=Polarssl Test EC CA\nsubject name \: C=NL, O=PolarSSL, CN=localhost\nissued on \: 2013-09-24 15\:52\:04\nexpires on \: 2023-09-22 15\:52\:04\nsigned using \: ECDSA with SHA256\nEC key size \: 256 bits\nbasic constraints \: CA=false\n"
Manuel Pégourié-Gonnard6d29ff22013-08-10 09:44:43 +0200[diff] [blame]88
Hanno Becker2389d162019-02-14 12:52:47 +0000[diff] [blame]89X509 CRT information EC, SHA384 Digest
Gilles Peskine049feff2020-03-09 20:52:19 +0100[diff] [blame]90depends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_ECDSA_C:MBEDTLS_ECP_DP_SECP256R1_ENABLED:MBEDTLS_SHA512_C:!MBEDTLS_SHA512_NO_SHA384
Jerry Yue42257c2023-06-01 13:30:06 +0800[diff] [blame]91x509_cert_info:"data_files/parse_input/server5-sha384.crt":"cert. version \: 3\nserial number \: 14\nissuer name \: C=NL, O=PolarSSL, CN=Polarssl Test EC CA\nsubject name \: C=NL, O=PolarSSL, CN=localhost\nissued on \: 2013-09-24 16\:21\:27\nexpires on \: 2023-09-22 16\:21\:27\nsigned using \: ECDSA with SHA384\nEC key size \: 256 bits\nbasic constraints \: CA=false\n"
Manuel Pégourié-Gonnard6d29ff22013-08-10 09:44:43 +0200[diff] [blame]92
Hanno Becker2389d162019-02-14 12:52:47 +0000[diff] [blame]93X509 CRT information EC, SHA512 Digest
Manuel Pégourié-Gonnard43be6cd2017-06-20 09:53:42 +0200[diff] [blame]94depends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_ECDSA_C:MBEDTLS_ECP_DP_SECP256R1_ENABLED:MBEDTLS_SHA512_C
Jerry Yue42257c2023-06-01 13:30:06 +0800[diff] [blame]95x509_cert_info:"data_files/parse_input/server5-sha512.crt":"cert. version \: 3\nserial number \: 15\nissuer name \: C=NL, O=PolarSSL, CN=Polarssl Test EC CA\nsubject name \: C=NL, O=PolarSSL, CN=localhost\nissued on \: 2013-09-24 16\:21\:27\nexpires on \: 2023-09-22 16\:21\:27\nsigned using \: ECDSA with SHA512\nEC key size \: 256 bits\nbasic constraints \: CA=false\n"
Manuel Pégourié-Gonnard6d29ff22013-08-10 09:44:43 +0200[diff] [blame]96
Hanno Becker2389d162019-02-14 12:52:47 +0000[diff] [blame]97X509 CRT information EC, SHA256 Digest, hardware module name SAN
Ron Eldorb2dc3fa2019-03-21 13:40:13 +0200[diff] [blame]98depends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_ECDSA_C:MBEDTLS_ECP_DP_SECP256R1_ENABLED:MBEDTLS_SHA256_C
Jerry Yue42257c2023-06-01 13:30:06 +0800[diff] [blame]99x509_cert_info:"data_files/parse_input/server5-othername.crt":"cert. version \: 3\nserial number \: 4D\nissuer name \: C=UK, O=Mbed TLS, CN=Mbed TLS othername SAN\nsubject name \: C=UK, O=Mbed TLS, CN=Mbed TLS othername SAN\nissued on \: 2019-03-24 09\:06\:02\nexpires on \: 2029-03-21 09\:06\:02\nsigned using \: ECDSA with SHA256\nEC key size \: 256 bits\nsubject alt name \:\n otherName \:\n hardware module name \:\n hardware type \: 1.3.6.1.4.1.17.3\n hardware serial number \: 313233343536\n"
Ron Eldorb2dc3fa2019-03-21 13:40:13 +0200[diff] [blame]100
Victor Barpp Gomes7e5426d2022-09-29 10:03:16 -0300[diff] [blame]101X509 CRT information EC, SHA256 Digest, binary hardware module name SAN
102depends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_ECDSA_C:MBEDTLS_ECP_DP_SECP256R1_ENABLED:MBEDTLS_SHA256_C
Jerry Yue42257c2023-06-01 13:30:06 +0800[diff] [blame]103x509_cert_info:"data_files/parse_input/server5-nonprintable_othername.crt":"cert. version \: 3\nserial number \: 4D\nissuer name \: C=UK, O=Mbed TLS, CN=Mbed TLS non-printable othername SAN\nsubject name \: C=UK, O=Mbed TLS, CN=Mbed TLS non-printable othername SAN\nissued on \: 2022-09-06 15\:56\:47\nexpires on \: 2032-09-03 15\:56\:47\nsigned using \: ECDSA with SHA256\nEC key size \: 256 bits\nsubject alt name \:\n otherName \:\n hardware module name \:\n hardware type \: 1.3.6.1.4.1.17.3\n hardware serial number \: 3132338081008180333231\n"
Manuel Pégourié-Gonnard6d29ff22013-08-10 09:44:43 +0200[diff] [blame]104
Hanno Becker2389d162019-02-14 12:52:47 +0000[diff] [blame]105X509 CRT information EC, SHA256 Digest, Wisun Fan device
Ron Eldor3c4734a2019-03-25 14:05:23 +0200[diff] [blame]106depends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_ECDSA_C:MBEDTLS_ECP_DP_SECP256R1_ENABLED:MBEDTLS_SHA256_C
Jerry Yue42257c2023-06-01 13:30:06 +0800[diff] [blame]107x509_cert_info:"data_files/parse_input/server5-fan.crt":"cert. version \: 3\nserial number \: 4D\nissuer name \: C=UK, O=Mbed TLS, CN=Mbed TLS FAN\nsubject name \: C=UK, O=Mbed TLS, CN=Mbed TLS FAN\nissued on \: 2019-03-25 09\:03\:46\nexpires on \: 2029-03-22 09\:03\:46\nsigned using \: ECDSA with SHA256\nEC key size \: 256 bits\next key usage \: Wi-SUN Alliance Field Area Network (FAN)\n"
Ron Eldor3c4734a2019-03-25 14:05:23 +0200[diff] [blame]108
Hanno Becker2389d162019-02-14 12:52:47 +0000[diff] [blame]109X509 CRT information, NS Cert Type
palaviva07ecda2016-08-07 11:15:29 +0300[diff] [blame]110depends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_RSA_C:MBEDTLS_SHA1_C
Jerry Yue42257c2023-06-01 13:30:06 +0800[diff] [blame]111x509_cert_info:"data_files/parse_input/server1.cert_type.crt":"cert. version \: 3\nserial number \: 01\nissuer name \: C=NL, O=PolarSSL, CN=PolarSSL Test CA\nsubject name \: C=NL, O=PolarSSL, CN=PolarSSL Server 1\nissued on \: 2019-02-10 14\:44\:06\nexpires on \: 2029-02-10 14\:44\:06\nsigned using \: RSA with SHA1\nRSA key size \: 2048 bits\nbasic constraints \: CA=false\ncert. type \: SSL Server\n"
Manuel Pégourié-Gonnard919f8f52014-04-01 13:01:11 +0200[diff] [blame]112
Hanno Becker2389d162019-02-14 12:52:47 +0000[diff] [blame]113X509 CRT information, Key Usage
palaviva07ecda2016-08-07 11:15:29 +0300[diff] [blame]114depends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_RSA_C:MBEDTLS_SHA1_C
Jerry Yue42257c2023-06-01 13:30:06 +0800[diff] [blame]115x509_cert_info:"data_files/parse_input/server1.key_usage.crt":"cert. version \: 3\nserial number \: 01\nissuer name \: C=NL, O=PolarSSL, CN=PolarSSL Test CA\nsubject name \: C=NL, O=PolarSSL, CN=PolarSSL Server 1\nissued on \: 2019-02-10 14\:44\:06\nexpires on \: 2029-02-10 14\:44\:06\nsigned using \: RSA with SHA1\nRSA key size \: 2048 bits\nbasic constraints \: CA=false\nkey usage \: Digital Signature, Non Repudiation, Key Encipherment\n"
Manuel Pégourié-Gonnard65c2ddc2014-04-01 14:12:11 +0200[diff] [blame]116
Hanno Becker2389d162019-02-14 12:52:47 +0000[diff] [blame]117X509 CRT information, Key Usage with decipherOnly
palaviva07ecda2016-08-07 11:15:29 +0300[diff] [blame]118depends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_RSA_C:MBEDTLS_SHA1_C
Jerry Yue42257c2023-06-01 13:30:06 +0800[diff] [blame]119x509_cert_info:"data_files/parse_input/keyUsage.decipherOnly.crt":"cert. version \: 3\nserial number \: 9B\:13\:CE\:4C\:A5\:6F\:DE\:52\nissuer name \: C=GB, L=Cambridge, O=Default Company Ltd\nsubject name \: C=GB, L=Cambridge, O=Default Company Ltd\nissued on \: 2015-05-12 10\:36\:55\nexpires on \: 2018-05-11 10\:36\:55\nsigned using \: RSA with SHA1\nRSA key size \: 1024 bits\nbasic constraints \: CA=false\nkey usage \: Digital Signature, Non Repudiation, Key Encipherment, Decipher Only\n"
Manuel Pégourié-Gonnard9a702252015-06-23 10:14:36 +0200[diff] [blame]120
Hanno Becker2389d162019-02-14 12:52:47 +0000[diff] [blame]121X509 CRT information, Subject Alt Name
Ron Eldor9eeb8612019-02-12 15:03:42 +0200[diff] [blame]122depends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_RSA_C:MBEDTLS_SHA256_C
Jerry Yue42257c2023-06-01 13:30:06 +0800[diff] [blame]123x509_cert_info:"data_files/parse_input/cert_example_multi.crt":"cert. version \: 3\nserial number \: 11\nissuer name \: C=NL, O=PolarSSL, CN=PolarSSL Test CA\nsubject name \: C=NL, O=PolarSSL, CN=www.example.com\nissued on \: 2019-07-10 11\:27\:52\nexpires on \: 2029-07-10 11\:27\:52\nsigned using \: RSA with SHA-256\nRSA key size \: 1024 bits\nsubject alt name \:\n dNSName \: example.com\n dNSName \: example.net\n dNSName \: *.example.org\n"
Ron Eldorb2dc3fa2019-03-21 13:40:13 +0200[diff] [blame]124
Hanno Becker2389d162019-02-14 12:52:47 +0000[diff] [blame]125X509 CRT information, Multiple different Subject Alt Name
Ron Eldorb2dc3fa2019-03-21 13:40:13 +0200[diff] [blame]126depends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_ECDSA_C:MBEDTLS_ECP_DP_SECP256R1_ENABLED:MBEDTLS_SHA256_C
Jerry Yue42257c2023-06-01 13:30:06 +0800[diff] [blame]127x509_cert_info:"data_files/parse_input/multiple_san.crt":"cert. version \: 3\nserial number \: 04\nissuer name \: C=UK, O=Mbed TLS, CN=Mbed TLS multiple othername SAN\nsubject name \: C=UK, O=Mbed TLS, CN=Mbed TLS multiple othername SAN\nissued on \: 2019-04-22 16\:10\:48\nexpires on \: 2029-04-19 16\:10\:48\nsigned using \: ECDSA with SHA256\nEC key size \: 256 bits\nsubject alt name \:\n dNSName \: example.com\n otherName \:\n hardware module name \:\n hardware type \: 1.3.6.1.4.1.17.3\n hardware serial number \: 313233343536\n dNSName \: example.net\n dNSName \: *.example.org\n"
Manuel Pégourié-Gonnardbce2b302014-04-01 13:43:28 +0200[diff] [blame]128
Hanno Becker2389d162019-02-14 12:52:47 +0000[diff] [blame]129X509 CRT information, Subject Alt Name + Key Usage
palaviva07ecda2016-08-07 11:15:29 +0300[diff] [blame]130depends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_RSA_C:MBEDTLS_SHA1_C
Jerry Yue42257c2023-06-01 13:30:06 +0800[diff] [blame]131x509_cert_info:"data_files/parse_input/cert_example_multi_nocn.crt":"cert. version \: 3\nserial number \: F7\:C6\:7F\:F8\:E9\:A9\:63\:F9\nissuer name \: C=NL\nsubject name \: C=NL\nissued on \: 2014-01-22 10\:04\:33\nexpires on \: 2024-01-22 10\:04\:33\nsigned using \: RSA with SHA1\nRSA key size \: 1024 bits\nbasic constraints \: CA=false\nsubject alt name \:\n dNSName \: www.shotokan-braunschweig.de\n dNSName \: www.massimo-abate.eu\n <unsupported>\n <unsupported>\nkey usage \: Digital Signature, Non Repudiation, Key Encipherment\n"
Manuel Pégourié-Gonnard65c2ddc2014-04-01 14:12:11 +0200[diff] [blame]132
Hanno Becker2389d162019-02-14 12:52:47 +0000[diff] [blame]133X509 CRT information, RSA Certificate Policy any
Ron Eldor74d9acc2019-03-21 14:00:03 +0200[diff] [blame]134depends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_RSA_C:MBEDTLS_SHA256_C
Jerry Yue42257c2023-06-01 13:30:06 +0800[diff] [blame]135x509_cert_info:"data_files/parse_input/test-ca-any_policy.crt":"cert. version \: 3\nserial number \: 00\nissuer name \: C=NL, O=PolarSSL, CN=PolarSSL Test CA\nsubject name \: C=NL, O=PolarSSL, CN=PolarSSL Test CA\nissued on \: 2019-03-21 16\:40\:59\nexpires on \: 2029-03-21 16\:40\:59\nsigned using \: RSA with SHA-256\nRSA key size \: 2048 bits\nbasic constraints \: CA=true\ncertificate policies \: Any Policy\n"
Ron Eldor74d9acc2019-03-21 14:00:03 +0200[diff] [blame]136
Hanno Becker2389d162019-02-14 12:52:47 +0000[diff] [blame]137X509 CRT information, ECDSA Certificate Policy any
Ron Eldor74d9acc2019-03-21 14:00:03 +0200[diff] [blame]138depends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_ECDSA_C:MBEDTLS_ECP_DP_SECP384R1_ENABLED:MBEDTLS_SHA256_C
Jerry Yue42257c2023-06-01 13:30:06 +0800[diff] [blame]139x509_cert_info:"data_files/parse_input/test-ca-any_policy_ec.crt":"cert. version \: 3\nserial number \: 00\nissuer name \: C=NL, O=PolarSSL, CN=Polarssl Test EC CA\nsubject name \: C=NL, O=PolarSSL, CN=Polarssl Test EC CA\nissued on \: 2019-03-25 09\:02\:45\nexpires on \: 2029-03-25 09\:02\:45\nsigned using \: ECDSA with SHA256\nEC key size \: 384 bits\nbasic constraints \: CA=true\ncertificate policies \: Any Policy\n"
Ron Eldor74d9acc2019-03-21 14:00:03 +0200[diff] [blame]140
Hanno Becker2389d162019-02-14 12:52:47 +0000[diff] [blame]141X509 CRT information, RSA Certificate Policy any with qualifier
Ron Eldor74d9acc2019-03-21 14:00:03 +0200[diff] [blame]142depends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_RSA_C:MBEDTLS_SHA256_C
Jerry Yue42257c2023-06-01 13:30:06 +0800[diff] [blame]143x509_cert_info:"data_files/parse_input/test-ca-any_policy_with_qualifier.crt":"cert. version \: 3\nserial number \: 00\nissuer name \: C=NL, O=PolarSSL, CN=PolarSSL Test CA\nsubject name \: C=NL, O=PolarSSL, CN=PolarSSL Test CA\nissued on \: 2019-04-28 13\:14\:31\nexpires on \: 2029-04-28 13\:14\:31\nsigned using \: RSA with SHA-256\nRSA key size \: 2048 bits\nbasic constraints \: CA=true\ncertificate policies \: Any Policy\n"
Ron Eldor74d9acc2019-03-21 14:00:03 +0200[diff] [blame]144
Hanno Becker2389d162019-02-14 12:52:47 +0000[diff] [blame]145X509 CRT information, ECDSA Certificate Policy any with qualifier
Ron Eldor74d9acc2019-03-21 14:00:03 +0200[diff] [blame]146depends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_ECDSA_C:MBEDTLS_ECP_DP_SECP384R1_ENABLED:MBEDTLS_SHA256_C
Jerry Yue42257c2023-06-01 13:30:06 +0800[diff] [blame]147x509_cert_info:"data_files/parse_input/test-ca-any_policy_with_qualifier_ec.crt":"cert. version \: 3\nserial number \: 00\nissuer name \: C=NL, O=PolarSSL, CN=Polarssl Test EC CA\nsubject name \: C=NL, O=PolarSSL, CN=Polarssl Test EC CA\nissued on \: 2019-04-28 10\:16\:05\nexpires on \: 2029-04-28 10\:16\:05\nsigned using \: ECDSA with SHA256\nEC key size \: 384 bits\nbasic constraints \: CA=true\ncertificate policies \: Any Policy\n"
Ron Eldor74d9acc2019-03-21 14:00:03 +0200[diff] [blame]148
Hanno Becker2389d162019-02-14 12:52:47 +0000[diff] [blame]149X509 CRT information, RSA Certificate multiple Policies
Ron Eldor74d9acc2019-03-21 14:00:03 +0200[diff] [blame]150depends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_RSA_C:MBEDTLS_SHA256_C
Jerry Yue42257c2023-06-01 13:30:06 +0800[diff] [blame]151x509_cert_info:"data_files/parse_input/test-ca-multi_policy.crt":"cert. version \: 3\nserial number \: 00\nissuer name \: C=NL, O=PolarSSL, CN=PolarSSL Test CA\nsubject name \: C=NL, O=PolarSSL, CN=PolarSSL Test CA\nissued on \: 2019-04-28 12\:59\:19\nexpires on \: 2029-04-28 12\:59\:19\nsigned using \: RSA with SHA-256\nRSA key size \: 2048 bits\nbasic constraints \: CA=true\ncertificate policies \: ???, Any Policy\n"
Ron Eldor74d9acc2019-03-21 14:00:03 +0200[diff] [blame]152
Hanno Becker2389d162019-02-14 12:52:47 +0000[diff] [blame]153X509 CRT information, ECDSA Certificate multiple Policies
Ron Eldor74d9acc2019-03-21 14:00:03 +0200[diff] [blame]154depends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_ECDSA_C:MBEDTLS_ECP_DP_SECP384R1_ENABLED:MBEDTLS_SHA256_C
Jerry Yue42257c2023-06-01 13:30:06 +0800[diff] [blame]155x509_cert_info:"data_files/parse_input/test-ca-multi_policy_ec.crt":"cert. version \: 3\nserial number \: 00\nissuer name \: C=NL, O=PolarSSL, CN=Polarssl Test EC CA\nsubject name \: C=NL, O=PolarSSL, CN=Polarssl Test EC CA\nissued on \: 2019-04-28 12\:59\:51\nexpires on \: 2029-04-28 12\:59\:51\nsigned using \: ECDSA with SHA256\nEC key size \: 384 bits\nbasic constraints \: CA=true\ncertificate policies \: ???, Any Policy\n"
Ron Eldor74d9acc2019-03-21 14:00:03 +0200[diff] [blame]156
Hanno Becker2389d162019-02-14 12:52:47 +0000[diff] [blame]157X509 CRT information, RSA Certificate unsupported policy
Ron Eldor74d9acc2019-03-21 14:00:03 +0200[diff] [blame]158depends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_RSA_C:MBEDTLS_SHA256_C
Jerry Yue42257c2023-06-01 13:30:06 +0800[diff] [blame]159x509_cert_info:"data_files/parse_input/test-ca-unsupported_policy.crt":"cert. version \: 3\nserial number \: 00\nissuer name \: C=NL, O=PolarSSL, CN=PolarSSL Test CA\nsubject name \: C=NL, O=PolarSSL, CN=PolarSSL Test CA\nissued on \: 2019-04-28 13\:00\:13\nexpires on \: 2029-04-28 13\:00\:13\nsigned using \: RSA with SHA-256\nRSA key size \: 2048 bits\nbasic constraints \: CA=true\ncertificate policies \: ???\n"
Ron Eldor74d9acc2019-03-21 14:00:03 +0200[diff] [blame]160
Hanno Becker2389d162019-02-14 12:52:47 +0000[diff] [blame]161X509 CRT information, ECDSA Certificate unsupported policy
Ron Eldor74d9acc2019-03-21 14:00:03 +0200[diff] [blame]162depends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_ECDSA_C:MBEDTLS_ECP_DP_SECP384R1_ENABLED:MBEDTLS_SHA256_C
Jerry Yue42257c2023-06-01 13:30:06 +0800[diff] [blame]163x509_cert_info:"data_files/parse_input/test-ca-unsupported_policy_ec.crt":"cert. version \: 3\nserial number \: 00\nissuer name \: C=NL, O=PolarSSL, CN=Polarssl Test EC CA\nsubject name \: C=NL, O=PolarSSL, CN=Polarssl Test EC CA\nissued on \: 2019-04-28 13\:00\:19\nexpires on \: 2029-04-28 13\:00\:19\nsigned using \: ECDSA with SHA256\nEC key size \: 384 bits\nbasic constraints \: CA=true\ncertificate policies \: ???\n"
Ron Eldor74d9acc2019-03-21 14:00:03 +0200[diff] [blame]164
Hanno Becker2389d162019-02-14 12:52:47 +0000[diff] [blame]165X509 CRT information, Key Usage + Extended Key Usage
palaviva07ecda2016-08-07 11:15:29 +0300[diff] [blame]166depends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_RSA_C:MBEDTLS_SHA256_C
Jerry Yue42257c2023-06-01 13:30:06 +0800[diff] [blame]167x509_cert_info:"data_files/parse_input/server1.ext_ku.crt":"cert. version \: 3\nserial number \: 21\nissuer name \: C=NL, O=PolarSSL, CN=PolarSSL Test CA\nsubject name \: C=NL, O=PolarSSL, CN=PolarSSL Server 1\nissued on \: 2014-04-01 14\:44\:43\nexpires on \: 2024-03-29 14\:44\:43\nsigned using \: RSA with SHA-256\nRSA key size \: 2048 bits\nbasic constraints \: CA=false\nkey usage \: Digital Signature, Non Repudiation, Key Encipherment\next key usage \: TLS Web Server Authentication\n"
Manuel Pégourié-Gonnardf6f4ab42014-04-01 17:32:44 +0200[diff] [blame]168
Hanno Becker2389d162019-02-14 12:52:47 +0000[diff] [blame]169X509 CRT information RSA signed by EC
palavivf180df92016-08-07 11:56:02 +0300[diff] [blame]170depends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_RSA_C:MBEDTLS_SHA256_C:MBEDTLS_ECDSA_C
Jerry Yue42257c2023-06-01 13:30:06 +0800[diff] [blame]171x509_cert_info:"data_files/parse_input/server4.crt":"cert. version \: 3\nserial number \: 08\nissuer name \: C=NL, O=PolarSSL, CN=Polarssl Test EC CA\nsubject name \: C=NL, O=PolarSSL, CN=localhost\nissued on \: 2013-09-24 15\:52\:04\nexpires on \: 2023-09-22 15\:52\:04\nsigned using \: ECDSA with SHA256\nRSA key size \: 2048 bits\nbasic constraints \: CA=false\n"
Manuel Pégourié-Gonnard6d29ff22013-08-10 09:44:43 +0200[diff] [blame]172
Hanno Becker2389d162019-02-14 12:52:47 +0000[diff] [blame]173X509 CRT information EC signed by RSA
Manuel Pégourié-Gonnard43be6cd2017-06-20 09:53:42 +0200[diff] [blame]174depends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_ECDSA_C:MBEDTLS_ECP_DP_SECP192R1_ENABLED:MBEDTLS_SHA1_C:MBEDTLS_RSA_C
Jerry Yue42257c2023-06-01 13:30:06 +0800[diff] [blame]175x509_cert_info:"data_files/parse_input/server3.crt":"cert. version \: 3\nserial number \: 0D\nissuer name \: C=NL, O=PolarSSL, CN=PolarSSL Test CA\nsubject name \: C=NL, O=PolarSSL, CN=localhost\nissued on \: 2013-08-09 09\:17\:03\nexpires on \: 2023-08-07 09\:17\:03\nsigned using \: RSA with SHA1\nEC key size \: 192 bits\nbasic constraints \: CA=false\n"
Manuel Pégourié-Gonnard6d29ff22013-08-10 09:44:43 +0200[diff] [blame]176
Hanno Becker2389d162019-02-14 12:52:47 +0000[diff] [blame]177X509 CRT information Bitstring in subject name
palaviva07ecda2016-08-07 11:15:29 +0300[diff] [blame]178depends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_RSA_C:MBEDTLS_SHA1_C
Jerry Yue42257c2023-06-01 13:30:06 +0800[diff] [blame]179x509_cert_info:"data_files/parse_input/bitstring-in-dn.pem":"cert. version \: 3\nserial number \: 02\nissuer name \: CN=Test CA 01, ST=Ecnivorp, C=XX, emailAddress=tca@example.com, O=Test CA Authority\nsubject name \: C=XX, O=tca, ST=Ecnivorp, OU=TCA, CN=Client, emailAddress=client@example.com, serialNumber=7101012255, uniqueIdentifier=?7101012255\nissued on \: 2015-03-11 12\:06\:51\nexpires on \: 2025-03-08 12\:06\:51\nsigned using \: RSA with SHA1\nRSA key size \: 2048 bits\nbasic constraints \: CA=false\nsubject alt name \:\n <unsupported>\next key usage \: TLS Web Client Authentication\n"
Manuel Pégourié-Gonnard39ead3e2015-03-27 13:09:21 +0100[diff] [blame]180
Koh M. Nakagawa46b87822020-05-16 10:08:09 +0900[diff] [blame]181X509 CRT information Non-ASCII string in issuer name and subject name
182depends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_RSA_C:MBEDTLS_SHA256_C
Jerry Yue42257c2023-06-01 13:30:06 +0800[diff] [blame]183x509_cert_info:"data_files/parse_input/non-ascii-string-in-issuer.crt":"cert. version \: 3\nserial number \: 05\:E6\:53\:E7\:1B\:74\:F0\:B5\:D3\:84\:6D\:0C\:6D\:DC\:FA\:3F\:A4\:5A\:2B\:E0\nissuer name \: C=JP, ST=Tokyo, O=?????????????????? Ltd, CN=?????????????????? CA\nsubject name \: C=JP, ST=Tokyo, O=?????????????????? Ltd, CN=?????????????????? CA\nissued on \: 2020-05-20 16\:17\:23\nexpires on \: 2020-06-19 16\:17\:23\nsigned using \: RSA with SHA-256\nRSA key size \: 2048 bits\nbasic constraints \: CA=true\n"
Koh M. Nakagawa46b87822020-05-16 10:08:09 +0900[diff] [blame]184
Paul Bakkerc27c4e22013-09-23 15:01:36 +0200[diff] [blame]185X509 certificate v1 with extension
palaviva07ecda2016-08-07 11:15:29 +0300[diff] [blame]186depends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_RSA_C:MBEDTLS_X509_ALLOW_EXTENSIONS_NON_V3:MBEDTLS_SHA1_C
Jerry Yue42257c2023-06-01 13:30:06 +0800[diff] [blame]187x509_cert_info:"data_files/parse_input/cert_v1_with_ext.crt":"cert. version \: 1\nserial number \: BD\:ED\:44\:C7\:D2\:3E\:C2\:A4\nissuer name \: C=XX, ST=XX, L=XX, O=XX, OU=XX, emailAddress=admin@identity-check.org, CN=identity-check.org\nsubject name \: C=XX, ST=XX, L=XX, O=XX, OU=XX, emailAddress=admin@identity-check.org, CN=identity-check.org\nissued on \: 2013-07-04 16\:17\:02\nexpires on \: 2014-07-04 16\:17\:02\nsigned using \: RSA with SHA1\nRSA key size \: 2048 bits\nsubject alt name \:\n dNSName \: identity-check.org\n dNSName \: www.identity-check.org\n <unsupported>\n"
Ron Eldorb2dc3fa2019-03-21 13:40:13 +0200[diff] [blame]188
189X509 SAN parsing otherName
190depends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_ECDSA_C:MBEDTLS_ECP_DP_SECP256R1_ENABLED:MBEDTLS_SHA256_C
Jerry Yu47dd8402023-06-01 13:30:07 +0800[diff] [blame]191x509_parse_san:"data_files/parse_input/server5-othername.crt":"type \: 0\notherName \: hardware module name \: hardware type \: 1.3.6.1.4.1.17.3, hardware serial number \: 313233343536\n"
Ron Eldorb2dc3fa2019-03-21 13:40:13 +0200[diff] [blame]192
Victor Barpp Gomes7e5426d2022-09-29 10:03:16 -0300[diff] [blame]193X509 SAN parsing binary otherName
194depends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_ECDSA_C:MBEDTLS_ECP_DP_SECP256R1_ENABLED:MBEDTLS_SHA256_C
Jerry Yu47dd8402023-06-01 13:30:07 +0800[diff] [blame]195x509_parse_san:"data_files/parse_input/server5-nonprintable_othername.crt":"type \: 0\notherName \: hardware module name \: hardware type \: 1.3.6.1.4.1.17.3, hardware serial number \: 3132338081008180333231\n"
Ron Eldorb2dc3fa2019-03-21 13:40:13 +0200[diff] [blame]196
197X509 SAN parsing dNSName
Ron Eldor9eeb8612019-02-12 15:03:42 +0200[diff] [blame]198depends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_RSA_C:MBEDTLS_SHA256_C
Jerry Yu47dd8402023-06-01 13:30:07 +0800[diff] [blame]199x509_parse_san:"data_files/parse_input/cert_example_multi.crt":"type \: 2\ndNSName \: example.com\ntype \: 2\ndNSName \: example.net\ntype \: 2\ndNSName \: *.example.org\n"
Ron Eldorb2dc3fa2019-03-21 13:40:13 +0200[diff] [blame]200
201X509 SAN parsing Multiple different types
202depends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_ECDSA_C:MBEDTLS_ECP_DP_SECP256R1_ENABLED:MBEDTLS_SHA256_C
Jerry Yu47dd8402023-06-01 13:30:07 +0800[diff] [blame]203x509_parse_san:"data_files/parse_input/multiple_san.crt":"type \: 2\ndNSName \: example.com\ntype \: 0\notherName \: hardware module name \: hardware type \: 1.3.6.1.4.1.17.3, hardware serial number \: 313233343536\ntype \: 2\ndNSName \: example.net\ntype \: 2\ndNSName \: *.example.org\n"
Ron Eldorb2dc3fa2019-03-21 13:40:13 +0200[diff] [blame]204
205X509 SAN parsing, no subject alt name
206depends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_RSA_C:MBEDTLS_SHA256_C:MBEDTLS_ECDSA_C
Jerry Yu47dd8402023-06-01 13:30:07 +0800[diff] [blame]207x509_parse_san:"data_files/parse_input/server4.crt":""
Ron Eldorb2dc3fa2019-03-21 13:40:13 +0200[diff] [blame]208
209X509 SAN parsing, unsupported otherName name
210depends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_ECDSA_C:MBEDTLS_ECP_DP_SECP256R1_ENABLED:MBEDTLS_SHA256_C
Jerry Yu47dd8402023-06-01 13:30:07 +0800[diff] [blame]211x509_parse_san:"data_files/parse_input/server5-unsupported_othername.crt":""
Paul Bakkerc27c4e22013-09-23 15:01:36 +0200[diff] [blame]212
Paul Bakker37940d9f2009-07-10 22:38:58 +0000[diff] [blame]213X509 CRL information #1
Manuel Pégourié-Gonnard43be6cd2017-06-20 09:53:42 +0200[diff] [blame]214depends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_SHA1_C:MBEDTLS_RSA_C
Jerry Yu5d043212023-06-01 13:30:03 +0800[diff] [blame]215mbedtls_x509_crl_info:"data_files/parse_input/crl_expired.pem":"CRL version \: 1\nissuer name \: C=NL, O=PolarSSL, CN=PolarSSL Test CA\nthis update \: 2011-02-20 10\:24\:19\nnext update \: 2011-02-20 11\:24\:19\nRevoked certificates\:\nserial number\: 01 revocation date\: 2011-02-12 14\:44\:07\nserial number\: 03 revocation date\: 2011-02-12 14\:44\:07\nsigned using \: RSA with SHA1\n"
Paul Bakkerc26a1892009-07-19 20:30:14 +0000[diff] [blame]216
217X509 CRL Information MD2 Digest
Manuel Pégourié-Gonnard43be6cd2017-06-20 09:53:42 +0200[diff] [blame]218depends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_MD2_C:MBEDTLS_RSA_C
Jerry Yu5d043212023-06-01 13:30:03 +0800[diff] [blame]219mbedtls_x509_crl_info:"data_files/parse_input/crl_md2.pem":"CRL version \: 1\nissuer name \: C=NL, O=PolarSSL, CN=PolarSSL Test CA\nthis update \: 2009-07-19 19\:56\:37\nnext update \: 2009-09-17 19\:56\:37\nRevoked certificates\:\nserial number\: 01 revocation date\: 2009-02-09 21\:12\:36\nserial number\: 03 revocation date\: 2009-02-09 21\:12\:36\nsigned using \: RSA with MD2\n"
Paul Bakkerc26a1892009-07-19 20:30:14 +0000[diff] [blame]220
221X509 CRL Information MD4 Digest
Ronald Cronae2e4a72021-09-08 17:24:25 +0200[diff] [blame]222depends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_MD4_C:MBEDTLS_RSA_C
Jerry Yu5d043212023-06-01 13:30:03 +0800[diff] [blame]223mbedtls_x509_crl_info:"data_files/parse_input/crl_md4.pem":"CRL version \: 1\nissuer name \: C=NL, O=PolarSSL, CN=PolarSSL Test CA\nthis update \: 2011-02-12 14\:44\:07\nnext update \: 2011-04-13 14\:44\:07\nRevoked certificates\:\nserial number\: 01 revocation date\: 2011-02-12 14\:44\:07\nserial number\: 03 revocation date\: 2011-02-12 14\:44\:07\nsigned using \: RSA with MD4\n"
Paul Bakkerc26a1892009-07-19 20:30:14 +0000[diff] [blame]224
225X509 CRL Information MD5 Digest
Manuel Pégourié-Gonnard43be6cd2017-06-20 09:53:42 +0200[diff] [blame]226depends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_MD5_C:MBEDTLS_RSA_C
Jerry Yu5d043212023-06-01 13:30:03 +0800[diff] [blame]227mbedtls_x509_crl_info:"data_files/parse_input/crl_md5.pem":"CRL version \: 1\nissuer name \: C=NL, O=PolarSSL, CN=PolarSSL Test CA\nthis update \: 2011-02-12 14\:44\:07\nnext update \: 2011-04-13 14\:44\:07\nRevoked certificates\:\nserial number\: 01 revocation date\: 2011-02-12 14\:44\:07\nserial number\: 03 revocation date\: 2011-02-12 14\:44\:07\nsigned using \: RSA with MD5\n"
Paul Bakkerc26a1892009-07-19 20:30:14 +0000[diff] [blame]228
229X509 CRL Information SHA1 Digest
Manuel Pégourié-Gonnard43be6cd2017-06-20 09:53:42 +0200[diff] [blame]230depends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_SHA1_C:MBEDTLS_RSA_C
Jerry Yu5d043212023-06-01 13:30:03 +0800[diff] [blame]231mbedtls_x509_crl_info:"data_files/parse_input/crl_sha1.pem":"CRL version \: 1\nissuer name \: C=NL, O=PolarSSL, CN=PolarSSL Test CA\nthis update \: 2011-02-12 14\:44\:07\nnext update \: 2011-04-13 14\:44\:07\nRevoked certificates\:\nserial number\: 01 revocation date\: 2011-02-12 14\:44\:07\nserial number\: 03 revocation date\: 2011-02-12 14\:44\:07\nsigned using \: RSA with SHA1\n"
Paul Bakkerc26a1892009-07-19 20:30:14 +0000[diff] [blame]232
233X509 CRL Information SHA224 Digest
Manuel Pégourié-Gonnard43be6cd2017-06-20 09:53:42 +0200[diff] [blame]234depends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_SHA256_C:MBEDTLS_RSA_C
Jerry Yu5d043212023-06-01 13:30:03 +0800[diff] [blame]235mbedtls_x509_crl_info:"data_files/parse_input/crl_sha224.pem":"CRL version \: 1\nissuer name \: C=NL, O=PolarSSL, CN=PolarSSL Test CA\nthis update \: 2011-02-12 14\:44\:07\nnext update \: 2011-04-13 14\:44\:07\nRevoked certificates\:\nserial number\: 01 revocation date\: 2011-02-12 14\:44\:07\nserial number\: 03 revocation date\: 2011-02-12 14\:44\:07\nsigned using \: RSA with SHA-224\n"
Paul Bakkerc26a1892009-07-19 20:30:14 +0000[diff] [blame]236
237X509 CRL Information SHA256 Digest
Manuel Pégourié-Gonnard43be6cd2017-06-20 09:53:42 +0200[diff] [blame]238depends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_SHA256_C:MBEDTLS_RSA_C
Jerry Yu5d043212023-06-01 13:30:03 +0800[diff] [blame]239mbedtls_x509_crl_info:"data_files/parse_input/crl_sha256.pem":"CRL version \: 1\nissuer name \: C=NL, O=PolarSSL, CN=PolarSSL Test CA\nthis update \: 2011-02-12 14\:44\:07\nnext update \: 2011-04-13 14\:44\:07\nRevoked certificates\:\nserial number\: 01 revocation date\: 2011-02-12 14\:44\:07\nserial number\: 03 revocation date\: 2011-02-12 14\:44\:07\nsigned using \: RSA with SHA-256\n"
Paul Bakkerc26a1892009-07-19 20:30:14 +0000[diff] [blame]240
241X509 CRL Information SHA384 Digest
Gilles Peskine049feff2020-03-09 20:52:19 +0100[diff] [blame]242depends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_SHA512_C:!MBEDTLS_SHA512_NO_SHA384:MBEDTLS_RSA_C
Jerry Yu5d043212023-06-01 13:30:03 +0800[diff] [blame]243mbedtls_x509_crl_info:"data_files/parse_input/crl_sha384.pem":"CRL version \: 1\nissuer name \: C=NL, O=PolarSSL, CN=PolarSSL Test CA\nthis update \: 2011-02-12 14\:44\:07\nnext update \: 2011-04-13 14\:44\:07\nRevoked certificates\:\nserial number\: 01 revocation date\: 2011-02-12 14\:44\:07\nserial number\: 03 revocation date\: 2011-02-12 14\:44\:07\nsigned using \: RSA with SHA-384\n"
Paul Bakkerc26a1892009-07-19 20:30:14 +0000[diff] [blame]244
245X509 CRL Information SHA512 Digest
Manuel Pégourié-Gonnard43be6cd2017-06-20 09:53:42 +0200[diff] [blame]246depends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_SHA512_C:MBEDTLS_RSA_C
Jerry Yu5d043212023-06-01 13:30:03 +0800[diff] [blame]247mbedtls_x509_crl_info:"data_files/parse_input/crl_sha512.pem":"CRL version \: 1\nissuer name \: C=NL, O=PolarSSL, CN=PolarSSL Test CA\nthis update \: 2011-02-12 14\:44\:07\nnext update \: 2011-04-13 14\:44\:07\nRevoked certificates\:\nserial number\: 01 revocation date\: 2011-02-12 14\:44\:07\nserial number\: 03 revocation date\: 2011-02-12 14\:44\:07\nsigned using \: RSA with SHA-512\n"
Paul Bakker37940d9f2009-07-10 22:38:58 +0000[diff] [blame]248
Manuel Pégourié-Gonnard8e42ff62014-01-24 15:56:20 +0100[diff] [blame]249X509 CRL information RSA-PSS, SHA1 Digest
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200[diff] [blame]250depends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_X509_RSASSA_PSS_SUPPORT:MBEDTLS_SHA1_C
Jerry Yu5d043212023-06-01 13:30:03 +0800[diff] [blame]251mbedtls_x509_crl_info:"data_files/parse_input/crl-rsa-pss-sha1.pem":"CRL version \: 2\nissuer name \: C=NL, O=PolarSSL, CN=PolarSSL Test CA\nthis update \: 2014-01-20 13\:46\:35\nnext update \: 2024-01-18 13\:46\:35\nRevoked certificates\:\nserial number\: 0A revocation date\: 2013-09-24 16\:28\:38\nserial number\: 16 revocation date\: 2014-01-20 13\:43\:05\nsigned using \: RSASSA-PSS (SHA1, MGF1-SHA1, 0xEA)\n"
Manuel Pégourié-Gonnard8e42ff62014-01-24 15:56:20 +0100[diff] [blame]252
253X509 CRL information RSA-PSS, SHA224 Digest
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200[diff] [blame]254depends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_X509_RSASSA_PSS_SUPPORT:MBEDTLS_SHA256_C
Jerry Yu5d043212023-06-01 13:30:03 +0800[diff] [blame]255mbedtls_x509_crl_info:"data_files/parse_input/crl-rsa-pss-sha224.pem":"CRL version \: 2\nissuer name \: C=NL, O=PolarSSL, CN=PolarSSL Test CA\nthis update \: 2014-01-20 13\:56\:06\nnext update \: 2024-01-18 13\:56\:06\nRevoked certificates\:\nserial number\: 0A revocation date\: 2013-09-24 16\:28\:38\nserial number\: 16 revocation date\: 2014-01-20 13\:43\:05\nsigned using \: RSASSA-PSS (SHA224, MGF1-SHA224, 0xE2)\n"
Manuel Pégourié-Gonnard8e42ff62014-01-24 15:56:20 +0100[diff] [blame]256
257X509 CRL information RSA-PSS, SHA256 Digest
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200[diff] [blame]258depends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_X509_RSASSA_PSS_SUPPORT:MBEDTLS_SHA256_C
Jerry Yu5d043212023-06-01 13:30:03 +0800[diff] [blame]259mbedtls_x509_crl_info:"data_files/parse_input/crl-rsa-pss-sha256.pem":"CRL version \: 2\nissuer name \: C=NL, O=PolarSSL, CN=PolarSSL Test CA\nthis update \: 2014-01-20 13\:56\:16\nnext update \: 2024-01-18 13\:56\:16\nRevoked certificates\:\nserial number\: 0A revocation date\: 2013-09-24 16\:28\:38\nserial number\: 16 revocation date\: 2014-01-20 13\:43\:05\nsigned using \: RSASSA-PSS (SHA256, MGF1-SHA256, 0xDE)\n"
Manuel Pégourié-Gonnard8e42ff62014-01-24 15:56:20 +0100[diff] [blame]260
261X509 CRL information RSA-PSS, SHA384 Digest
Gilles Peskine049feff2020-03-09 20:52:19 +0100[diff] [blame]262depends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_X509_RSASSA_PSS_SUPPORT:MBEDTLS_SHA512_C:!MBEDTLS_SHA512_NO_SHA384
Jerry Yu5d043212023-06-01 13:30:03 +0800[diff] [blame]263mbedtls_x509_crl_info:"data_files/parse_input/crl-rsa-pss-sha384.pem":"CRL version \: 2\nissuer name \: C=NL, O=PolarSSL, CN=PolarSSL Test CA\nthis update \: 2014-01-20 13\:56\:28\nnext update \: 2024-01-18 13\:56\:28\nRevoked certificates\:\nserial number\: 0A revocation date\: 2013-09-24 16\:28\:38\nserial number\: 16 revocation date\: 2014-01-20 13\:43\:05\nsigned using \: RSASSA-PSS (SHA384, MGF1-SHA384, 0xCE)\n"
Manuel Pégourié-Gonnard8e42ff62014-01-24 15:56:20 +0100[diff] [blame]264
265X509 CRL information RSA-PSS, SHA512 Digest
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200[diff] [blame]266depends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_X509_RSASSA_PSS_SUPPORT:MBEDTLS_SHA512_C
Jerry Yu5d043212023-06-01 13:30:03 +0800[diff] [blame]267mbedtls_x509_crl_info:"data_files/parse_input/crl-rsa-pss-sha512.pem":"CRL version \: 2\nissuer name \: C=NL, O=PolarSSL, CN=PolarSSL Test CA\nthis update \: 2014-01-20 13\:56\:38\nnext update \: 2024-01-18 13\:56\:38\nRevoked certificates\:\nserial number\: 0A revocation date\: 2013-09-24 16\:28\:38\nserial number\: 16 revocation date\: 2014-01-20 13\:43\:05\nsigned using \: RSASSA-PSS (SHA512, MGF1-SHA512, 0xBE)\n"
Manuel Pégourié-Gonnard8e42ff62014-01-24 15:56:20 +0100[diff] [blame]268
Manuel Pégourié-Gonnard05b9dce2013-08-10 10:19:03 +0200[diff] [blame]269X509 CRL Information EC, SHA1 Digest
Manuel Pégourié-Gonnard43be6cd2017-06-20 09:53:42 +0200[diff] [blame]270depends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_SHA1_C:MBEDTLS_ECDSA_C
Jerry Yu5d043212023-06-01 13:30:03 +0800[diff] [blame]271mbedtls_x509_crl_info:"data_files/parse_input/crl-ec-sha1.pem":"CRL version \: 2\nissuer name \: C=NL, O=PolarSSL, CN=Polarssl Test EC CA\nthis update \: 2013-09-24 16\:31\:08\nnext update \: 2023-09-22 16\:31\:08\nRevoked certificates\:\nserial number\: 0A revocation date\: 2013-09-24 16\:28\:38\nsigned using \: ECDSA with SHA1\n"
Manuel Pégourié-Gonnard05b9dce2013-08-10 10:19:03 +0200[diff] [blame]272
273X509 CRL Information EC, SHA224 Digest
Manuel Pégourié-Gonnard43be6cd2017-06-20 09:53:42 +0200[diff] [blame]274depends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_SHA256_C:MBEDTLS_ECDSA_C
Jerry Yu5d043212023-06-01 13:30:03 +0800[diff] [blame]275mbedtls_x509_crl_info:"data_files/parse_input/crl-ec-sha224.pem":"CRL version \: 2\nissuer name \: C=NL, O=PolarSSL, CN=Polarssl Test EC CA\nthis update \: 2013-09-24 16\:31\:08\nnext update \: 2023-09-22 16\:31\:08\nRevoked certificates\:\nserial number\: 0A revocation date\: 2013-09-24 16\:28\:38\nsigned using \: ECDSA with SHA224\n"
Manuel Pégourié-Gonnard05b9dce2013-08-10 10:19:03 +0200[diff] [blame]276
277X509 CRL Information EC, SHA256 Digest
Manuel Pégourié-Gonnard43be6cd2017-06-20 09:53:42 +0200[diff] [blame]278depends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_SHA256_C:MBEDTLS_ECDSA_C
Jerry Yu5d043212023-06-01 13:30:03 +0800[diff] [blame]279mbedtls_x509_crl_info:"data_files/parse_input/crl-ec-sha256.pem":"CRL version \: 2\nissuer name \: C=NL, O=PolarSSL, CN=Polarssl Test EC CA\nthis update \: 2013-09-24 16\:31\:08\nnext update \: 2023-09-22 16\:31\:08\nRevoked certificates\:\nserial number\: 0A revocation date\: 2013-09-24 16\:28\:38\nsigned using \: ECDSA with SHA256\n"
Manuel Pégourié-Gonnard05b9dce2013-08-10 10:19:03 +0200[diff] [blame]280
281X509 CRL Information EC, SHA384 Digest
Gilles Peskine049feff2020-03-09 20:52:19 +0100[diff] [blame]282depends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_SHA512_C:!MBEDTLS_SHA512_NO_SHA384:MBEDTLS_ECDSA_C
Jerry Yu5d043212023-06-01 13:30:03 +0800[diff] [blame]283mbedtls_x509_crl_info:"data_files/parse_input/crl-ec-sha384.pem":"CRL version \: 2\nissuer name \: C=NL, O=PolarSSL, CN=Polarssl Test EC CA\nthis update \: 2013-09-24 16\:31\:08\nnext update \: 2023-09-22 16\:31\:08\nRevoked certificates\:\nserial number\: 0A revocation date\: 2013-09-24 16\:28\:38\nsigned using \: ECDSA with SHA384\n"
Manuel Pégourié-Gonnard05b9dce2013-08-10 10:19:03 +0200[diff] [blame]284
285X509 CRL Information EC, SHA512 Digest
Manuel Pégourié-Gonnard43be6cd2017-06-20 09:53:42 +0200[diff] [blame]286depends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_SHA512_C:MBEDTLS_ECDSA_C
Jerry Yu5d043212023-06-01 13:30:03 +0800[diff] [blame]287mbedtls_x509_crl_info:"data_files/parse_input/crl-ec-sha512.pem":"CRL version \: 2\nissuer name \: C=NL, O=PolarSSL, CN=Polarssl Test EC CA\nthis update \: 2013-09-24 16\:31\:08\nnext update \: 2023-09-22 16\:31\:08\nRevoked certificates\:\nserial number\: 0A revocation date\: 2013-09-24 16\:28\:38\nsigned using \: ECDSA with SHA512\n"
Manuel Pégourié-Gonnard05b9dce2013-08-10 10:19:03 +0200[diff] [blame]288
Andres AGa39db392016-12-08 17:10:38 +0000[diff] [blame]289X509 CRL Malformed Input (trailing spaces at end of file)
Manuel Pégourié-Gonnard43be6cd2017-06-20 09:53:42 +0200[diff] [blame]290depends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_SHA1_C:MBEDTLS_SHA512_C:MBEDTLS_ECDSA_C
Andres AGa39db392016-12-08 17:10:38 +0000[diff] [blame]291mbedtls_x509_crl_parse:"data_files/crl-malformed-trailing-spaces.pem":MBEDTLS_ERR_PEM_NO_HEADER_FOOTER_PRESENT
292
Manuel Pégourié-Gonnardfd3e4fb2018-03-13 11:53:30 +0100[diff] [blame]293X509 CRL Unsupported critical extension (issuingDistributionPoint)
294depends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_RSA_C:MBEDTLS_SHA256_C
295mbedtls_x509_crl_parse:"data_files/crl-idp.pem":MBEDTLS_ERR_X509_INVALID_EXTENSIONS + MBEDTLS_ERR_ASN1_UNEXPECTED_TAG
296
Manuel Pégourié-Gonnarda63305d2018-03-14 12:23:56 +0100[diff] [blame]297X509 CRL Unsupported non-critical extension (issuingDistributionPoint)
298depends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_RSA_C:MBEDTLS_SHA256_C
299mbedtls_x509_crl_parse:"data_files/crl-idpnc.pem":0
300
Manuel Pégourié-Gonnard2a8d7fd2014-01-24 17:34:26 +0100[diff] [blame]301X509 CSR Information RSA with MD4
Manuel Pégourié-Gonnard43be6cd2017-06-20 09:53:42 +0200[diff] [blame]302depends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_MD4_C:MBEDTLS_RSA_C
Jerry Yu3020abb2023-06-01 13:30:08 +0800[diff] [blame^]303mbedtls_x509_csr_info:"data_files/parse_input/server1.req.md4":"CSR version \: 1\nsubject name \: C=NL, O=PolarSSL, CN=PolarSSL Server 1\nsigned using \: RSA with MD4\nRSA key size \: 2048 bits\n"
Manuel Pégourié-Gonnard2a8d7fd2014-01-24 17:34:26 +0100[diff] [blame]304
305X509 CSR Information RSA with MD5
Manuel Pégourié-Gonnard43be6cd2017-06-20 09:53:42 +0200[diff] [blame]306depends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_MD5_C:MBEDTLS_RSA_C
Jerry Yu3020abb2023-06-01 13:30:08 +0800[diff] [blame^]307mbedtls_x509_csr_info:"data_files/parse_input/server1.req.md5":"CSR version \: 1\nsubject name \: C=NL, O=PolarSSL, CN=PolarSSL Server 1\nsigned using \: RSA with MD5\nRSA key size \: 2048 bits\n"
Manuel Pégourié-Gonnard2a8d7fd2014-01-24 17:34:26 +0100[diff] [blame]308
309X509 CSR Information RSA with SHA1
Manuel Pégourié-Gonnard43be6cd2017-06-20 09:53:42 +0200[diff] [blame]310depends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_SHA1_C:MBEDTLS_RSA_C
Jerry Yu3020abb2023-06-01 13:30:08 +0800[diff] [blame^]311mbedtls_x509_csr_info:"data_files/parse_input/server1.req.sha1":"CSR version \: 1\nsubject name \: C=NL, O=PolarSSL, CN=PolarSSL Server 1\nsigned using \: RSA with SHA1\nRSA key size \: 2048 bits\n"
Manuel Pégourié-Gonnard2a8d7fd2014-01-24 17:34:26 +0100[diff] [blame]312
313X509 CSR Information RSA with SHA224
Manuel Pégourié-Gonnard43be6cd2017-06-20 09:53:42 +0200[diff] [blame]314depends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_SHA256_C:MBEDTLS_RSA_C
Jerry Yu3020abb2023-06-01 13:30:08 +0800[diff] [blame^]315mbedtls_x509_csr_info:"data_files/parse_input/server1.req.sha224":"CSR version \: 1\nsubject name \: C=NL, O=PolarSSL, CN=PolarSSL Server 1\nsigned using \: RSA with SHA-224\nRSA key size \: 2048 bits\n"
Manuel Pégourié-Gonnard2a8d7fd2014-01-24 17:34:26 +0100[diff] [blame]316
Hanno Becker01346c62019-02-12 13:32:06 +0000[diff] [blame]317X509 CSR Information RSA with SHA-256
Manuel Pégourié-Gonnard43be6cd2017-06-20 09:53:42 +0200[diff] [blame]318depends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_SHA256_C:MBEDTLS_RSA_C
Jerry Yu3020abb2023-06-01 13:30:08 +0800[diff] [blame^]319mbedtls_x509_csr_info:"data_files/parse_input/server1.req.sha256":"CSR version \: 1\nsubject name \: C=NL, O=PolarSSL, CN=PolarSSL Server 1\nsigned using \: RSA with SHA-256\nRSA key size \: 2048 bits\n"
Manuel Pégourié-Gonnard2a8d7fd2014-01-24 17:34:26 +0100[diff] [blame]320
321X509 CSR Information RSA with SHA384
Gilles Peskine049feff2020-03-09 20:52:19 +0100[diff] [blame]322depends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_SHA512_C:!MBEDTLS_SHA512_NO_SHA384:MBEDTLS_RSA_C
Jerry Yu3020abb2023-06-01 13:30:08 +0800[diff] [blame^]323mbedtls_x509_csr_info:"data_files/parse_input/server1.req.sha384":"CSR version \: 1\nsubject name \: C=NL, O=PolarSSL, CN=PolarSSL Server 1\nsigned using \: RSA with SHA-384\nRSA key size \: 2048 bits\n"
Manuel Pégourié-Gonnard2a8d7fd2014-01-24 17:34:26 +0100[diff] [blame]324
325X509 CSR Information RSA with SHA512
Manuel Pégourié-Gonnard43be6cd2017-06-20 09:53:42 +0200[diff] [blame]326depends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_SHA512_C:MBEDTLS_RSA_C
Jerry Yu3020abb2023-06-01 13:30:08 +0800[diff] [blame^]327mbedtls_x509_csr_info:"data_files/parse_input/server1.req.sha512":"CSR version \: 1\nsubject name \: C=NL, O=PolarSSL, CN=PolarSSL Server 1\nsigned using \: RSA with SHA-512\nRSA key size \: 2048 bits\n"
Manuel Pégourié-Gonnard2a8d7fd2014-01-24 17:34:26 +0100[diff] [blame]328
Werner Lewis02c9d3b2022-05-20 12:48:46 +0100[diff] [blame]329X509 CSR Information RSA with SHA-256, containing commas
330depends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_SHA256_C:MBEDTLS_RSA_C:MBEDTS_X509_INFO
Jerry Yu3020abb2023-06-01 13:30:08 +0800[diff] [blame^]331mbedtls_x509_csr_info:"data_files/parse_input/server1.req.commas.sha256":"CSR version \: 1\nsubject name \: C=NL, O=PolarSSL\\, Commas, CN=PolarSSL Server 1\nsigned using \: RSA with SHA-256\nRSA key size \: 2048 bits\n"
Werner Lewis02c9d3b2022-05-20 12:48:46 +0100[diff] [blame]332
Manuel Pégourié-Gonnard2a8d7fd2014-01-24 17:34:26 +0100[diff] [blame]333X509 CSR Information EC with SHA1
Manuel Pégourié-Gonnard43be6cd2017-06-20 09:53:42 +0200[diff] [blame]334depends_on:MBEDTLS_ECDSA_C:MBEDTLS_PEM_PARSE_C:MBEDTLS_ECP_DP_SECP256R1_ENABLED:MBEDTLS_SHA1_C
Jerry Yu3020abb2023-06-01 13:30:08 +0800[diff] [blame^]335mbedtls_x509_csr_info:"data_files/parse_input/server5.req.sha1":"CSR version \: 1\nsubject name \: C=NL, O=PolarSSL, CN=localhost\nsigned using \: ECDSA with SHA1\nEC key size \: 256 bits\n"
Manuel Pégourié-Gonnard2a8d7fd2014-01-24 17:34:26 +0100[diff] [blame]336
337X509 CSR Information EC with SHA224
Manuel Pégourié-Gonnard43be6cd2017-06-20 09:53:42 +0200[diff] [blame]338depends_on:MBEDTLS_ECDSA_C:MBEDTLS_PEM_PARSE_C:MBEDTLS_ECP_DP_SECP256R1_ENABLED:MBEDTLS_SHA256_C
Jerry Yu3020abb2023-06-01 13:30:08 +0800[diff] [blame^]339mbedtls_x509_csr_info:"data_files/parse_input/server5.req.sha224":"CSR version \: 1\nsubject name \: C=NL, O=PolarSSL, CN=localhost\nsigned using \: ECDSA with SHA224\nEC key size \: 256 bits\n"
Manuel Pégourié-Gonnard2a8d7fd2014-01-24 17:34:26 +0100[diff] [blame]340
341X509 CSR Information EC with SHA256
Manuel Pégourié-Gonnard43be6cd2017-06-20 09:53:42 +0200[diff] [blame]342depends_on:MBEDTLS_ECDSA_C:MBEDTLS_PEM_PARSE_C:MBEDTLS_ECP_DP_SECP256R1_ENABLED:MBEDTLS_SHA256_C
Jerry Yu3020abb2023-06-01 13:30:08 +0800[diff] [blame^]343mbedtls_x509_csr_info:"data_files/parse_input/server5.req.sha256":"CSR version \: 1\nsubject name \: C=NL, O=PolarSSL, CN=localhost\nsigned using \: ECDSA with SHA256\nEC key size \: 256 bits\n"
Manuel Pégourié-Gonnard2a8d7fd2014-01-24 17:34:26 +0100[diff] [blame]344
345X509 CSR Information EC with SHA384
Gilles Peskine049feff2020-03-09 20:52:19 +0100[diff] [blame]346depends_on:MBEDTLS_ECDSA_C:MBEDTLS_PEM_PARSE_C:MBEDTLS_ECP_DP_SECP256R1_ENABLED:MBEDTLS_SHA512_C:!MBEDTLS_SHA512_NO_SHA384
Jerry Yu3020abb2023-06-01 13:30:08 +0800[diff] [blame^]347mbedtls_x509_csr_info:"data_files/parse_input/server5.req.sha384":"CSR version \: 1\nsubject name \: C=NL, O=PolarSSL, CN=localhost\nsigned using \: ECDSA with SHA384\nEC key size \: 256 bits\n"
Manuel Pégourié-Gonnard2a8d7fd2014-01-24 17:34:26 +0100[diff] [blame]348
349X509 CSR Information EC with SHA512
Manuel Pégourié-Gonnard43be6cd2017-06-20 09:53:42 +0200[diff] [blame]350depends_on:MBEDTLS_ECDSA_C:MBEDTLS_PEM_PARSE_C:MBEDTLS_ECP_DP_SECP256R1_ENABLED:MBEDTLS_SHA512_C
Jerry Yu3020abb2023-06-01 13:30:08 +0800[diff] [blame^]351mbedtls_x509_csr_info:"data_files/parse_input/server5.req.sha512":"CSR version \: 1\nsubject name \: C=NL, O=PolarSSL, CN=localhost\nsigned using \: ECDSA with SHA512\nEC key size \: 256 bits\n"
Manuel Pégourié-Gonnard2a8d7fd2014-01-24 17:34:26 +0100[diff] [blame]352
Manuel Pégourié-Gonnard39868ee2014-01-24 18:47:17 +0100[diff] [blame]353X509 CSR Information RSA-PSS with SHA1
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200[diff] [blame]354depends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_X509_RSASSA_PSS_SUPPORT:MBEDTLS_SHA1_C
Jerry Yu3020abb2023-06-01 13:30:08 +0800[diff] [blame^]355mbedtls_x509_csr_info:"data_files/parse_input/server9.req.sha1":"CSR version \: 1\nsubject name \: C=NL, O=PolarSSL, CN=localhost\nsigned using \: RSASSA-PSS (SHA1, MGF1-SHA1, 0x6A)\nRSA key size \: 1024 bits\n"
Manuel Pégourié-Gonnard39868ee2014-01-24 18:47:17 +0100[diff] [blame]356
357X509 CSR Information RSA-PSS with SHA224
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200[diff] [blame]358depends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_X509_RSASSA_PSS_SUPPORT:MBEDTLS_SHA256_C
Jerry Yu3020abb2023-06-01 13:30:08 +0800[diff] [blame^]359mbedtls_x509_csr_info:"data_files/parse_input/server9.req.sha224":"CSR version \: 1\nsubject name \: C=NL, O=PolarSSL, CN=localhost\nsigned using \: RSASSA-PSS (SHA224, MGF1-SHA224, 0x62)\nRSA key size \: 1024 bits\n"
Manuel Pégourié-Gonnard39868ee2014-01-24 18:47:17 +0100[diff] [blame]360
361X509 CSR Information RSA-PSS with SHA256
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200[diff] [blame]362depends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_X509_RSASSA_PSS_SUPPORT:MBEDTLS_SHA256_C
Jerry Yu3020abb2023-06-01 13:30:08 +0800[diff] [blame^]363mbedtls_x509_csr_info:"data_files/parse_input/server9.req.sha256":"CSR version \: 1\nsubject name \: C=NL, O=PolarSSL, CN=localhost\nsigned using \: RSASSA-PSS (SHA256, MGF1-SHA256, 0x5E)\nRSA key size \: 1024 bits\n"
Manuel Pégourié-Gonnard39868ee2014-01-24 18:47:17 +0100[diff] [blame]364
365X509 CSR Information RSA-PSS with SHA384
Gilles Peskine049feff2020-03-09 20:52:19 +0100[diff] [blame]366depends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_X509_RSASSA_PSS_SUPPORT:MBEDTLS_SHA512_C:!MBEDTLS_SHA512_NO_SHA384
Jerry Yu3020abb2023-06-01 13:30:08 +0800[diff] [blame^]367mbedtls_x509_csr_info:"data_files/parse_input/server9.req.sha384":"CSR version \: 1\nsubject name \: C=NL, O=PolarSSL, CN=localhost\nsigned using \: RSASSA-PSS (SHA384, MGF1-SHA384, 0x4E)\nRSA key size \: 1024 bits\n"
Manuel Pégourié-Gonnard39868ee2014-01-24 18:47:17 +0100[diff] [blame]368
369X509 CSR Information RSA-PSS with SHA512
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200[diff] [blame]370depends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_X509_RSASSA_PSS_SUPPORT:MBEDTLS_SHA512_C
Jerry Yu3020abb2023-06-01 13:30:08 +0800[diff] [blame^]371mbedtls_x509_csr_info:"data_files/parse_input/server9.req.sha512":"CSR version \: 1\nsubject name \: C=NL, O=PolarSSL, CN=localhost\nsigned using \: RSASSA-PSS (SHA512, MGF1-SHA512, 0x3E)\nRSA key size \: 1024 bits\n"
Manuel Pégourié-Gonnard39868ee2014-01-24 18:47:17 +0100[diff] [blame]372
Hanno Becker01346c62019-02-12 13:32:06 +0000[diff] [blame]373X509 CSR Information RSA with SHA-256 - Microsoft header
Simon Butcher03de2102018-10-06 16:24:13 +0100[diff] [blame]374depends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_SHA256_C:MBEDTLS_RSA_C
Jerry Yu3020abb2023-06-01 13:30:08 +0800[diff] [blame^]375mbedtls_x509_csr_info:"data_files/parse_input/server1-ms.req.sha256":"CSR version \: 1\nsubject name \: C=NL, O=PolarSSL, CN=PolarSSL Server 1\nsigned using \: RSA with SHA-256\nRSA key size \: 2048 bits\n"
Simon Butcher03de2102018-10-06 16:24:13 +0100[diff] [blame]376
Manuel Pégourié-Gonnardb5f48ad2015-04-20 10:38:13 +0100[diff] [blame]377X509 Verify Information: empty
378x509_verify_info:0:"":""
379
380X509 Verify Information: one issue
Manuel Pégourié-Gonnarde6028c92015-04-20 12:19:02 +0100[diff] [blame]381x509_verify_info:MBEDTLS_X509_BADCERT_MISSING:"":"Certificate was missing\n"
Manuel Pégourié-Gonnardb5f48ad2015-04-20 10:38:13 +0100[diff] [blame]382
383X509 Verify Information: two issues
Manuel Pégourié-Gonnarde6028c92015-04-20 12:19:02 +0100[diff] [blame]384x509_verify_info:MBEDTLS_X509_BADCERT_EXPIRED | MBEDTLS_X509_BADCRL_EXPIRED:"":"The certificate validity has expired\nThe CRL is expired\n"
Manuel Pégourié-Gonnardb5f48ad2015-04-20 10:38:13 +0100[diff] [blame]385
386X509 Verify Information: two issues, one unknown
Manuel Pégourié-Gonnard95051642015-06-15 10:39:46 +0200[diff] [blame]387x509_verify_info:MBEDTLS_X509_BADCERT_OTHER | 0x80000000:"":"Other reason (can be used by verify callback)\nUnknown reason (this should not happen)\n"
Manuel Pégourié-Gonnardb5f48ad2015-04-20 10:38:13 +0100[diff] [blame]388
389X509 Verify Information: empty, with prefix
390x509_verify_info:0:" ! ":""
391
392X509 Verify Information: one issue, with prefix
Manuel Pégourié-Gonnarde6028c92015-04-20 12:19:02 +0100[diff] [blame]393x509_verify_info:MBEDTLS_X509_BADCERT_MISSING:" ! ":" ! Certificate was missing\n"
Manuel Pégourié-Gonnardb5f48ad2015-04-20 10:38:13 +0100[diff] [blame]394
395X509 Verify Information: two issues, with prefix
Manuel Pégourié-Gonnarde6028c92015-04-20 12:19:02 +0100[diff] [blame]396x509_verify_info:MBEDTLS_X509_BADCERT_EXPIRED | MBEDTLS_X509_BADCRL_EXPIRED:" ! ":" ! The certificate validity has expired\n ! The CRL is expired\n"
Manuel Pégourié-Gonnardb5f48ad2015-04-20 10:38:13 +0100[diff] [blame]397
Paul Bakker37940d9f2009-07-10 22:38:58 +0000[diff] [blame]398X509 Get Distinguished Name #1
palaviva07ecda2016-08-07 11:15:29 +0300[diff] [blame]399depends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_RSA_C:MBEDTLS_SHA1_C
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200[diff] [blame]400mbedtls_x509_dn_gets:"data_files/server1.crt":"subject":"C=NL, O=PolarSSL, CN=PolarSSL Server 1"
Paul Bakker37940d9f2009-07-10 22:38:58 +0000[diff] [blame]401
402X509 Get Distinguished Name #2
palaviva07ecda2016-08-07 11:15:29 +0300[diff] [blame]403depends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_RSA_C:MBEDTLS_SHA1_C
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200[diff] [blame]404mbedtls_x509_dn_gets:"data_files/server1.crt":"issuer":"C=NL, O=PolarSSL, CN=PolarSSL Test CA"
Paul Bakker37940d9f2009-07-10 22:38:58 +0000[diff] [blame]405
406X509 Get Distinguished Name #3
palaviva07ecda2016-08-07 11:15:29 +0300[diff] [blame]407depends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_RSA_C:MBEDTLS_SHA1_C
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200[diff] [blame]408mbedtls_x509_dn_gets:"data_files/server2.crt":"subject":"C=NL, O=PolarSSL, CN=localhost"
Paul Bakker37940d9f2009-07-10 22:38:58 +0000[diff] [blame]409
410X509 Get Distinguished Name #4
palaviva07ecda2016-08-07 11:15:29 +0300[diff] [blame]411depends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_RSA_C:MBEDTLS_SHA1_C
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200[diff] [blame]412mbedtls_x509_dn_gets:"data_files/server2.crt":"issuer":"C=NL, O=PolarSSL, CN=PolarSSL Test CA"
Paul Bakker37940d9f2009-07-10 22:38:58 +0000[diff] [blame]413
Werner Lewis02c9d3b2022-05-20 12:48:46 +0100[diff] [blame]414X509 Get Distinguished Name #5
415depends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_RSA_C:MBEDTLS_SHA1_C
Gilles Peskine17808752022-12-03 23:48:25 +0100[diff] [blame]416mbedtls_x509_dn_gets:"data_files/server1.commas.crt":"subject":"C=NL, O=PolarSSL\\, Commas, CN=PolarSSL Server 1"
Werner Lewis02c9d3b2022-05-20 12:48:46 +0100[diff] [blame]417
Werner Lewis9a2356b2022-06-17 15:51:55 +0100[diff] [blame]418X509 Get Modified DN #1
419depends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_RSA_C:MBEDTLS_SHA1_C
420mbedtls_x509_dn_gets_subject_replace:"data_files/server1.crt":"Modified":"C=NL, O=Modified, CN=PolarSSL Server 1":0
421
422X509 Get Modified DN #2 Name exactly 255 bytes
423depends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_RSA_C:MBEDTLS_SHA1_C
424mbedtls_x509_dn_gets_subject_replace:"data_files/server1.crt":"123456789012345678901234567890123456789012345678901234567890123456789012345678901234567890123456789012345678901234567890123456789012345678901234567890123456789012345678901234567890123456789012345678901234567890123456789012345678901234567890123456789012345":"C=NL, O=123456789012345678901234567890123456789012345678901234567890123456789012345678901234567890123456789012345678901234567890123456789012345678901234567890123456789012345678901234567890123456789012345678901234567890123456789012345678901234567890123456789012345, CN=PolarSSL Server 1":0
425
426X509 Get Modified DN #3 Name exceeds 255 bytes
427depends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_RSA_C:MBEDTLS_SHA1_C
428mbedtls_x509_dn_gets_subject_replace:"data_files/server1.crt":"1234567890123456789012345678901234567890123456789012345678901234567890123456789012345678901234567890123456789012345678901234567890123456789012345678901234567890123456789012345678901234567890123456789012345678901234567890123456789012345678901234567890123456":"":MBEDTLS_ERR_X509_BUFFER_TOO_SMALL
429
430X509 Get Modified DN #4 Name exactly 255 bytes, with comma requiring escaping
431depends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_RSA_C:MBEDTLS_SHA1_C
432mbedtls_x509_dn_gets_subject_replace:"data_files/server1.crt":"1234567890,1234567890123456789012345678901234567890123456789012345678901234567890123456789012345678901234567890123456789012345678901234567890123456789012345678901234567890123456789012345678901234567890123456789012345678901234567890123456789012345678901234":"":MBEDTLS_ERR_X509_BUFFER_TOO_SMALL
433
Werner Lewis1421efa2022-06-27 12:01:22 +0100[diff] [blame]434X509 Get Modified DN #5 Name exactly 255 bytes, ending with comma requiring escaping
435depends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_RSA_C:MBEDTLS_SHA1_C
436mbedtls_x509_dn_gets_subject_replace:"data_files/server1.crt":"12345678901234567890123456789012345678901234567890123456789012345678901234567890123456789012345678901234567890123456789012345678901234567890123456789012345678901234567890123456789012345678901234567890123456789012345678901234567890123456789012345678901234,":"":MBEDTLS_ERR_X509_BUFFER_TOO_SMALL
437
David Horstmann94cbd302022-10-17 17:42:19 +0100[diff] [blame]438# Parse the following valid DN:
439#
440# 31 0B <- Set of
441# 30 09 <- Sequence of
442# 06 03 55 04 06 <- OID 2.5.4.6 countryName (C)
443# 13 02 4E 4C <- PrintableString "NL"
444# 31 11 <- Set of
445# 30 0F <- Sequence of
446# 06 03 55 04 0A <- OID 2.5.4.10 organizationName (O)
447# 0C 08 50 6F 6C 61 72 53 53 4C <- UTF8String "PolarSSL"
448# 31 19 <- Set of
449# 30 17 <- Sequence of
450# 06 03 55 04 03 <- OID 2.5.4.3 commonName (CN)
451# 0C 10 50 6F 6C 61 72 53 53 4C 20 54 65 73 74 20 43 41 <- UTF8String "PolarSSL Test CA"
452#
David Horstmann77ecc6e2022-10-05 13:08:45 +0100[diff] [blame]453X509 Get Name Valid DN
454mbedtls_x509_get_name:"310B3009060355040613024E4C3111300F060355040A0C08506F6C617253534C3119301706035504030C10506F6C617253534C2054657374204341":0
455
David Horstmann94cbd302022-10-17 17:42:19 +0100[diff] [blame]456# Parse the following corrupted DN:
457#
458# 31 0B <- Set of
459# 30 09 <- Sequence of
460# 06 03 55 04 06 <- OID 2.5.4.6 countryName (C)
461# 13 02 4E 4C <- PrintableString "NL"
462# 31 11 <- Set of
463# 30 0F <- Sequence of
464# 06 03 55 04 0A <- OID 2.5.4.10 organizationName (O)
465# 0C 08 50 6F 6C 61 72 53 53 4C <- UTF8String "PolarSSL"
466# 30 19 <- Sequence of (corrupted)
467# 30 17 <- Sequence of
468# 06 03 55 04 03 <- OID 2.5.4.3 commonName (CN)
469# 0C 10 50 6F 6C 61 72 53 53 4C 20 54 65 73 74 20 43 41 <- UTF8String "PolarSSL Test CA"
470#
471# The third 'Set of' is corrupted to instead be a 'Sequence of', causing an
472# error and forcing mbedtls_x509_get_name() to clean up the names it has
473# already allocated.
474#
David Horstmann77ecc6e2022-10-05 13:08:45 +0100[diff] [blame]475X509 Get Name Corrupted DN Mem Leak
476mbedtls_x509_get_name:"310B3009060355040613024E4C3111300F060355040A0C08506F6C617253534C3019301706035504030C10506F6C617253534C2054657374204341":MBEDTLS_ERR_X509_INVALID_NAME + MBEDTLS_ERR_ASN1_UNEXPECTED_TAG
477
Paul Bakker37940d9f2009-07-10 22:38:58 +0000[diff] [blame]478X509 Time Expired #1
palaviva07ecda2016-08-07 11:15:29 +0300[diff] [blame]479depends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_RSA_C:MBEDTLS_HAVE_TIME_DATE:MBEDTLS_SHA1_C
Manuel Pégourié-Gonnardc730ed32015-06-02 10:38:50 +0100[diff] [blame]480mbedtls_x509_time_is_past:"data_files/server1.crt":"valid_from":1
Paul Bakker37940d9f2009-07-10 22:38:58 +0000[diff] [blame]481
482X509 Time Expired #2
palaviva07ecda2016-08-07 11:15:29 +0300[diff] [blame]483depends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_RSA_C:MBEDTLS_HAVE_TIME_DATE:MBEDTLS_SHA1_C
Manuel Pégourié-Gonnardc730ed32015-06-02 10:38:50 +0100[diff] [blame]484mbedtls_x509_time_is_past:"data_files/server1.crt":"valid_to":0
Paul Bakker37940d9f2009-07-10 22:38:58 +0000[diff] [blame]485
486X509 Time Expired #3
palaviva07ecda2016-08-07 11:15:29 +0300[diff] [blame]487depends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_RSA_C:MBEDTLS_HAVE_TIME_DATE:MBEDTLS_SHA1_C
Manuel Pégourié-Gonnardc730ed32015-06-02 10:38:50 +0100[diff] [blame]488mbedtls_x509_time_is_past:"data_files/server2.crt":"valid_from":1
Paul Bakker37940d9f2009-07-10 22:38:58 +0000[diff] [blame]489
490X509 Time Expired #4
palaviva07ecda2016-08-07 11:15:29 +0300[diff] [blame]491depends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_RSA_C:MBEDTLS_HAVE_TIME_DATE:MBEDTLS_SHA1_C
Manuel Pégourié-Gonnardc730ed32015-06-02 10:38:50 +0100[diff] [blame]492mbedtls_x509_time_is_past:"data_files/server2.crt":"valid_to":0
Paul Bakker37940d9f2009-07-10 22:38:58 +0000[diff] [blame]493
494X509 Time Expired #5
palaviva07ecda2016-08-07 11:15:29 +0300[diff] [blame]495depends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_RSA_C:MBEDTLS_HAVE_TIME_DATE:MBEDTLS_SHA1_C
Manuel Pégourié-Gonnardc730ed32015-06-02 10:38:50 +0100[diff] [blame]496mbedtls_x509_time_is_past:"data_files/test-ca.crt":"valid_from":1
Paul Bakker37940d9f2009-07-10 22:38:58 +0000[diff] [blame]497
Manuel Pégourié-Gonnarde7f64a82013-08-09 10:59:25 +0200[diff] [blame]498X509 Time Expired #6
palaviva07ecda2016-08-07 11:15:29 +0300[diff] [blame]499depends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_RSA_C:MBEDTLS_HAVE_TIME_DATE:MBEDTLS_SHA1_C
Manuel Pégourié-Gonnardc730ed32015-06-02 10:38:50 +0100[diff] [blame]500mbedtls_x509_time_is_past:"data_files/test-ca.crt":"valid_to":0
Paul Bakker37940d9f2009-07-10 22:38:58 +0000[diff] [blame]501
Manuel Pégourié-Gonnard6304f782014-03-10 12:26:11 +0100[diff] [blame]502X509 Time Future #1
Manuel Pégourié-Gonnard43be6cd2017-06-20 09:53:42 +0200[diff] [blame]503depends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_ECDSA_C:MBEDTLS_ECP_DP_SECP256R1_ENABLED:MBEDTLS_HAVE_TIME_DATE:MBEDTLS_SHA256_C
Manuel Pégourié-Gonnardc730ed32015-06-02 10:38:50 +0100[diff] [blame]504mbedtls_x509_time_is_future:"data_files/server5.crt":"valid_from":0
Manuel Pégourié-Gonnard6304f782014-03-10 12:26:11 +0100[diff] [blame]505
506X509 Time Future #2
Manuel Pégourié-Gonnard43be6cd2017-06-20 09:53:42 +0200[diff] [blame]507depends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_ECDSA_C:MBEDTLS_ECP_DP_SECP256R1_ENABLED:MBEDTLS_HAVE_TIME_DATE:MBEDTLS_SHA256_C
Manuel Pégourié-Gonnardc730ed32015-06-02 10:38:50 +0100[diff] [blame]508mbedtls_x509_time_is_future:"data_files/server5.crt":"valid_to":1
Manuel Pégourié-Gonnard6304f782014-03-10 12:26:11 +0100[diff] [blame]509
510X509 Time Future #3
Manuel Pégourié-Gonnard43be6cd2017-06-20 09:53:42 +0200[diff] [blame]511depends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_ECDSA_C:MBEDTLS_ECP_DP_SECP256R1_ENABLED:MBEDTLS_HAVE_TIME_DATE:MBEDTLS_SHA256_C
Manuel Pégourié-Gonnardc730ed32015-06-02 10:38:50 +0100[diff] [blame]512mbedtls_x509_time_is_future:"data_files/server5-future.crt":"valid_from":1
Manuel Pégourié-Gonnard6304f782014-03-10 12:26:11 +0100[diff] [blame]513
514X509 Time Future #4
Manuel Pégourié-Gonnard43be6cd2017-06-20 09:53:42 +0200[diff] [blame]515depends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_ECDSA_C:MBEDTLS_ECP_DP_SECP256R1_ENABLED:MBEDTLS_HAVE_TIME_DATE:MBEDTLS_SHA256_C
Manuel Pégourié-Gonnardc730ed32015-06-02 10:38:50 +0100[diff] [blame]516mbedtls_x509_time_is_future:"data_files/server5-future.crt":"valid_to":1
Manuel Pégourié-Gonnard6304f782014-03-10 12:26:11 +0100[diff] [blame]517
518X509 Time Future #5
Manuel Pégourié-Gonnard43be6cd2017-06-20 09:53:42 +0200[diff] [blame]519depends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_ECDSA_C:MBEDTLS_ECP_DP_SECP384R1_ENABLED:MBEDTLS_HAVE_TIME_DATE:MBEDTLS_SHA256_C
Manuel Pégourié-Gonnardc730ed32015-06-02 10:38:50 +0100[diff] [blame]520mbedtls_x509_time_is_future:"data_files/test-ca2.crt":"valid_from":0
Manuel Pégourié-Gonnard6304f782014-03-10 12:26:11 +0100[diff] [blame]521
522X509 Time Future #6
Manuel Pégourié-Gonnard43be6cd2017-06-20 09:53:42 +0200[diff] [blame]523depends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_ECDSA_C:MBEDTLS_ECP_DP_SECP384R1_ENABLED:MBEDTLS_HAVE_TIME_DATE:MBEDTLS_SHA256_C
Manuel Pégourié-Gonnardc730ed32015-06-02 10:38:50 +0100[diff] [blame]524mbedtls_x509_time_is_future:"data_files/test-ca2.crt":"valid_to":1
Manuel Pégourié-Gonnard6304f782014-03-10 12:26:11 +0100[diff] [blame]525
Hanno Becker2389d162019-02-14 12:52:47 +0000[diff] [blame]526X509 CRT verification #1 (Revoked Cert, Expired CRL, no CN)
Deomid Ryabkovde420a42016-11-27 14:50:06 +0000[diff] [blame]527depends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_SHA1_C:MBEDTLS_RSA_C:MBEDTLS_PKCS1_V15:MBEDTLS_HAVE_TIME_DATE
Gilles Peskineef86ab22017-05-05 18:59:02 +0200[diff] [blame]528x509_verify:"data_files/server1.crt":"data_files/test-ca.crt":"data_files/crl_expired.pem":"NULL":MBEDTLS_ERR_X509_CERT_VERIFY_FAILED:MBEDTLS_X509_BADCERT_REVOKED | MBEDTLS_X509_BADCRL_EXPIRED:"compat":"NULL"
Paul Bakker37940d9f2009-07-10 22:38:58 +0000[diff] [blame]529
Hanno Becker2389d162019-02-14 12:52:47 +0000[diff] [blame]530X509 CRT verification #1a (Revoked Cert, Future CRL, no CN)
Deomid Ryabkovde420a42016-11-27 14:50:06 +0000[diff] [blame]531depends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_SHA256_C:MBEDTLS_ECDSA_C:MBEDTLS_ECP_DP_SECP256R1_ENABLED:MBEDTLS_ECP_DP_SECP384R1_ENABLED:MBEDTLS_SHA1_C:MBEDTLS_HAVE_TIME_DATE
Gilles Peskineef86ab22017-05-05 18:59:02 +0200[diff] [blame]532x509_verify:"data_files/server6.crt":"data_files/test-ca2.crt":"data_files/crl-future.pem":"NULL":MBEDTLS_ERR_X509_CERT_VERIFY_FAILED:MBEDTLS_X509_BADCERT_REVOKED | MBEDTLS_X509_BADCRL_FUTURE:"compat":"NULL"
Manuel Pégourié-Gonnard95337652014-03-10 13:15:18 +0100[diff] [blame]533
Hanno Becker2389d162019-02-14 12:52:47 +0000[diff] [blame]534X509 CRT verification #2 (Revoked Cert, Expired CRL)
Deomid Ryabkovde420a42016-11-27 14:50:06 +0000[diff] [blame]535depends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_SHA1_C:MBEDTLS_RSA_C:MBEDTLS_PKCS1_V15:MBEDTLS_HAVE_TIME_DATE
Gilles Peskineef86ab22017-05-05 18:59:02 +0200[diff] [blame]536x509_verify:"data_files/server1.crt":"data_files/test-ca.crt":"data_files/crl_expired.pem":"PolarSSL Server 1":MBEDTLS_ERR_X509_CERT_VERIFY_FAILED:MBEDTLS_X509_BADCERT_REVOKED | MBEDTLS_X509_BADCRL_EXPIRED:"compat":"NULL"
Paul Bakker37940d9f2009-07-10 22:38:58 +0000[diff] [blame]537
Hanno Becker2389d162019-02-14 12:52:47 +0000[diff] [blame]538X509 CRT verification #2a (Revoked Cert, Future CRL)
Deomid Ryabkovde420a42016-11-27 14:50:06 +0000[diff] [blame]539depends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_SHA256_C:MBEDTLS_ECDSA_C:MBEDTLS_ECP_DP_SECP256R1_ENABLED:MBEDTLS_ECP_DP_SECP384R1_ENABLED:MBEDTLS_SHA1_C:MBEDTLS_HAVE_TIME_DATE
Gilles Peskineef86ab22017-05-05 18:59:02 +0200[diff] [blame]540x509_verify:"data_files/server6.crt":"data_files/test-ca2.crt":"data_files/crl-future.pem":"localhost":MBEDTLS_ERR_X509_CERT_VERIFY_FAILED:MBEDTLS_X509_BADCERT_REVOKED | MBEDTLS_X509_BADCRL_FUTURE:"compat":"NULL"
Manuel Pégourié-Gonnard95337652014-03-10 13:15:18 +0100[diff] [blame]541
Hanno Becker2389d162019-02-14 12:52:47 +0000[diff] [blame]542X509 CRT verification #3 (Revoked Cert, Future CRL, CN Mismatch)
Deomid Ryabkovde420a42016-11-27 14:50:06 +0000[diff] [blame]543depends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_SHA1_C:MBEDTLS_RSA_C:MBEDTLS_PKCS1_V15:MBEDTLS_HAVE_TIME_DATE
Gilles Peskineef86ab22017-05-05 18:59:02 +0200[diff] [blame]544x509_verify:"data_files/server1.crt":"data_files/test-ca.crt":"data_files/crl_expired.pem":"PolarSSL Wrong CN":MBEDTLS_ERR_X509_CERT_VERIFY_FAILED:MBEDTLS_X509_BADCERT_REVOKED | MBEDTLS_X509_BADCRL_EXPIRED | MBEDTLS_X509_BADCERT_CN_MISMATCH:"compat":"NULL"
Paul Bakker37940d9f2009-07-10 22:38:58 +0000[diff] [blame]545
Hanno Becker2389d162019-02-14 12:52:47 +0000[diff] [blame]546X509 CRT verification #3a (Revoked Cert, Expired CRL, CN Mismatch)
Deomid Ryabkovde420a42016-11-27 14:50:06 +0000[diff] [blame]547depends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_SHA256_C:MBEDTLS_ECDSA_C:MBEDTLS_ECP_DP_SECP256R1_ENABLED:MBEDTLS_ECP_DP_SECP384R1_ENABLED:MBEDTLS_SHA1_C:MBEDTLS_HAVE_TIME_DATE
Gilles Peskineef86ab22017-05-05 18:59:02 +0200[diff] [blame]548x509_verify:"data_files/server6.crt":"data_files/test-ca2.crt":"data_files/crl-future.pem":"Wrong CN":MBEDTLS_ERR_X509_CERT_VERIFY_FAILED:MBEDTLS_X509_BADCERT_REVOKED | MBEDTLS_X509_BADCRL_FUTURE | MBEDTLS_X509_BADCERT_CN_MISMATCH:"compat":"NULL"
Manuel Pégourié-Gonnard95337652014-03-10 13:15:18 +0100[diff] [blame]549
Hanno Becker2389d162019-02-14 12:52:47 +0000[diff] [blame]550X509 CRT verification #4 (Valid Cert, Expired CRL)
Deomid Ryabkovde420a42016-11-27 14:50:06 +0000[diff] [blame]551depends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_SHA1_C:MBEDTLS_RSA_C:MBEDTLS_PKCS1_V15:MBEDTLS_HAVE_TIME_DATE
Gilles Peskineef86ab22017-05-05 18:59:02 +0200[diff] [blame]552x509_verify:"data_files/server2.crt":"data_files/test-ca.crt":"data_files/crl_expired.pem":"NULL":MBEDTLS_ERR_X509_CERT_VERIFY_FAILED:MBEDTLS_X509_BADCRL_EXPIRED:"compat":"NULL"
Paul Bakker37940d9f2009-07-10 22:38:58 +0000[diff] [blame]553
Hanno Becker2389d162019-02-14 12:52:47 +0000[diff] [blame]554X509 CRT verification #4a (Revoked Cert, Future CRL)
Deomid Ryabkovde420a42016-11-27 14:50:06 +0000[diff] [blame]555depends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_SHA256_C:MBEDTLS_ECDSA_C:MBEDTLS_ECP_DP_SECP256R1_ENABLED:MBEDTLS_ECP_DP_SECP384R1_ENABLED:MBEDTLS_SHA1_C:MBEDTLS_HAVE_TIME_DATE
Gilles Peskineef86ab22017-05-05 18:59:02 +0200[diff] [blame]556x509_verify:"data_files/server5.crt":"data_files/test-ca2.crt":"data_files/crl-future.pem":"NULL":MBEDTLS_ERR_X509_CERT_VERIFY_FAILED:MBEDTLS_X509_BADCRL_FUTURE:"compat":"NULL"
Manuel Pégourié-Gonnard95337652014-03-10 13:15:18 +0100[diff] [blame]557
Hanno Becker2389d162019-02-14 12:52:47 +0000[diff] [blame]558X509 CRT verification #5 (Revoked Cert)
Deomid Ryabkovde420a42016-11-27 14:50:06 +0000[diff] [blame]559depends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_SHA1_C:MBEDTLS_RSA_C:MBEDTLS_PKCS1_V15:MBEDTLS_HAVE_TIME_DATE
Gilles Peskineef86ab22017-05-05 18:59:02 +0200[diff] [blame]560x509_verify:"data_files/server1.crt":"data_files/test-ca.crt":"data_files/crl.pem":"NULL":MBEDTLS_ERR_X509_CERT_VERIFY_FAILED:MBEDTLS_X509_BADCERT_REVOKED:"compat":"NULL"
Paul Bakker4d6b31a2009-07-12 11:11:06 +0000[diff] [blame]561
Hanno Becker2389d162019-02-14 12:52:47 +0000[diff] [blame]562X509 CRT verification #5' (Revoked Cert, differing DN string formats #1)
Hanno Becker52acdb52018-11-02 10:09:48 +0000[diff] [blame]563depends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_SHA1_C:MBEDTLS_RSA_C:MBEDTLS_PKCS1_V15:MBEDTLS_HAVE_TIME_DATE
564x509_verify:"data_files/server1.crt":"data_files/test-ca_utf8.crt":"data_files/crl.pem":"NULL":MBEDTLS_ERR_X509_CERT_VERIFY_FAILED:MBEDTLS_X509_BADCERT_REVOKED:"compat":"NULL"
565
Hanno Becker2389d162019-02-14 12:52:47 +0000[diff] [blame]566X509 CRT verification #5'' (Revoked Cert, differing DN string formats #2)
Hanno Becker52acdb52018-11-02 10:09:48 +0000[diff] [blame]567depends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_SHA1_C:MBEDTLS_RSA_C:MBEDTLS_PKCS1_V15:MBEDTLS_HAVE_TIME_DATE
568x509_verify:"data_files/server1.crt":"data_files/test-ca_printable.crt":"data_files/crl.pem":"NULL":MBEDTLS_ERR_X509_CERT_VERIFY_FAILED:MBEDTLS_X509_BADCERT_REVOKED:"compat":"NULL"
569
Hanno Becker2389d162019-02-14 12:52:47 +0000[diff] [blame]570X509 CRT verification #5''' (Revoked Cert, differing upper and lower case)
Hanno Becker52acdb52018-11-02 10:09:48 +0000[diff] [blame]571depends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_SHA1_C:MBEDTLS_RSA_C:MBEDTLS_PKCS1_V15:MBEDTLS_HAVE_TIME_DATE
572x509_verify:"data_files/server1.crt":"data_files/test-ca_uppercase.crt":"data_files/crl.pem":"NULL":MBEDTLS_ERR_X509_CERT_VERIFY_FAILED:MBEDTLS_X509_BADCERT_REVOKED:"compat":"NULL"
573
Hanno Becker2389d162019-02-14 12:52:47 +0000[diff] [blame]574X509 CRT verification #6 (Revoked Cert)
Deomid Ryabkovde420a42016-11-27 14:50:06 +0000[diff] [blame]575depends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_SHA1_C:MBEDTLS_RSA_C:MBEDTLS_PKCS1_V15:MBEDTLS_HAVE_TIME_DATE
Gilles Peskineef86ab22017-05-05 18:59:02 +0200[diff] [blame]576x509_verify:"data_files/server1.crt":"data_files/test-ca.crt":"data_files/crl.pem":"PolarSSL Server 1":MBEDTLS_ERR_X509_CERT_VERIFY_FAILED:MBEDTLS_X509_BADCERT_REVOKED:"compat":"NULL"
Paul Bakker4d6b31a2009-07-12 11:11:06 +0000[diff] [blame]577
Hanno Becker2389d162019-02-14 12:52:47 +0000[diff] [blame]578X509 CRT verification #7 (Revoked Cert, CN Mismatch)
Deomid Ryabkovde420a42016-11-27 14:50:06 +0000[diff] [blame]579depends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_SHA1_C:MBEDTLS_RSA_C:MBEDTLS_PKCS1_V15:MBEDTLS_HAVE_TIME_DATE
Gilles Peskineef86ab22017-05-05 18:59:02 +0200[diff] [blame]580x509_verify:"data_files/server1.crt":"data_files/test-ca.crt":"data_files/crl.pem":"PolarSSL Wrong CN":MBEDTLS_ERR_X509_CERT_VERIFY_FAILED:MBEDTLS_X509_BADCERT_REVOKED | MBEDTLS_X509_BADCERT_CN_MISMATCH:"compat":"NULL"
Paul Bakker4d6b31a2009-07-12 11:11:06 +0000[diff] [blame]581
Hanno Becker2389d162019-02-14 12:52:47 +0000[diff] [blame]582X509 CRT verification #8 (Valid Cert)
Manuel Pégourié-Gonnard43be6cd2017-06-20 09:53:42 +0200[diff] [blame]583depends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_SHA256_C:MBEDTLS_ECDSA_C:MBEDTLS_ECP_DP_SECP256R1_ENABLED:MBEDTLS_ECP_DP_SECP384R1_ENABLED:MBEDTLS_SHA1_C
Gilles Peskineef86ab22017-05-05 18:59:02 +0200[diff] [blame]584x509_verify:"data_files/server5.crt":"data_files/test-ca2.crt":"data_files/crl-ec-sha1.pem":"NULL":0:0:"compat":"NULL"
Manuel Pégourié-Gonnard95337652014-03-10 13:15:18 +0100[diff] [blame]585
Hanno Becker2389d162019-02-14 12:52:47 +0000[diff] [blame]586X509 CRT verification #8a (Expired Cert)
Deomid Ryabkovde420a42016-11-27 14:50:06 +0000[diff] [blame]587depends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_SHA256_C:MBEDTLS_ECDSA_C:MBEDTLS_ECP_DP_SECP256R1_ENABLED:MBEDTLS_ECP_DP_SECP384R1_ENABLED:MBEDTLS_SHA1_C:MBEDTLS_HAVE_TIME_DATE
Gilles Peskineef86ab22017-05-05 18:59:02 +0200[diff] [blame]588x509_verify:"data_files/server5-expired.crt":"data_files/test-ca2.crt":"data_files/crl-ec-sha1.pem":"NULL":MBEDTLS_ERR_X509_CERT_VERIFY_FAILED:MBEDTLS_X509_BADCERT_EXPIRED:"compat":"NULL"
Manuel Pégourié-Gonnard95337652014-03-10 13:15:18 +0100[diff] [blame]589
Hanno Becker2389d162019-02-14 12:52:47 +0000[diff] [blame]590X509 CRT verification #8b (Future Cert)
Deomid Ryabkovde420a42016-11-27 14:50:06 +0000[diff] [blame]591depends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_SHA256_C:MBEDTLS_ECDSA_C:MBEDTLS_ECP_DP_SECP256R1_ENABLED:MBEDTLS_ECP_DP_SECP384R1_ENABLED:MBEDTLS_SHA1_C:MBEDTLS_HAVE_TIME_DATE
Gilles Peskineef86ab22017-05-05 18:59:02 +0200[diff] [blame]592x509_verify:"data_files/server5-future.crt":"data_files/test-ca2.crt":"data_files/crl-ec-sha1.pem":"NULL":MBEDTLS_ERR_X509_CERT_VERIFY_FAILED:MBEDTLS_X509_BADCERT_FUTURE:"compat":"NULL"
Paul Bakker4d6b31a2009-07-12 11:11:06 +0000[diff] [blame]593
Hanno Becker2389d162019-02-14 12:52:47 +0000[diff] [blame]594X509 CRT verification #8c (Expired Cert, longer chain)
Deomid Ryabkovde420a42016-11-27 14:50:06 +0000[diff] [blame]595depends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_SHA256_C:MBEDTLS_ECDSA_C:MBEDTLS_ECP_DP_SECP256R1_ENABLED:MBEDTLS_ECP_DP_SECP384R1_ENABLED:MBEDTLS_SHA1_C:MBEDTLS_RSA_C:MBEDTLS_PKCS1_V15:MBEDTLS_HAVE_TIME_DATE
Manuel Pégourié-Gonnard29d60fb2017-06-05 10:20:32 +0200[diff] [blame]596x509_verify:"data_files/server7-expired.crt":"data_files/test-ca2.crt":"data_files/crl-ec-sha1.pem":"NULL":MBEDTLS_ERR_X509_CERT_VERIFY_FAILED:MBEDTLS_X509_BADCERT_EXPIRED:"compat":"NULL"
597
Hanno Becker2389d162019-02-14 12:52:47 +0000[diff] [blame]598X509 CRT verification #8d (Future Cert, longer chain)
Deomid Ryabkovde420a42016-11-27 14:50:06 +0000[diff] [blame]599depends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_SHA256_C:MBEDTLS_ECDSA_C:MBEDTLS_ECP_DP_SECP256R1_ENABLED:MBEDTLS_ECP_DP_SECP384R1_ENABLED:MBEDTLS_SHA1_C:MBEDTLS_RSA_C:MBEDTLS_PKCS1_V15:MBEDTLS_HAVE_TIME_DATE
Manuel Pégourié-Gonnard29d60fb2017-06-05 10:20:32 +0200[diff] [blame]600x509_verify:"data_files/server7-future.crt":"data_files/test-ca2.crt":"data_files/crl-ec-sha1.pem":"NULL":MBEDTLS_ERR_X509_CERT_VERIFY_FAILED:MBEDTLS_X509_BADCERT_FUTURE:"compat":"NULL"
601
Hanno Becker2389d162019-02-14 12:52:47 +0000[diff] [blame]602X509 CRT verification #9 (Not trusted Cert)
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200[diff] [blame]603depends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_SHA1_C:MBEDTLS_RSA_C:MBEDTLS_PKCS1_V15
Gilles Peskineef86ab22017-05-05 18:59:02 +0200[diff] [blame]604x509_verify:"data_files/server2.crt":"data_files/server1.crt":"data_files/crl.pem":"NULL":MBEDTLS_ERR_X509_CERT_VERIFY_FAILED:MBEDTLS_X509_BADCERT_NOT_TRUSTED:"compat":"NULL"
Paul Bakker4d6b31a2009-07-12 11:11:06 +0000[diff] [blame]605
Hanno Becker2389d162019-02-14 12:52:47 +0000[diff] [blame]606X509 CRT verification #10 (Not trusted Cert, Expired CRL)
palaviva07ecda2016-08-07 11:15:29 +0300[diff] [blame]607depends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_RSA_C:MBEDTLS_PKCS1_V15:MBEDTLS_SHA1_C
Gilles Peskineef86ab22017-05-05 18:59:02 +0200[diff] [blame]608x509_verify:"data_files/server2.crt":"data_files/server1.crt":"data_files/crl_expired.pem":"NULL":MBEDTLS_ERR_X509_CERT_VERIFY_FAILED:MBEDTLS_X509_BADCERT_NOT_TRUSTED:"compat":"NULL"
Paul Bakker37940d9f2009-07-10 22:38:58 +0000[diff] [blame]609
Hanno Becker2389d162019-02-14 12:52:47 +0000[diff] [blame]610X509 CRT verification #12 (Valid Cert MD2 Digest, MD2 forbidden)
Hanno Becker7b8abee2019-06-03 14:25:18 +0100[diff] [blame]611depends_on:MBEDTLS_MD2_C:MBEDTLS_PEM_PARSE_C:MBEDTLS_SHA1_C:MBEDTLS_RSA_C:MBEDTLS_PKCS1_V15
612x509_verify:"data_files/cert_md2.crt":"data_files/test-ca.crt":"data_files/crl.pem":"NULL":MBEDTLS_ERR_X509_CERT_VERIFY_FAILED:MBEDTLS_X509_BADCERT_BAD_MD:"compat":"NULL"
613
Hanno Becker2389d162019-02-14 12:52:47 +0000[diff] [blame]614X509 CRT verification #12 (Valid Cert MD4 Digest, MD4 forbidden)
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200[diff] [blame]615depends_on:MBEDTLS_MD4_C:MBEDTLS_PEM_PARSE_C:MBEDTLS_SHA1_C:MBEDTLS_RSA_C:MBEDTLS_PKCS1_V15
Gilles Peskineef86ab22017-05-05 18:59:02 +0200[diff] [blame]616x509_verify:"data_files/cert_md4.crt":"data_files/test-ca.crt":"data_files/crl.pem":"NULL":MBEDTLS_ERR_X509_CERT_VERIFY_FAILED:MBEDTLS_X509_BADCERT_BAD_MD:"compat":"NULL"
Paul Bakker4d6b31a2009-07-12 11:11:06 +0000[diff] [blame]617
Hanno Becker2389d162019-02-14 12:52:47 +0000[diff] [blame]618X509 CRT verification #13 (Valid Cert MD5 Digest, MD5 forbidden)
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200[diff] [blame]619depends_on:MBEDTLS_MD5_C:MBEDTLS_PEM_PARSE_C:MBEDTLS_SHA1_C:MBEDTLS_RSA_C:MBEDTLS_PKCS1_V15
Gilles Peskineef86ab22017-05-05 18:59:02 +0200[diff] [blame]620x509_verify:"data_files/cert_md5.crt":"data_files/test-ca.crt":"data_files/crl.pem":"NULL":MBEDTLS_ERR_X509_CERT_VERIFY_FAILED:MBEDTLS_X509_BADCERT_BAD_MD:"compat":"NULL"
Paul Bakker4d6b31a2009-07-12 11:11:06 +0000[diff] [blame]621
Hanno Becker2389d162019-02-14 12:52:47 +0000[diff] [blame]622X509 CRT verification #12 (Valid Cert MD2 Digest, MD2 allowed)
Hanno Becker20a4ade2019-06-03 14:27:03 +0100[diff] [blame]623depends_on:MBEDTLS_MD2_C:MBEDTLS_PEM_PARSE_C:MBEDTLS_SHA1_C:MBEDTLS_RSA_C:MBEDTLS_PKCS1_V15
624x509_verify:"data_files/cert_md2.crt":"data_files/test-ca.crt":"data_files/crl.pem":"NULL":0:0:"all":"NULL"
625
Hanno Becker2389d162019-02-14 12:52:47 +0000[diff] [blame]626X509 CRT verification #12 (Valid Cert MD4 Digest, MD4 allowed)
Hanno Becker20a4ade2019-06-03 14:27:03 +0100[diff] [blame]627depends_on:MBEDTLS_MD4_C:MBEDTLS_PEM_PARSE_C:MBEDTLS_SHA1_C:MBEDTLS_RSA_C:MBEDTLS_PKCS1_V15
628x509_verify:"data_files/cert_md4.crt":"data_files/test-ca.crt":"data_files/crl.pem":"NULL":0:0:"all":"NULL"
629
Hanno Becker2389d162019-02-14 12:52:47 +0000[diff] [blame]630X509 CRT verification #13 (Valid Cert MD5 Digest, MD5 allowed)
Hanno Becker20a4ade2019-06-03 14:27:03 +0100[diff] [blame]631depends_on:MBEDTLS_MD5_C:MBEDTLS_PEM_PARSE_C:MBEDTLS_SHA1_C:MBEDTLS_RSA_C:MBEDTLS_PKCS1_V15
632x509_verify:"data_files/cert_md5.crt":"data_files/test-ca.crt":"data_files/crl.pem":"NULL":0:0:"all":"NULL"
633
Hanno Becker2389d162019-02-14 12:52:47 +0000[diff] [blame]634X509 CRT verification #14 (Valid Cert SHA1 Digest explicitly allowed in profile)
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200[diff] [blame]635depends_on:MBEDTLS_SHA1_C:MBEDTLS_PEM_PARSE_C:MBEDTLS_SHA1_C:MBEDTLS_RSA_C:MBEDTLS_PKCS1_V15
Gilles Peskineef86ab22017-05-05 18:59:02 +0200[diff] [blame]636x509_verify:"data_files/cert_sha1.crt":"data_files/test-ca.crt":"data_files/crl.pem":"NULL":0:0:"compat":"NULL"
Paul Bakker4d6b31a2009-07-12 11:11:06 +0000[diff] [blame]637
Hanno Becker2389d162019-02-14 12:52:47 +0000[diff] [blame]638X509 CRT verification #14 (Valid Cert SHA1 Digest forbidden in default profile)
Mateusz Starzykb3d344c2021-08-27 14:34:22 +0200[diff] [blame]639depends_on:MBEDTLS_SHA1_C:MBEDTLS_PEM_PARSE_C:MBEDTLS_SHA1_C:MBEDTLS_RSA_C:MBEDTLS_PKCS1_V15
Manuel Pégourié-Gonnarda54f6cc2017-08-09 10:41:42 +0200[diff] [blame]640x509_verify:"data_files/cert_sha1.crt":"data_files/test-ca.crt":"data_files/crl.pem":"NULL":MBEDTLS_ERR_X509_CERT_VERIFY_FAILED:MBEDTLS_X509_BADCRL_BAD_MD | MBEDTLS_X509_BADCERT_BAD_MD:"":"NULL"
Gilles Peskine2dc81a02017-05-05 19:00:39 +0200[diff] [blame]641
Hanno Becker2389d162019-02-14 12:52:47 +0000[diff] [blame]642X509 CRT verification #15 (Valid Cert SHA224 Digest)
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200[diff] [blame]643depends_on:MBEDTLS_SHA256_C:MBEDTLS_PEM_PARSE_C:MBEDTLS_SHA1_C:MBEDTLS_RSA_C:MBEDTLS_PKCS1_V15
Gilles Peskineef86ab22017-05-05 18:59:02 +0200[diff] [blame]644x509_verify:"data_files/cert_sha224.crt":"data_files/test-ca.crt":"data_files/crl.pem":"NULL":0:0:"compat":"NULL"
Paul Bakker4d6b31a2009-07-12 11:11:06 +0000[diff] [blame]645
Hanno Becker2389d162019-02-14 12:52:47 +0000[diff] [blame]646X509 CRT verification #16 (Valid Cert SHA256 Digest)
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200[diff] [blame]647depends_on:MBEDTLS_SHA256_C:MBEDTLS_PEM_PARSE_C:MBEDTLS_SHA1_C:MBEDTLS_RSA_C:MBEDTLS_PKCS1_V15
Gilles Peskineef86ab22017-05-05 18:59:02 +0200[diff] [blame]648x509_verify:"data_files/cert_sha256.crt":"data_files/test-ca.crt":"data_files/crl.pem":"NULL":0:0:"compat":"NULL"
Paul Bakker4d6b31a2009-07-12 11:11:06 +0000[diff] [blame]649
Hanno Becker2389d162019-02-14 12:52:47 +0000[diff] [blame]650X509 CRT verification #17 (Valid Cert SHA384 Digest)
Gilles Peskine049feff2020-03-09 20:52:19 +0100[diff] [blame]651depends_on:MBEDTLS_SHA512_C:!MBEDTLS_SHA512_NO_SHA384:MBEDTLS_PEM_PARSE_C:MBEDTLS_SHA1_C:MBEDTLS_RSA_C:MBEDTLS_PKCS1_V15
Gilles Peskineef86ab22017-05-05 18:59:02 +0200[diff] [blame]652x509_verify:"data_files/cert_sha384.crt":"data_files/test-ca.crt":"data_files/crl.pem":"NULL":0:0:"compat":"NULL"
Paul Bakker4d6b31a2009-07-12 11:11:06 +0000[diff] [blame]653
Hanno Becker2389d162019-02-14 12:52:47 +0000[diff] [blame]654X509 CRT verification #18 (Valid Cert SHA512 Digest)
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200[diff] [blame]655depends_on:MBEDTLS_SHA512_C:MBEDTLS_PEM_PARSE_C:MBEDTLS_SHA1_C:MBEDTLS_RSA_C:MBEDTLS_PKCS1_V15
Gilles Peskineef86ab22017-05-05 18:59:02 +0200[diff] [blame]656x509_verify:"data_files/cert_sha512.crt":"data_files/test-ca.crt":"data_files/crl.pem":"NULL":0:0:"compat":"NULL"
Paul Bakkerb63b0af2011-01-13 17:54:59 +0000[diff] [blame]657
Hanno Becker2389d162019-02-14 12:52:47 +0000[diff] [blame]658X509 CRT verification #19 (Valid Cert, denying callback)
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200[diff] [blame]659depends_on:MBEDTLS_SHA512_C:MBEDTLS_PEM_PARSE_C:MBEDTLS_SHA1_C:MBEDTLS_RSA_C:MBEDTLS_PKCS1_V15
Gilles Peskineef86ab22017-05-05 18:59:02 +0200[diff] [blame]660x509_verify:"data_files/cert_sha512.crt":"data_files/test-ca.crt":"data_files/crl.pem":"NULL":MBEDTLS_ERR_X509_CERT_VERIFY_FAILED:MBEDTLS_X509_BADCERT_OTHER:"compat":"verify_none"
Paul Bakkerb63b0af2011-01-13 17:54:59 +0000[diff] [blame]661
Hanno Becker2389d162019-02-14 12:52:47 +0000[diff] [blame]662X509 CRT verification #19 (Not trusted Cert, allowing callback)
palaviva07ecda2016-08-07 11:15:29 +0300[diff] [blame]663depends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_RSA_C:MBEDTLS_PKCS1_V15:MBEDTLS_SHA1_C
Gilles Peskineef86ab22017-05-05 18:59:02 +0200[diff] [blame]664x509_verify:"data_files/server2.crt":"data_files/server1.crt":"data_files/crl_expired.pem":"NULL":0:0:"compat":"verify_all"
Paul Bakker4d6b31a2009-07-12 11:11:06 +0000[diff] [blame]665
Hanno Becker2389d162019-02-14 12:52:47 +0000[diff] [blame]666X509 CRT verification #21 (domain matching wildcard certificate, case insensitive)
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200[diff] [blame]667depends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_SHA1_C:MBEDTLS_RSA_C:MBEDTLS_PKCS1_V15
Gilles Peskineef86ab22017-05-05 18:59:02 +0200[diff] [blame]668x509_verify:"data_files/cert_example_wildcard.crt":"data_files/test-ca.crt":"data_files/crl.pem":"mail.ExAmPlE.com":0:0:"compat":"NULL"
Paul Bakkera8cd2392012-02-11 16:09:32 +0000[diff] [blame]669
Hanno Becker2389d162019-02-14 12:52:47 +0000[diff] [blame]670X509 CRT verification #22 (domain not matching wildcard certificate)
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200[diff] [blame]671depends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_SHA1_C:MBEDTLS_RSA_C:MBEDTLS_PKCS1_V15
Gilles Peskineef86ab22017-05-05 18:59:02 +0200[diff] [blame]672x509_verify:"data_files/cert_example_wildcard.crt":"data_files/test-ca.crt":"data_files/crl.pem":"mail.example.net":MBEDTLS_ERR_X509_CERT_VERIFY_FAILED:MBEDTLS_X509_BADCERT_CN_MISMATCH:"compat":"NULL"
Paul Bakkera8cd2392012-02-11 16:09:32 +0000[diff] [blame]673
Hanno Becker2389d162019-02-14 12:52:47 +0000[diff] [blame]674X509 CRT verification #23 (domain not matching wildcard certificate)
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200[diff] [blame]675depends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_SHA1_C:MBEDTLS_RSA_C:MBEDTLS_PKCS1_V15
Gilles Peskineef86ab22017-05-05 18:59:02 +0200[diff] [blame]676x509_verify:"data_files/cert_example_wildcard.crt":"data_files/test-ca.crt":"data_files/crl.pem":"example.com":MBEDTLS_ERR_X509_CERT_VERIFY_FAILED:MBEDTLS_X509_BADCERT_CN_MISMATCH:"compat":"NULL"
Paul Bakkera8cd2392012-02-11 16:09:32 +0000[diff] [blame]677
Hanno Becker2389d162019-02-14 12:52:47 +0000[diff] [blame]678X509 CRT verification #24 (domain matching CN of multi certificate)
Ron Eldor9eeb8612019-02-12 15:03:42 +0200[diff] [blame]679depends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_SHA1_C:MBEDTLS_SHA256_C:MBEDTLS_RSA_C:MBEDTLS_PKCS1_V15
Gilles Peskineef86ab22017-05-05 18:59:02 +0200[diff] [blame]680x509_verify:"data_files/cert_example_multi.crt":"data_files/test-ca.crt":"data_files/crl.pem":"www.example.com":MBEDTLS_ERR_X509_CERT_VERIFY_FAILED:MBEDTLS_X509_BADCERT_CN_MISMATCH:"compat":"NULL"
Paul Bakkera8cd2392012-02-11 16:09:32 +0000[diff] [blame]681
Hanno Becker2389d162019-02-14 12:52:47 +0000[diff] [blame]682X509 CRT verification #25 (domain matching multi certificate)
Ron Eldor9eeb8612019-02-12 15:03:42 +0200[diff] [blame]683depends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_SHA1_C:MBEDTLS_SHA256_C:MBEDTLS_RSA_C:MBEDTLS_PKCS1_V15
Gilles Peskineef86ab22017-05-05 18:59:02 +0200[diff] [blame]684x509_verify:"data_files/cert_example_multi.crt":"data_files/test-ca.crt":"data_files/crl.pem":"example.net":0:0:"compat":"NULL"
Paul Bakkera8cd2392012-02-11 16:09:32 +0000[diff] [blame]685
Hanno Becker2389d162019-02-14 12:52:47 +0000[diff] [blame]686X509 CRT verification #26 (domain not matching multi certificate)
Ron Eldor9eeb8612019-02-12 15:03:42 +0200[diff] [blame]687depends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_SHA1_C:MBEDTLS_SHA256_C:MBEDTLS_RSA_C:MBEDTLS_PKCS1_V15
Gilles Peskineef86ab22017-05-05 18:59:02 +0200[diff] [blame]688x509_verify:"data_files/cert_example_multi.crt":"data_files/test-ca.crt":"data_files/crl.pem":"www.example.net":MBEDTLS_ERR_X509_CERT_VERIFY_FAILED:MBEDTLS_X509_BADCERT_CN_MISMATCH:"compat":"NULL"
Paul Bakkera8cd2392012-02-11 16:09:32 +0000[diff] [blame]689
Gilles Peskine7a020f32019-09-16 19:54:10 +0200[diff] [blame]690X509 CRT verification #27.1 (domain not matching multi certificate: suffix)
Ron Eldor9eeb8612019-02-12 15:03:42 +0200[diff] [blame]691depends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_SHA1_C:MBEDTLS_SHA256_C:MBEDTLS_RSA_C:MBEDTLS_PKCS1_V15
Gilles Peskineef86ab22017-05-05 18:59:02 +0200[diff] [blame]692x509_verify:"data_files/cert_example_multi.crt":"data_files/test-ca.crt":"data_files/crl.pem":"xample.net":MBEDTLS_ERR_X509_CERT_VERIFY_FAILED:MBEDTLS_X509_BADCERT_CN_MISMATCH:"compat":"NULL"
Paul Bakkera8cd2392012-02-11 16:09:32 +0000[diff] [blame]693
Gilles Peskine7a020f32019-09-16 19:54:10 +0200[diff] [blame]694X509 CRT verification #27.2 (domain not matching multi certificate: head junk)
Ron Eldor9eeb8612019-02-12 15:03:42 +0200[diff] [blame]695depends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_SHA1_C:MBEDTLS_SHA256_C:MBEDTLS_RSA_C:MBEDTLS_PKCS1_V15
Gilles Peskineef86ab22017-05-05 18:59:02 +0200[diff] [blame]696x509_verify:"data_files/cert_example_multi.crt":"data_files/test-ca.crt":"data_files/crl.pem":"bexample.net":MBEDTLS_ERR_X509_CERT_VERIFY_FAILED:MBEDTLS_X509_BADCERT_CN_MISMATCH:"compat":"NULL"
Paul Bakkera8cd2392012-02-11 16:09:32 +0000[diff] [blame]697
Hanno Becker2389d162019-02-14 12:52:47 +0000[diff] [blame]698X509 CRT verification #28 (domain not matching wildcard in multi certificate)
Ron Eldor9eeb8612019-02-12 15:03:42 +0200[diff] [blame]699depends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_SHA1_C:MBEDTLS_SHA256_C:MBEDTLS_RSA_C:MBEDTLS_PKCS1_V15
Gilles Peskineef86ab22017-05-05 18:59:02 +0200[diff] [blame]700x509_verify:"data_files/cert_example_multi.crt":"data_files/test-ca.crt":"data_files/crl.pem":"example.org":MBEDTLS_ERR_X509_CERT_VERIFY_FAILED:MBEDTLS_X509_BADCERT_CN_MISMATCH:"compat":"NULL"
Paul Bakker57b12982012-02-11 17:38:38 +0000[diff] [blame]701
Hanno Becker2389d162019-02-14 12:52:47 +0000[diff] [blame]702X509 CRT verification #29 (domain matching wildcard in multi certificate)
Ron Eldor9eeb8612019-02-12 15:03:42 +0200[diff] [blame]703depends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_SHA1_C:MBEDTLS_SHA256_C:MBEDTLS_RSA_C:MBEDTLS_PKCS1_V15
Gilles Peskineef86ab22017-05-05 18:59:02 +0200[diff] [blame]704x509_verify:"data_files/cert_example_multi.crt":"data_files/test-ca.crt":"data_files/crl.pem":"mail.example.org":0:0:"compat":"NULL"
Paul Bakker57b12982012-02-11 17:38:38 +0000[diff] [blame]705
Hanno Becker2389d162019-02-14 12:52:47 +0000[diff] [blame]706X509 CRT verification #30 (domain matching multi certificate without CN)
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200[diff] [blame]707depends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_SHA1_C:MBEDTLS_RSA_C:MBEDTLS_PKCS1_V15
Gilles Peskineef86ab22017-05-05 18:59:02 +0200[diff] [blame]708x509_verify:"data_files/cert_example_multi_nocn.crt":"data_files/test-ca.crt":"data_files/crl.pem":"www.shotokan-braunschweig.de":MBEDTLS_ERR_X509_CERT_VERIFY_FAILED:MBEDTLS_X509_BADCERT_NOT_TRUSTED:"compat":"NULL"
Paul Bakker91956622012-08-23 10:46:54 +0000[diff] [blame]709
Hanno Becker2389d162019-02-14 12:52:47 +0000[diff] [blame]710X509 CRT verification #31 (domain not matching multi certificate without CN)
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200[diff] [blame]711depends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_SHA1_C:MBEDTLS_RSA_C:MBEDTLS_PKCS1_V15
Gilles Peskineef86ab22017-05-05 18:59:02 +0200[diff] [blame]712x509_verify:"data_files/cert_example_multi_nocn.crt":"data_files/test-ca.crt":"data_files/crl.pem":"www.example.net":MBEDTLS_ERR_X509_CERT_VERIFY_FAILED:MBEDTLS_X509_BADCERT_CN_MISMATCH + MBEDTLS_X509_BADCERT_NOT_TRUSTED:"compat":"NULL"
Paul Bakker91956622012-08-23 10:46:54 +0000[diff] [blame]713
Hanno Becker2389d162019-02-14 12:52:47 +0000[diff] [blame]714X509 CRT verification #32 (Valid, EC cert, RSA CA)
Manuel Pégourié-Gonnard43be6cd2017-06-20 09:53:42 +0200[diff] [blame]715depends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_RSA_C:MBEDTLS_ECDSA_C:MBEDTLS_ECP_DP_SECP192R1_ENABLED:MBEDTLS_RSA_C:MBEDTLS_PKCS1_V15:MBEDTLS_SHA1_C
Gilles Peskineef86ab22017-05-05 18:59:02 +0200[diff] [blame]716x509_verify:"data_files/server3.crt":"data_files/test-ca.crt":"data_files/crl.pem":"NULL":0:0:"compat":"NULL"
Manuel Pégourié-Gonnard6009c3a2013-08-09 11:27:14 +0200[diff] [blame]717
Hanno Becker2389d162019-02-14 12:52:47 +0000[diff] [blame]718X509 CRT verification #33 (Valid, RSA cert, EC CA)
Manuel Pégourié-Gonnard43be6cd2017-06-20 09:53:42 +0200[diff] [blame]719depends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_RSA_C:MBEDTLS_ECDSA_C:MBEDTLS_SHA256_C:MBEDTLS_ECP_DP_SECP256R1_ENABLED:MBEDTLS_RSA_C:MBEDTLS_PKCS1_V15:MBEDTLS_ECP_DP_SECP384R1_ENABLED
Gilles Peskineef86ab22017-05-05 18:59:02 +0200[diff] [blame]720x509_verify:"data_files/server4.crt":"data_files/test-ca2.crt":"data_files/crl-ec-sha256.pem":"NULL":0:0:"compat":"NULL"
Manuel Pégourié-Gonnard6009c3a2013-08-09 11:27:14 +0200[diff] [blame]721
Hanno Becker2389d162019-02-14 12:52:47 +0000[diff] [blame]722X509 CRT verification #34 (Valid, EC cert, EC CA)
Manuel Pégourié-Gonnard43be6cd2017-06-20 09:53:42 +0200[diff] [blame]723depends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_ECDSA_C:MBEDTLS_SHA256_C:MBEDTLS_ECP_DP_SECP256R1_ENABLED:MBEDTLS_ECP_DP_SECP384R1_ENABLED
Gilles Peskineef86ab22017-05-05 18:59:02 +0200[diff] [blame]724x509_verify:"data_files/server5.crt":"data_files/test-ca2.crt":"data_files/crl-ec-sha256.pem":"NULL":0:0:"compat":"NULL"
Manuel Pégourié-Gonnard6009c3a2013-08-09 11:27:14 +0200[diff] [blame]725
Hanno Becker2389d162019-02-14 12:52:47 +0000[diff] [blame]726X509 CRT verification #35 (Revoked, EC CA)
Deomid Ryabkovde420a42016-11-27 14:50:06 +0000[diff] [blame]727depends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_ECDSA_C:MBEDTLS_SHA256_C:MBEDTLS_ECP_DP_SECP256R1_ENABLED:MBEDTLS_ECP_DP_SECP384R1_ENABLED:MBEDTLS_HAVE_TIME_DATE
Gilles Peskineef86ab22017-05-05 18:59:02 +0200[diff] [blame]728x509_verify:"data_files/server6.crt":"data_files/test-ca2.crt":"data_files/crl-ec-sha256.pem":"NULL":MBEDTLS_ERR_X509_CERT_VERIFY_FAILED:MBEDTLS_X509_BADCERT_REVOKED:"compat":"NULL"
Manuel Pégourié-Gonnard6009c3a2013-08-09 11:27:14 +0200[diff] [blame]729
Hanno Becker2389d162019-02-14 12:52:47 +0000[diff] [blame]730X509 CRT verification #36 (Valid, EC CA, SHA1 Digest)
Manuel Pégourié-Gonnard43be6cd2017-06-20 09:53:42 +0200[diff] [blame]731depends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_ECDSA_C:MBEDTLS_SHA256_C:MBEDTLS_ECP_DP_SECP256R1_ENABLED:MBEDTLS_ECP_DP_SECP384R1_ENABLED:MBEDTLS_SHA1_C
Gilles Peskineef86ab22017-05-05 18:59:02 +0200[diff] [blame]732x509_verify:"data_files/server5-sha1.crt":"data_files/test-ca2.crt":"data_files/crl-ec-sha256.pem":"NULL":0:0:"compat":"NULL"
Manuel Pégourié-Gonnard6009c3a2013-08-09 11:27:14 +0200[diff] [blame]733
Hanno Becker2389d162019-02-14 12:52:47 +0000[diff] [blame]734X509 CRT verification #37 (Valid, EC CA, SHA224 Digest)
Manuel Pégourié-Gonnard43be6cd2017-06-20 09:53:42 +0200[diff] [blame]735depends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_ECDSA_C:MBEDTLS_SHA256_C:MBEDTLS_ECP_DP_SECP256R1_ENABLED:MBEDTLS_ECP_DP_SECP384R1_ENABLED
Gilles Peskineef86ab22017-05-05 18:59:02 +0200[diff] [blame]736x509_verify:"data_files/server5-sha224.crt":"data_files/test-ca2.crt":"data_files/crl-ec-sha256.pem":"NULL":0:0:"compat":"NULL"
Manuel Pégourié-Gonnard6009c3a2013-08-09 11:27:14 +0200[diff] [blame]737
Hanno Becker2389d162019-02-14 12:52:47 +0000[diff] [blame]738X509 CRT verification #38 (Valid, EC CA, SHA384 Digest)
Gilles Peskine049feff2020-03-09 20:52:19 +0100[diff] [blame]739depends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_ECDSA_C:MBEDTLS_SHA256_C:MBEDTLS_SHA512_C:!MBEDTLS_SHA512_NO_SHA384:MBEDTLS_ECP_DP_SECP256R1_ENABLED:MBEDTLS_ECP_DP_SECP384R1_ENABLED
Gilles Peskineef86ab22017-05-05 18:59:02 +0200[diff] [blame]740x509_verify:"data_files/server5-sha384.crt":"data_files/test-ca2.crt":"data_files/crl-ec-sha256.pem":"NULL":0:0:"compat":"NULL"
Manuel Pégourié-Gonnard6009c3a2013-08-09 11:27:14 +0200[diff] [blame]741
Hanno Becker2389d162019-02-14 12:52:47 +0000[diff] [blame]742X509 CRT verification #39 (Valid, EC CA, SHA512 Digest)
Manuel Pégourié-Gonnard43be6cd2017-06-20 09:53:42 +0200[diff] [blame]743depends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_ECDSA_C:MBEDTLS_SHA256_C:MBEDTLS_SHA512_C:MBEDTLS_ECP_DP_SECP256R1_ENABLED:MBEDTLS_ECP_DP_SECP384R1_ENABLED
Gilles Peskineef86ab22017-05-05 18:59:02 +0200[diff] [blame]744x509_verify:"data_files/server5-sha512.crt":"data_files/test-ca2.crt":"data_files/crl-ec-sha256.pem":"NULL":0:0:"compat":"NULL"
Manuel Pégourié-Gonnardb4e9ca92013-08-10 10:52:01 +0200[diff] [blame]745
Hanno Becker2389d162019-02-14 12:52:47 +0000[diff] [blame]746X509 CRT verification #40 (Valid, depth 0, RSA, CA)
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200[diff] [blame]747depends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_RSA_C:MBEDTLS_PKCS1_V15:MBEDTLS_SHA256_C:MBEDTLS_SHA1_C
Gilles Peskineef86ab22017-05-05 18:59:02 +0200[diff] [blame]748x509_verify:"data_files/test-ca.crt":"data_files/test-ca.crt":"data_files/crl.pem":"NULL":0:0:"compat":"NULL"
Manuel Pégourié-Gonnardb4e9ca92013-08-10 10:52:01 +0200[diff] [blame]749
Hanno Becker2389d162019-02-14 12:52:47 +0000[diff] [blame]750X509 CRT verification #41 (Valid, depth 0, EC, CA)
Manuel Pégourié-Gonnard43be6cd2017-06-20 09:53:42 +0200[diff] [blame]751depends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_ECDSA_C:MBEDTLS_ECP_DP_SECP256R1_ENABLED:MBEDTLS_ECP_DP_SECP384R1_ENABLED:MBEDTLS_SHA256_C
Gilles Peskineef86ab22017-05-05 18:59:02 +0200[diff] [blame]752x509_verify:"data_files/test-ca2.crt":"data_files/test-ca2.crt":"data_files/crl-ec-sha256.pem":"NULL":0:0:"compat":"NULL"
Manuel Pégourié-Gonnardb4e9ca92013-08-10 10:52:01 +0200[diff] [blame]753
Hanno Becker2389d162019-02-14 12:52:47 +0000[diff] [blame]754X509 CRT verification #42 (Depth 0, not CA, RSA)
palaviva07ecda2016-08-07 11:15:29 +0300[diff] [blame]755depends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_RSA_C:MBEDTLS_PKCS1_V15:MBEDTLS_SHA1_C
Gilles Peskineef86ab22017-05-05 18:59:02 +0200[diff] [blame]756x509_verify:"data_files/server2.crt":"data_files/server2.crt":"data_files/crl.pem":"NULL":MBEDTLS_ERR_X509_CERT_VERIFY_FAILED:MBEDTLS_X509_BADCERT_NOT_TRUSTED:"compat":"NULL"
Manuel Pégourié-Gonnardb4e9ca92013-08-10 10:52:01 +0200[diff] [blame]757
Hanno Becker2389d162019-02-14 12:52:47 +0000[diff] [blame]758X509 CRT verification #43 (Depth 0, not CA, EC)
palaviva07ecda2016-08-07 11:15:29 +0300[diff] [blame]759depends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_ECDSA_C:MBEDTLS_ECP_DP_SECP256R1_ENABLED:MBEDTLS_SHA256_C
Gilles Peskineef86ab22017-05-05 18:59:02 +0200[diff] [blame]760x509_verify:"data_files/server5.crt":"data_files/server5.crt":"data_files/crl-ec-sha256.pem":"NULL":MBEDTLS_ERR_X509_CERT_VERIFY_FAILED:MBEDTLS_X509_BADCERT_NOT_TRUSTED:"compat":"NULL"
Manuel Pégourié-Gonnardb4e9ca92013-08-10 10:52:01 +0200[diff] [blame]761
Hanno Becker2389d162019-02-14 12:52:47 +0000[diff] [blame]762X509 CRT verification #44 (Corrupted signature, EC)
Manuel Pégourié-Gonnard43be6cd2017-06-20 09:53:42 +0200[diff] [blame]763depends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_ECDSA_C:MBEDTLS_ECP_DP_SECP256R1_ENABLED:MBEDTLS_ECP_DP_SECP384R1_ENABLED:MBEDTLS_SHA256_C
Gilles Peskineef86ab22017-05-05 18:59:02 +0200[diff] [blame]764x509_verify:"data_files/server5-badsign.crt":"data_files/test-ca2.crt":"data_files/crl-ec-sha256.pem":"NULL":MBEDTLS_ERR_X509_CERT_VERIFY_FAILED:MBEDTLS_X509_BADCERT_NOT_TRUSTED:"compat":"NULL"
Manuel Pégourié-Gonnardb4e9ca92013-08-10 10:52:01 +0200[diff] [blame]765
Hanno Becker2389d162019-02-14 12:52:47 +0000[diff] [blame]766X509 CRT verification #45 (Corrupted signature, RSA)
palaviva07ecda2016-08-07 11:15:29 +0300[diff] [blame]767depends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_RSA_C:MBEDTLS_PKCS1_V15:MBEDTLS_SHA1_C
Gilles Peskineef86ab22017-05-05 18:59:02 +0200[diff] [blame]768x509_verify:"data_files/server2-badsign.crt":"data_files/test-ca.crt":"data_files/crl.pem":"NULL":MBEDTLS_ERR_X509_CERT_VERIFY_FAILED:MBEDTLS_X509_BADCERT_NOT_TRUSTED:"compat":"NULL"
Manuel Pégourié-Gonnardb4e9ca92013-08-10 10:52:01 +0200[diff] [blame]769
Hanno Becker2389d162019-02-14 12:52:47 +0000[diff] [blame]770X509 CRT verification #45b (Corrupted signature, intermediate CA)
Manuel Pégourié-Gonnard43be6cd2017-06-20 09:53:42 +0200[diff] [blame]771depends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_RSA_C:MBEDTLS_PKCS1_V15:MBEDTLS_SHA1_C:MBEDTLS_ECDSA_C:MBEDTLS_ECP_DP_SECP256R1_ENABLED:MBEDTLS_ECP_DP_SECP384R1_ENABLED:MBEDTLS_SHA256_C
Manuel Pégourié-Gonnard4dfc04a2017-06-05 11:12:13 +0200[diff] [blame]772x509_verify:"data_files/server7-badsign.crt":"data_files/test-ca2.crt":"data_files/crl.pem":"NULL":MBEDTLS_ERR_X509_CERT_VERIFY_FAILED:MBEDTLS_X509_BADCERT_NOT_TRUSTED:"compat":"NULL"
773
Hanno Becker2389d162019-02-14 12:52:47 +0000[diff] [blame]774X509 CRT verification #46 (Valid, depth 2, EC-RSA-EC)
Manuel Pégourié-Gonnard43be6cd2017-06-20 09:53:42 +0200[diff] [blame]775depends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_ECDSA_C:MBEDTLS_RSA_C:MBEDTLS_ECP_DP_SECP256R1_ENABLED:MBEDTLS_ECP_DP_SECP384R1_ENABLED:MBEDTLS_RSA_C:MBEDTLS_PKCS1_V15:MBEDTLS_SHA256_C
Gilles Peskineef86ab22017-05-05 18:59:02 +0200[diff] [blame]776x509_verify:"data_files/server7_int-ca.crt":"data_files/test-ca2.crt":"data_files/crl-ec-sha256.pem":"NULL":0:0:"compat":"NULL"
Manuel Pégourié-Gonnardb4e9ca92013-08-10 10:52:01 +0200[diff] [blame]777
Hanno Becker2389d162019-02-14 12:52:47 +0000[diff] [blame]778X509 CRT verification #47 (Untrusted, depth 2, EC-RSA-EC)
Manuel Pégourié-Gonnard43be6cd2017-06-20 09:53:42 +0200[diff] [blame]779depends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_ECDSA_C:MBEDTLS_RSA_C:MBEDTLS_ECP_DP_SECP256R1_ENABLED:MBEDTLS_RSA_C:MBEDTLS_PKCS1_V15:MBEDTLS_SHA1_C:MBEDTLS_SHA256_C
Gilles Peskineef86ab22017-05-05 18:59:02 +0200[diff] [blame]780x509_verify:"data_files/server7_int-ca.crt":"data_files/test-ca.crt":"data_files/crl-ec-sha256.pem":"NULL":MBEDTLS_ERR_X509_CERT_VERIFY_FAILED:MBEDTLS_X509_BADCERT_NOT_TRUSTED:"compat":"NULL"
Manuel Pégourié-Gonnardb4e9ca92013-08-10 10:52:01 +0200[diff] [blame]781
Hanno Becker2389d162019-02-14 12:52:47 +0000[diff] [blame]782X509 CRT verification #48 (Missing intermediate CA, EC-RSA-EC)
Manuel Pégourié-Gonnard43be6cd2017-06-20 09:53:42 +0200[diff] [blame]783depends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_ECDSA_C:MBEDTLS_RSA_C:MBEDTLS_ECP_DP_SECP256R1_ENABLED:MBEDTLS_RSA_C:MBEDTLS_PKCS1_V15:MBEDTLS_SHA1_C:MBEDTLS_SHA256_C
Gilles Peskineef86ab22017-05-05 18:59:02 +0200[diff] [blame]784x509_verify:"data_files/server7.crt":"data_files/test-ca.crt":"data_files/crl-ec-sha256.pem":"NULL":MBEDTLS_ERR_X509_CERT_VERIFY_FAILED:MBEDTLS_X509_BADCERT_NOT_TRUSTED:"compat":"NULL"
Manuel Pégourié-Gonnardb4e9ca92013-08-10 10:52:01 +0200[diff] [blame]785
Hanno Becker2389d162019-02-14 12:52:47 +0000[diff] [blame]786X509 CRT verification #49 (Valid, depth 2, RSA-EC-RSA)
Manuel Pégourié-Gonnard43be6cd2017-06-20 09:53:42 +0200[diff] [blame]787depends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_ECDSA_C:MBEDTLS_RSA_C:MBEDTLS_ECP_DP_SECP384R1_ENABLED:MBEDTLS_RSA_C:MBEDTLS_PKCS1_V15:MBEDTLS_SHA256_C:MBEDTLS_SHA1_C
Gilles Peskineef86ab22017-05-05 18:59:02 +0200[diff] [blame]788x509_verify:"data_files/server8_int-ca2.crt":"data_files/test-ca.crt":"data_files/crl-ec-sha256.pem":"NULL":0:0:"compat":"NULL"
Manuel Pégourié-Gonnardb4e9ca92013-08-10 10:52:01 +0200[diff] [blame]789
Hanno Becker2389d162019-02-14 12:52:47 +0000[diff] [blame]790X509 CRT verification #50 (Valid, multiple CAs)
Manuel Pégourié-Gonnard43be6cd2017-06-20 09:53:42 +0200[diff] [blame]791depends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_RSA_C:MBEDTLS_PKCS1_V15:MBEDTLS_ECDSA_C:MBEDTLS_ECP_DP_SECP384R1_ENABLED:MBEDTLS_SHA1_C:MBEDTLS_SHA256_C
Gilles Peskineef86ab22017-05-05 18:59:02 +0200[diff] [blame]792x509_verify:"data_files/server2.crt":"data_files/test-ca_cat12.crt":"data_files/crl.pem":"NULL":0:0:"compat":"NULL"
Manuel Pégourié-Gonnardb4e9ca92013-08-10 10:52:01 +0200[diff] [blame]793
Hanno Becker2389d162019-02-14 12:52:47 +0000[diff] [blame]794X509 CRT verification #51 (Valid, multiple CAs, reverse order)
Manuel Pégourié-Gonnard43be6cd2017-06-20 09:53:42 +0200[diff] [blame]795depends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_RSA_C:MBEDTLS_PKCS1_V15:MBEDTLS_ECDSA_C:MBEDTLS_ECP_DP_SECP384R1_ENABLED:MBEDTLS_SHA1_C:MBEDTLS_SHA256_C
Gilles Peskineef86ab22017-05-05 18:59:02 +0200[diff] [blame]796x509_verify:"data_files/server2.crt":"data_files/test-ca_cat21.crt":"data_files/crl.pem":"NULL":0:0:"compat":"NULL"
Manuel Pégourié-Gonnard6009c3a2013-08-09 11:27:14 +0200[diff] [blame]797
Hanno Becker2389d162019-02-14 12:52:47 +0000[diff] [blame]798X509 CRT verification #52 (CA keyUsage valid)
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200[diff] [blame]799depends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_ECDSA_C:MBEDTLS_SHA256_C:MBEDTLS_ECP_DP_SECP256R1_ENABLED:MBEDTLS_ECP_DP_SECP384R1_ENABLED
Gilles Peskineef86ab22017-05-05 18:59:02 +0200[diff] [blame]800x509_verify:"data_files/server5.crt":"data_files/test-ca2.ku-crt_crl.crt":"data_files/crl-ec-sha256.pem":"NULL":0:0:"compat":"NULL"
Manuel Pégourié-Gonnard99d4f192014-04-08 15:10:07 +0200[diff] [blame]801
Hanno Becker2389d162019-02-14 12:52:47 +0000[diff] [blame]802X509 CRT verification #53 (CA keyUsage missing cRLSign)
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200[diff] [blame]803depends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_ECDSA_C:MBEDTLS_SHA256_C:MBEDTLS_X509_CHECK_KEY_USAGE:MBEDTLS_ECP_DP_SECP256R1_ENABLED:MBEDTLS_ECP_DP_SECP384R1_ENABLED
Gilles Peskineef86ab22017-05-05 18:59:02 +0200[diff] [blame]804x509_verify:"data_files/server5.crt":"data_files/test-ca2.ku-crt.crt":"data_files/crl-ec-sha256.pem":"NULL":MBEDTLS_ERR_X509_CERT_VERIFY_FAILED:MBEDTLS_X509_BADCRL_NOT_TRUSTED:"compat":"NULL"
Manuel Pégourié-Gonnard99d4f192014-04-08 15:10:07 +0200[diff] [blame]805
Hanno Becker2389d162019-02-14 12:52:47 +0000[diff] [blame]806X509 CRT verification #54 (CA keyUsage missing cRLSign, no CRL)
Manuel Pégourié-Gonnard43be6cd2017-06-20 09:53:42 +0200[diff] [blame]807depends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_ECDSA_C:MBEDTLS_SHA256_C:MBEDTLS_ECP_DP_SECP256R1_ENABLED:MBEDTLS_ECP_DP_SECP384R1_ENABLED:MBEDTLS_SHA1_C:MBEDTLS_RSA_C
Gilles Peskineef86ab22017-05-05 18:59:02 +0200[diff] [blame]808x509_verify:"data_files/server5.crt":"data_files/test-ca2.ku-crt.crt":"data_files/crl.pem":"NULL":0:0:"compat":"NULL"
Manuel Pégourié-Gonnard99d4f192014-04-08 15:10:07 +0200[diff] [blame]809
Hanno Becker2389d162019-02-14 12:52:47 +0000[diff] [blame]810X509 CRT verification #55 (CA keyUsage missing keyCertSign)
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200[diff] [blame]811depends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_ECDSA_C:MBEDTLS_SHA256_C:MBEDTLS_X509_CHECK_KEY_USAGE:MBEDTLS_ECP_DP_SECP256R1_ENABLED:MBEDTLS_ECP_DP_SECP384R1_ENABLED
Gilles Peskineef86ab22017-05-05 18:59:02 +0200[diff] [blame]812x509_verify:"data_files/server5.crt":"data_files/test-ca2.ku-crl.crt":"data_files/crl-ec-sha256.pem":"NULL":MBEDTLS_ERR_X509_CERT_VERIFY_FAILED:MBEDTLS_X509_BADCERT_NOT_TRUSTED:"compat":"NULL"
Manuel Pégourié-Gonnard99d4f192014-04-08 15:10:07 +0200[diff] [blame]813
Hanno Becker2389d162019-02-14 12:52:47 +0000[diff] [blame]814X509 CRT verification #56 (CA keyUsage plain wrong)
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200[diff] [blame]815depends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_ECDSA_C:MBEDTLS_SHA256_C:MBEDTLS_X509_CHECK_KEY_USAGE:MBEDTLS_ECP_DP_SECP256R1_ENABLED:MBEDTLS_ECP_DP_SECP384R1_ENABLED
Gilles Peskineef86ab22017-05-05 18:59:02 +0200[diff] [blame]816x509_verify:"data_files/server5.crt":"data_files/test-ca2.ku-ds.crt":"data_files/crl-ec-sha256.pem":"NULL":MBEDTLS_ERR_X509_CERT_VERIFY_FAILED:MBEDTLS_X509_BADCERT_NOT_TRUSTED:"compat":"NULL"
Manuel Pégourié-Gonnard99d4f192014-04-08 15:10:07 +0200[diff] [blame]817
Hanno Becker2389d162019-02-14 12:52:47 +0000[diff] [blame]818X509 CRT verification #57 (Valid, RSASSA-PSS, SHA-1)
Manuel Pégourié-Gonnard43be6cd2017-06-20 09:53:42 +0200[diff] [blame]819depends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_X509_RSASSA_PSS_SUPPORT:MBEDTLS_SHA1_C:MBEDTLS_PKCS1_V15
Gilles Peskineef86ab22017-05-05 18:59:02 +0200[diff] [blame]820x509_verify:"data_files/server9.crt":"data_files/test-ca.crt":"data_files/crl.pem":"NULL":0:0:"compat":"NULL"
Manuel Pégourié-Gonnard920e1cd2014-06-02 18:11:07 +0200[diff] [blame]821
Hanno Becker2389d162019-02-14 12:52:47 +0000[diff] [blame]822X509 CRT verification #58 (Valid, RSASSA-PSS, SHA-224)
palaviva07ecda2016-08-07 11:15:29 +0300[diff] [blame]823depends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_X509_RSASSA_PSS_SUPPORT:MBEDTLS_SHA256_C:MBEDTLS_SHA1_C
Gilles Peskineef86ab22017-05-05 18:59:02 +0200[diff] [blame]824x509_verify:"data_files/server9-sha224.crt":"data_files/test-ca.crt":"data_files/crl-rsa-pss-sha224.pem":"NULL":0:0:"compat":"NULL"
Manuel Pégourié-Gonnard920e1cd2014-06-02 18:11:07 +0200[diff] [blame]825
Hanno Becker2389d162019-02-14 12:52:47 +0000[diff] [blame]826X509 CRT verification #59 (Valid, RSASSA-PSS, SHA-256)
palaviva07ecda2016-08-07 11:15:29 +0300[diff] [blame]827depends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_X509_RSASSA_PSS_SUPPORT:MBEDTLS_SHA256_C:MBEDTLS_SHA1_C
Gilles Peskineef86ab22017-05-05 18:59:02 +0200[diff] [blame]828x509_verify:"data_files/server9-sha256.crt":"data_files/test-ca.crt":"data_files/crl-rsa-pss-sha256.pem":"NULL":0:0:"compat":"NULL"
Manuel Pégourié-Gonnard920e1cd2014-06-02 18:11:07 +0200[diff] [blame]829
Hanno Becker2389d162019-02-14 12:52:47 +0000[diff] [blame]830X509 CRT verification #60 (Valid, RSASSA-PSS, SHA-384)
Gilles Peskine049feff2020-03-09 20:52:19 +0100[diff] [blame]831depends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_X509_RSASSA_PSS_SUPPORT:MBEDTLS_SHA512_C:!MBEDTLS_SHA512_NO_SHA384:MBEDTLS_SHA1_C
Gilles Peskineef86ab22017-05-05 18:59:02 +0200[diff] [blame]832x509_verify:"data_files/server9-sha384.crt":"data_files/test-ca.crt":"data_files/crl-rsa-pss-sha384.pem":"NULL":0:0:"compat":"NULL"
Manuel Pégourié-Gonnard920e1cd2014-06-02 18:11:07 +0200[diff] [blame]833
Hanno Becker2389d162019-02-14 12:52:47 +0000[diff] [blame]834X509 CRT verification #61 (Valid, RSASSA-PSS, SHA-512)
palaviva07ecda2016-08-07 11:15:29 +0300[diff] [blame]835depends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_X509_RSASSA_PSS_SUPPORT:MBEDTLS_SHA512_C:MBEDTLS_SHA1_C
Gilles Peskineef86ab22017-05-05 18:59:02 +0200[diff] [blame]836x509_verify:"data_files/server9-sha512.crt":"data_files/test-ca.crt":"data_files/crl-rsa-pss-sha512.pem":"NULL":0:0:"compat":"NULL"
Manuel Pégourié-Gonnard920e1cd2014-06-02 18:11:07 +0200[diff] [blame]837
Hanno Becker2389d162019-02-14 12:52:47 +0000[diff] [blame]838X509 CRT verification #62 (Revoked, RSASSA-PSS, SHA-1)
Deomid Ryabkovde420a42016-11-27 14:50:06 +0000[diff] [blame]839depends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_X509_RSASSA_PSS_SUPPORT:MBEDTLS_SHA1_C:MBEDTLS_HAVE_TIME_DATE
Gilles Peskineef86ab22017-05-05 18:59:02 +0200[diff] [blame]840x509_verify:"data_files/server9.crt":"data_files/test-ca.crt":"data_files/crl-rsa-pss-sha1.pem":"NULL":MBEDTLS_ERR_X509_CERT_VERIFY_FAILED:MBEDTLS_X509_BADCERT_REVOKED:"compat":"NULL"
Manuel Pégourié-Gonnard53882022014-06-05 17:53:52 +0200[diff] [blame]841
Hanno Becker2389d162019-02-14 12:52:47 +0000[diff] [blame]842X509 CRT verification #63 (Revoked, RSASSA-PSS, SHA-1, CRL badsign)
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200[diff] [blame]843depends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_X509_RSASSA_PSS_SUPPORT:MBEDTLS_SHA1_C
Gilles Peskineef86ab22017-05-05 18:59:02 +0200[diff] [blame]844x509_verify:"data_files/server9.crt":"data_files/test-ca.crt":"data_files/crl-rsa-pss-sha1-badsign.pem":"NULL":MBEDTLS_ERR_X509_CERT_VERIFY_FAILED:MBEDTLS_X509_BADCRL_NOT_TRUSTED:"compat":"NULL"
Manuel Pégourié-Gonnard53882022014-06-05 17:53:52 +0200[diff] [blame]845
Hanno Becker2389d162019-02-14 12:52:47 +0000[diff] [blame]846X509 CRT verification #64 (Valid, RSASSA-PSS, SHA-1, not top)
Manuel Pégourié-Gonnard43be6cd2017-06-20 09:53:42 +0200[diff] [blame]847depends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_X509_RSASSA_PSS_SUPPORT:MBEDTLS_SHA1_C:MBEDTLS_RSA_C:MBEDTLS_PKCS1_V15
Gilles Peskineef86ab22017-05-05 18:59:02 +0200[diff] [blame]848x509_verify:"data_files/server9-with-ca.crt":"data_files/test-ca.crt":"data_files/crl.pem":"NULL":0:0:"compat":"NULL"
Manuel Pégourié-Gonnard920e1cd2014-06-02 18:11:07 +0200[diff] [blame]849
Hanno Becker2389d162019-02-14 12:52:47 +0000[diff] [blame]850X509 CRT verification #65 (RSASSA-PSS, SHA1, bad cert signature)
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200[diff] [blame]851depends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_X509_RSASSA_PSS_SUPPORT:MBEDTLS_SHA1_C
Gilles Peskineef86ab22017-05-05 18:59:02 +0200[diff] [blame]852x509_verify:"data_files/server9-badsign.crt":"data_files/test-ca.crt":"data_files/crl.pem":"NULL":MBEDTLS_ERR_X509_CERT_VERIFY_FAILED:MBEDTLS_X509_BADCERT_NOT_TRUSTED:"compat":"NULL"
Manuel Pégourié-Gonnard920e1cd2014-06-02 18:11:07 +0200[diff] [blame]853
Hanno Becker2389d162019-02-14 12:52:47 +0000[diff] [blame]854X509 CRT verification #66 (RSASSA-PSS, SHA1, no RSA CA)
Manuel Pégourié-Gonnard43be6cd2017-06-20 09:53:42 +0200[diff] [blame]855depends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_X509_RSASSA_PSS_SUPPORT:MBEDTLS_SHA1_C:MBEDTLS_ECDSA_C:MBEDTLS_ECP_DP_SECP384R1_ENABLED:MBEDTLS_SHA256_C
Gilles Peskineef86ab22017-05-05 18:59:02 +0200[diff] [blame]856x509_verify:"data_files/server9.crt":"data_files/test-ca2.crt":"data_files/crl.pem":"NULL":MBEDTLS_ERR_X509_CERT_VERIFY_FAILED:MBEDTLS_X509_BADCERT_NOT_TRUSTED:"compat":"NULL"
Manuel Pégourié-Gonnard920e1cd2014-06-02 18:11:07 +0200[diff] [blame]857
Hanno Becker2389d162019-02-14 12:52:47 +0000[diff] [blame]858X509 CRT verification #67 (Valid, RSASSA-PSS, all defaults)
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200[diff] [blame]859depends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_X509_RSASSA_PSS_SUPPORT:MBEDTLS_SHA1_C
Gilles Peskineef86ab22017-05-05 18:59:02 +0200[diff] [blame]860x509_verify:"data_files/server9-defaults.crt":"data_files/test-ca.crt":"data_files/crl-rsa-pss-sha1.pem":"NULL":0:0:"compat":"NULL"
Manuel Pégourié-Gonnardeacccb72014-06-05 18:00:08 +0200[diff] [blame]861
Hanno Becker2389d162019-02-14 12:52:47 +0000[diff] [blame]862X509 CRT verification #68 (RSASSA-PSS, wrong salt_len)
palaviva07ecda2016-08-07 11:15:29 +0300[diff] [blame]863depends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_X509_RSASSA_PSS_SUPPORT:MBEDTLS_SHA256_C:MBEDTLS_SHA1_C
Gilles Peskineef86ab22017-05-05 18:59:02 +0200[diff] [blame]864x509_verify:"data_files/server9-bad-saltlen.crt":"data_files/test-ca.crt":"data_files/crl.pem":"NULL":MBEDTLS_ERR_X509_CERT_VERIFY_FAILED:MBEDTLS_X509_BADCERT_NOT_TRUSTED:"compat":"NULL"
Manuel Pégourié-Gonnard5873b002014-06-06 18:04:09 +0200[diff] [blame]865
Hanno Becker2389d162019-02-14 12:52:47 +0000[diff] [blame]866X509 CRT verification #69 (RSASSA-PSS, wrong mgf_hash)
palaviva07ecda2016-08-07 11:15:29 +0300[diff] [blame]867depends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_X509_RSASSA_PSS_SUPPORT:MBEDTLS_SHA256_C:MBEDTLS_SHA1_C
Gilles Peskineef86ab22017-05-05 18:59:02 +0200[diff] [blame]868x509_verify:"data_files/server9-bad-mgfhash.crt":"data_files/test-ca.crt":"data_files/crl.pem":"NULL":MBEDTLS_ERR_X509_CERT_VERIFY_FAILED:MBEDTLS_X509_BADCERT_NOT_TRUSTED:"compat":"NULL"
Manuel Pégourié-Gonnard5873b002014-06-06 18:04:09 +0200[diff] [blame]869
Hanno Becker2389d162019-02-14 12:52:47 +0000[diff] [blame]870X509 CRT verification #70 (v1 trusted CA)
palaviva07ecda2016-08-07 11:15:29 +0300[diff] [blame]871depends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_RSA_C:MBEDTLS_PKCS1_V15:MBEDTLS_SHA256_C:MBEDTLS_SHA1_C
Gilles Peskineef86ab22017-05-05 18:59:02 +0200[diff] [blame]872x509_verify:"data_files/server1-v1.crt":"data_files/test-ca-v1.crt":"data_files/crl.pem":"NULL":0:0:"compat":"NULL"
Manuel Pégourié-Gonnardc4eff162014-06-19 12:18:08 +0200[diff] [blame]873
Hanno Becker2389d162019-02-14 12:52:47 +0000[diff] [blame]874X509 CRT verification #71 (v1 trusted CA, other)
palaviva07ecda2016-08-07 11:15:29 +0300[diff] [blame]875depends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_RSA_C:MBEDTLS_PKCS1_V15:MBEDTLS_SHA256_C:MBEDTLS_SHA1_C
Gilles Peskineef86ab22017-05-05 18:59:02 +0200[diff] [blame]876x509_verify:"data_files/server2-v1.crt":"data_files/server1-v1.crt":"data_files/crl.pem":"NULL":0:0:"compat":"NULL"
Manuel Pégourié-Gonnardc4eff162014-06-19 12:18:08 +0200[diff] [blame]877
Hanno Becker2389d162019-02-14 12:52:47 +0000[diff] [blame]878X509 CRT verification #72 (v1 chain)
palaviva07ecda2016-08-07 11:15:29 +0300[diff] [blame]879depends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_RSA_C:MBEDTLS_PKCS1_V15:MBEDTLS_SHA256_C:MBEDTLS_SHA1_C
Gilles Peskineef86ab22017-05-05 18:59:02 +0200[diff] [blame]880x509_verify:"data_files/server2-v1-chain.crt":"data_files/test-ca-v1.crt":"data_files/crl.pem":"NULL":MBEDTLS_ERR_X509_CERT_VERIFY_FAILED:MBEDTLS_X509_BADCERT_NOT_TRUSTED:"compat":"NULL"
Manuel Pégourié-Gonnardc4eff162014-06-19 12:18:08 +0200[diff] [blame]881
Hanno Becker2389d162019-02-14 12:52:47 +0000[diff] [blame]882X509 CRT verification #73 (selfsigned trusted without CA bit)
Manuel Pégourié-Gonnard43be6cd2017-06-20 09:53:42 +0200[diff] [blame]883depends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_ECDSA_C:MBEDTLS_SHA256_C:MBEDTLS_ECP_DP_SECP256R1_ENABLED:MBEDTLS_SHA1_C:MBEDTLS_RSA_C
Gilles Peskineef86ab22017-05-05 18:59:02 +0200[diff] [blame]884x509_verify:"data_files/server5-selfsigned.crt":"data_files/server5-selfsigned.crt":"data_files/crl.pem":"NULL":0:0:"compat":"NULL"
Manuel Pégourié-Gonnardd249b7a2014-06-24 11:49:16 +0200[diff] [blame]885
Hanno Becker2389d162019-02-14 12:52:47 +0000[diff] [blame]886X509 CRT verification #74 (signed by selfsigned trusted without CA bit)
Manuel Pégourié-Gonnard43be6cd2017-06-20 09:53:42 +0200[diff] [blame]887depends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_ECDSA_C:MBEDTLS_SHA256_C:MBEDTLS_ECP_DP_SECP256R1_ENABLED:MBEDTLS_SHA1_C:MBEDTLS_RSA_C
Gilles Peskineef86ab22017-05-05 18:59:02 +0200[diff] [blame]888x509_verify:"data_files/server6-ss-child.crt":"data_files/server5-selfsigned.crt":"data_files/crl.pem":"NULL":MBEDTLS_ERR_X509_CERT_VERIFY_FAILED:MBEDTLS_X509_BADCERT_NOT_TRUSTED:"compat":"NULL"
Manuel Pégourié-Gonnardd249b7a2014-06-24 11:49:16 +0200[diff] [blame]889
Hanno Becker2389d162019-02-14 12:52:47 +0000[diff] [blame]890X509 CRT verification #75 (encoding mismatch)
Manuel Pégourié-Gonnard43be6cd2017-06-20 09:53:42 +0200[diff] [blame]891depends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_SHA1_C:MBEDTLS_RSA_C:MBEDTLS_PKCS1_V15
Gilles Peskineef86ab22017-05-05 18:59:02 +0200[diff] [blame]892x509_verify:"data_files/enco-cert-utf8str.pem":"data_files/enco-ca-prstr.pem":"data_files/crl.pem":"NULL":0:0:"compat":"NULL"
Manuel Pégourié-Gonnard9c911da2014-10-17 12:23:49 +0200[diff] [blame]893
Hanno Becker2389d162019-02-14 12:52:47 +0000[diff] [blame]894X509 CRT verification #76 (multiple CRLs, not revoked)
palaviva07ecda2016-08-07 11:15:29 +0300[diff] [blame]895depends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_ECDSA_C:MBEDTLS_ECP_DP_SECP384R1_ENABLED:MBEDTLS_ECP_DP_SECP256R1_ENABLED:MBEDTLS_SHA256_C:MBEDTLS_RSA_C:MBEDTLS_SHA1_C
Gilles Peskineef86ab22017-05-05 18:59:02 +0200[diff] [blame]896x509_verify:"data_files/server5.crt":"data_files/test-ca_cat12.crt":"data_files/crl_cat_ec-rsa.pem":"NULL":0:0:"compat":"NULL"
Manuel Pégourié-Gonnard57a5d602014-11-19 14:04:09 +0100[diff] [blame]897
Hanno Becker2389d162019-02-14 12:52:47 +0000[diff] [blame]898X509 CRT verification #77 (multiple CRLs, revoked)
Deomid Ryabkovde420a42016-11-27 14:50:06 +0000[diff] [blame]899depends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_ECDSA_C:MBEDTLS_ECP_DP_SECP384R1_ENABLED:MBEDTLS_ECP_DP_SECP256R1_ENABLED:MBEDTLS_SHA256_C:MBEDTLS_RSA_C:MBEDTLS_SHA1_C:MBEDTLS_HAVE_TIME_DATE
Gilles Peskineef86ab22017-05-05 18:59:02 +0200[diff] [blame]900x509_verify:"data_files/server6.crt":"data_files/test-ca_cat12.crt":"data_files/crl_cat_ec-rsa.pem":"NULL":MBEDTLS_ERR_X509_CERT_VERIFY_FAILED:MBEDTLS_X509_BADCERT_REVOKED:"compat":"NULL"
Manuel Pégourié-Gonnard57a5d602014-11-19 14:04:09 +0100[diff] [blame]901
Hanno Becker2389d162019-02-14 12:52:47 +0000[diff] [blame]902X509 CRT verification #78 (multiple CRLs, revoked by second)
Deomid Ryabkovde420a42016-11-27 14:50:06 +0000[diff] [blame]903depends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_ECDSA_C:MBEDTLS_ECP_DP_SECP384R1_ENABLED:MBEDTLS_ECP_DP_SECP256R1_ENABLED:MBEDTLS_SHA256_C:MBEDTLS_RSA_C:MBEDTLS_SHA1_C:MBEDTLS_HAVE_TIME_DATE
Gilles Peskineef86ab22017-05-05 18:59:02 +0200[diff] [blame]904x509_verify:"data_files/server6.crt":"data_files/test-ca_cat12.crt":"data_files/crl_cat_rsa-ec.pem":"NULL":MBEDTLS_ERR_X509_CERT_VERIFY_FAILED:MBEDTLS_X509_BADCERT_REVOKED:"compat":"NULL"
Manuel Pégourié-Gonnard57a5d602014-11-19 14:04:09 +0100[diff] [blame]905
Hanno Becker2389d162019-02-14 12:52:47 +0000[diff] [blame]906X509 CRT verification #79 (multiple CRLs, revoked by future)
Deomid Ryabkovde420a42016-11-27 14:50:06 +0000[diff] [blame]907depends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_ECDSA_C:MBEDTLS_ECP_DP_SECP384R1_ENABLED:MBEDTLS_ECP_DP_SECP256R1_ENABLED:MBEDTLS_SHA256_C:MBEDTLS_RSA_C:MBEDTLS_SHA1_C:MBEDTLS_HAVE_TIME_DATE
Gilles Peskineef86ab22017-05-05 18:59:02 +0200[diff] [blame]908x509_verify:"data_files/server6.crt":"data_files/test-ca_cat12.crt":"data_files/crl_cat_ecfut-rsa.pem":"NULL":MBEDTLS_ERR_X509_CERT_VERIFY_FAILED:MBEDTLS_X509_BADCERT_REVOKED|MBEDTLS_X509_BADCRL_FUTURE:"compat":"NULL"
Manuel Pégourié-Gonnard57a5d602014-11-19 14:04:09 +0100[diff] [blame]909
Hanno Becker2389d162019-02-14 12:52:47 +0000[diff] [blame]910X509 CRT verification #80 (multiple CRLs, first future, revoked by second)
Deomid Ryabkovde420a42016-11-27 14:50:06 +0000[diff] [blame]911depends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_ECDSA_C:MBEDTLS_ECP_DP_SECP384R1_ENABLED:MBEDTLS_ECP_DP_SECP256R1_ENABLED:MBEDTLS_SHA256_C:MBEDTLS_RSA_C:MBEDTLS_PKCS1_V15:MBEDTLS_SHA1_C:MBEDTLS_HAVE_TIME_DATE
Gilles Peskineef86ab22017-05-05 18:59:02 +0200[diff] [blame]912x509_verify:"data_files/server1.crt":"data_files/test-ca_cat12.crt":"data_files/crl_cat_ecfut-rsa.pem":"NULL":MBEDTLS_ERR_X509_CERT_VERIFY_FAILED:MBEDTLS_X509_BADCERT_REVOKED:"compat":"NULL"
Manuel Pégourié-Gonnard57a5d602014-11-19 14:04:09 +0100[diff] [blame]913
Hanno Becker2389d162019-02-14 12:52:47 +0000[diff] [blame]914X509 CRT verification #81 (multiple CRLs, none relevant)
Manuel Pégourié-Gonnard43be6cd2017-06-20 09:53:42 +0200[diff] [blame]915depends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_ECDSA_C:MBEDTLS_ECP_DP_SECP384R1_ENABLED:MBEDTLS_ECP_DP_SECP256R1_ENABLED:MBEDTLS_SHA256_C:MBEDTLS_RSA_C:MBEDTLS_PKCS1_V15:MBEDTLS_SHA1_C
Gilles Peskineef86ab22017-05-05 18:59:02 +0200[diff] [blame]916x509_verify:"data_files/enco-cert-utf8str.pem":"data_files/enco-ca-prstr.pem":"data_files/crl_cat_rsa-ec.pem":"NULL":0:0:"compat":"NULL"
Manuel Pégourié-Gonnard57a5d602014-11-19 14:04:09 +0100[diff] [blame]917
Hanno Becker2389d162019-02-14 12:52:47 +0000[diff] [blame]918X509 CRT verification #82 (Not yet valid CA and valid CA)
Manuel Pégourié-Gonnard43be6cd2017-06-20 09:53:42 +0200[diff] [blame]919depends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_ECDSA_C:MBEDTLS_ECP_DP_SECP256R1_ENABLED:MBEDTLS_ECP_DP_SECP384R1_ENABLED:MBEDTLS_SHA1_C:MBEDTLS_SHA256_C
Gilles Peskineef86ab22017-05-05 18:59:02 +0200[diff] [blame]920x509_verify:"data_files/server5.crt":"data_files/test-ca2_cat-future-present.crt":"data_files/crl-ec-sha1.pem":"NULL":0:0:"compat":"NULL"
Janos Follath12c868c2016-02-18 17:28:04 +0000[diff] [blame]921
Hanno Becker2389d162019-02-14 12:52:47 +0000[diff] [blame]922X509 CRT verification #83 (valid CA and Not yet valid CA)
Manuel Pégourié-Gonnard43be6cd2017-06-20 09:53:42 +0200[diff] [blame]923depends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_ECDSA_C:MBEDTLS_ECP_DP_SECP256R1_ENABLED:MBEDTLS_ECP_DP_SECP384R1_ENABLED:MBEDTLS_SHA1_C:MBEDTLS_SHA256_C
Gilles Peskineef86ab22017-05-05 18:59:02 +0200[diff] [blame]924x509_verify:"data_files/server5.crt":"data_files/test-ca2_cat-present-future.crt":"data_files/crl-ec-sha1.pem":"NULL":0:0:"compat":"NULL"
Janos Follath12c868c2016-02-18 17:28:04 +0000[diff] [blame]925
Hanno Becker2389d162019-02-14 12:52:47 +0000[diff] [blame]926X509 CRT verification #84 (valid CA and Not yet valid CA)
Manuel Pégourié-Gonnard43be6cd2017-06-20 09:53:42 +0200[diff] [blame]927depends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_ECDSA_C:MBEDTLS_ECP_DP_SECP256R1_ENABLED:MBEDTLS_ECP_DP_SECP384R1_ENABLED:MBEDTLS_SHA1_C:MBEDTLS_SHA256_C
Gilles Peskineef86ab22017-05-05 18:59:02 +0200[diff] [blame]928x509_verify:"data_files/server5.crt":"data_files/test-ca2_cat-present-past.crt":"data_files/crl-ec-sha1.pem":"NULL":0:0:"compat":"NULL"
Janos Follathdf4bca22016-02-19 15:57:17 +0000[diff] [blame]929
Hanno Becker2389d162019-02-14 12:52:47 +0000[diff] [blame]930X509 CRT verification #85 (Not yet valid CA and valid CA)
Manuel Pégourié-Gonnard43be6cd2017-06-20 09:53:42 +0200[diff] [blame]931depends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_ECDSA_C:MBEDTLS_ECP_DP_SECP256R1_ENABLED:MBEDTLS_ECP_DP_SECP384R1_ENABLED:MBEDTLS_SHA1_C:MBEDTLS_SHA256_C
Gilles Peskineef86ab22017-05-05 18:59:02 +0200[diff] [blame]932x509_verify:"data_files/server5.crt":"data_files/test-ca2_cat-past-present.crt":"data_files/crl-ec-sha1.pem":"NULL":0:0:"compat":"NULL"
Janos Follathdf4bca22016-02-19 15:57:17 +0000[diff] [blame]933
Hanno Becker2389d162019-02-14 12:52:47 +0000[diff] [blame]934X509 CRT verification #86 (Not yet valid CA and invalid CA)
Deomid Ryabkovde420a42016-11-27 14:50:06 +0000[diff] [blame]935depends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_ECDSA_C:MBEDTLS_ECP_DP_SECP256R1_ENABLED:MBEDTLS_ECP_DP_SECP384R1_ENABLED:MBEDTLS_SHA1_C:MBEDTLS_SHA256_C:MBEDTLS_HAVE_TIME_DATE
Gilles Peskineef86ab22017-05-05 18:59:02 +0200[diff] [blame]936x509_verify:"data_files/server5.crt":"data_files/test-ca2_cat-future-invalid.crt":"data_files/crl-ec-sha1.pem":"NULL":MBEDTLS_ERR_X509_CERT_VERIFY_FAILED:MBEDTLS_X509_BADCERT_FUTURE:"compat":"NULL"
Andres AG9f430c12016-12-13 09:59:07 +0000[diff] [blame]937
Hanno Becker2389d162019-02-14 12:52:47 +0000[diff] [blame]938X509 CRT verification #87 (Expired CA and invalid CA)
Deomid Ryabkovde420a42016-11-27 14:50:06 +0000[diff] [blame]939depends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_ECDSA_C:MBEDTLS_ECP_DP_SECP256R1_ENABLED:MBEDTLS_ECP_DP_SECP384R1_ENABLED:MBEDTLS_SHA1_C:MBEDTLS_SHA256_C:MBEDTLS_HAVE_TIME_DATE
Gilles Peskineef86ab22017-05-05 18:59:02 +0200[diff] [blame]940x509_verify:"data_files/server5.crt":"data_files/test-ca2_cat-past-invalid.crt":"data_files/crl-ec-sha1.pem":"NULL":MBEDTLS_ERR_X509_CERT_VERIFY_FAILED:MBEDTLS_X509_BADCERT_EXPIRED:"compat":"NULL"
Andres AG9f430c12016-12-13 09:59:07 +0000[diff] [blame]941
Hanno Becker2389d162019-02-14 12:52:47 +0000[diff] [blame]942X509 CRT verification #88 (Spurious cert in the chain)
Manuel Pégourié-Gonnard43be6cd2017-06-20 09:53:42 +0200[diff] [blame]943depends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_ECDSA_C:MBEDTLS_ECP_DP_SECP256R1_ENABLED:MBEDTLS_ECP_DP_SECP384R1_ENABLED:MBEDTLS_SHA1_C:MBEDTLS_SHA256_C:MBEDTLS_RSA_C:MBEDTLS_PKCS1_V15
Manuel Pégourié-Gonnardb341dd52017-06-06 10:25:43 +0200[diff] [blame]944x509_verify:"data_files/server7_spurious_int-ca.crt":"data_files/test-ca2.crt":"data_files/crl-ec-sha1.pem":"NULL":0:0:"compat":"NULL"
945
Hanno Becker2389d162019-02-14 12:52:47 +0000[diff] [blame]946X509 CRT verification #89 (Spurious cert later in the chain)
Manuel Pégourié-Gonnard43be6cd2017-06-20 09:53:42 +0200[diff] [blame]947depends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_ECDSA_C:MBEDTLS_ECP_DP_SECP256R1_ENABLED:MBEDTLS_ECP_DP_SECP384R1_ENABLED:MBEDTLS_SHA1_C:MBEDTLS_SHA256_C:MBEDTLS_RSA_C:MBEDTLS_PKCS1_V15
Manuel Pégourié-Gonnardb341dd52017-06-06 10:25:43 +0200[diff] [blame]948x509_verify:"data_files/server10_int3_spurious_int-ca2.crt":"data_files/test-ca.crt":"data_files/crl-ec-sha1.pem":"NULL":0:0:"compat":"NULL"
949
Hanno Becker2389d162019-02-14 12:52:47 +0000[diff] [blame]950X509 CRT verification #90 (EE with same name as trusted root)
Manuel Pégourié-Gonnardc10afdb2017-06-29 09:48:08 +0200[diff] [blame]951depends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_ECDSA_C:MBEDTLS_ECP_DP_SECP256R1_ENABLED:MBEDTLS_SHA256_C:MBEDTLS_SHA1_C
Manuel Pégourié-Gonnarda54f6cc2017-08-09 10:41:42 +0200[diff] [blame]952x509_verify:"data_files/server5-ss-forgeca.crt":"data_files/test-int-ca3.crt":"data_files/crl-ec-sha1.pem":"NULL":MBEDTLS_ERR_X509_CERT_VERIFY_FAILED:MBEDTLS_X509_BADCERT_NOT_TRUSTED:"":"NULL"
Manuel Pégourié-Gonnardc10afdb2017-06-29 09:48:08 +0200[diff] [blame]953
Hanno Becker2389d162019-02-14 12:52:47 +0000[diff] [blame]954X509 CRT verification #91 (same CA with good then bad key)
Manuel Pégourié-Gonnard2d825d42017-07-03 18:06:38 +0200[diff] [blame]955depends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_SHA1_C:MBEDTLS_RSA_C:MBEDTLS_PKCS1_V15:MBEDTLS_SHA256_C:MBEDTLS_ECDSA_C
956x509_verify:"data_files/server1.crt":"data_files/test-ca-good-alt.crt":"data_files/crl-ec-sha256.pem":"NULL":0:0:"compat":"NULL"
957
Hanno Becker2389d162019-02-14 12:52:47 +0000[diff] [blame]958X509 CRT verification #91 (same CA with bad then good key)
Manuel Pégourié-Gonnard2d825d42017-07-03 18:06:38 +0200[diff] [blame]959depends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_SHA1_C:MBEDTLS_RSA_C:MBEDTLS_PKCS1_V15:MBEDTLS_SHA256_C:MBEDTLS_ECDSA_C
960x509_verify:"data_files/server1.crt":"data_files/test-ca-alt-good.crt":"data_files/crl-ec-sha256.pem":"NULL":0:0:"compat":"NULL"
961
Hanno Becker2389d162019-02-14 12:52:47 +0000[diff] [blame]962X509 CRT verification #92 (bad name, allowing callback)
Manuel Pégourié-Gonnarda6568252017-07-05 18:14:38 +0200[diff] [blame]963depends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_ECDSA_C:MBEDTLS_SHA256_C:MBEDTLS_ECP_DP_SECP256R1_ENABLED:MBEDTLS_ECP_DP_SECP384R1_ENABLED
Manuel Pégourié-Gonnarda54f6cc2017-08-09 10:41:42 +0200[diff] [blame]964x509_verify:"data_files/server5.crt":"data_files/test-ca2.crt":"data_files/crl-ec-sha256.pem":"globalhost":0:0:"":"verify_all"
Manuel Pégourié-Gonnarda6568252017-07-05 18:14:38 +0200[diff] [blame]965
Hanno Becker2389d162019-02-14 12:52:47 +0000[diff] [blame]966X509 CRT verification #93 (Suite B invalid, EC cert, RSA CA)
Ron Eldorc1539982018-02-06 18:47:17 +0200[diff] [blame]967depends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_RSA_C:MBEDTLS_ECP_C:MBEDTLS_ECP_DP_SECP192R1_ENABLED:MBEDTLS_PKCS1_V15:MBEDTLS_SHA1_C
968x509_verify:"data_files/server3.crt":"data_files/test-ca.crt":"data_files/crl.pem":"NULL":MBEDTLS_ERR_X509_CERT_VERIFY_FAILED:MBEDTLS_X509_BADCERT_BAD_MD|MBEDTLS_X509_BADCERT_BAD_PK|MBEDTLS_X509_BADCERT_BAD_KEY|MBEDTLS_X509_BADCRL_BAD_MD|MBEDTLS_X509_BADCRL_BAD_PK:"suite_b":"NULL"
969
Hanno Becker2389d162019-02-14 12:52:47 +0000[diff] [blame]970X509 CRT verification #94 (Suite B invalid, RSA cert, EC CA)
Manuel Pégourié-Gonnard147b28e2018-03-12 15:26:59 +0100[diff] [blame]971depends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_RSA_C:MBEDTLS_ECDSA_C:MBEDTLS_SHA256_C:MBEDTLS_ECP_DP_SECP256R1_ENABLED:MBEDTLS_PKCS1_V15:MBEDTLS_ECP_DP_SECP384R1_ENABLED
Ron Eldorc1539982018-02-06 18:47:17 +0200[diff] [blame]972x509_verify:"data_files/server4.crt":"data_files/test-ca2.crt":"data_files/crl-ec-sha256.pem":"NULL":MBEDTLS_ERR_X509_CERT_VERIFY_FAILED:MBEDTLS_X509_BADCERT_BAD_PK:"suite_b":"NULL"
973
Hanno Becker2389d162019-02-14 12:52:47 +0000[diff] [blame]974X509 CRT verification #95 (Suite B Valid, EC cert, EC CA)
Manuel Pégourié-Gonnard147b28e2018-03-12 15:26:59 +0100[diff] [blame]975depends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_ECDSA_C:MBEDTLS_SHA256_C:MBEDTLS_ECP_DP_SECP256R1_ENABLED:MBEDTLS_ECP_DP_SECP384R1_ENABLED
Ron Eldorc1539982018-02-06 18:47:17 +0200[diff] [blame]976x509_verify:"data_files/server5.crt":"data_files/test-ca2.crt":"data_files/crl-ec-sha256.pem":"NULL":0:0:"suite_b":"NULL"
977
Hanno Becker2389d162019-02-14 12:52:47 +0000[diff] [blame]978X509 CRT verification #96 (next profile Invalid Cert SHA224 Digest)
Manuel Pégourié-Gonnard88a8dcb2018-03-12 15:49:35 +0100[diff] [blame]979depends_on:MBEDTLS_SHA256_C:MBEDTLS_PEM_PARSE_C:MBEDTLS_RSA_C:MBEDTLS_PKCS1_V15:MBEDTLS_SHA1_C
Ron Eldorc1539982018-02-06 18:47:17 +0200[diff] [blame]980x509_verify:"data_files/cert_sha224.crt":"data_files/test-ca.crt":"data_files/crl.pem":"NULL":MBEDTLS_ERR_X509_CERT_VERIFY_FAILED:MBEDTLS_X509_BADCERT_BAD_MD|MBEDTLS_X509_BADCRL_BAD_MD:"next":"NULL"
981
Hanno Becker2389d162019-02-14 12:52:47 +0000[diff] [blame]982X509 CRT verification #97 (next profile Valid Cert SHA256 Digest)
Manuel Pégourié-Gonnard88a8dcb2018-03-12 15:49:35 +0100[diff] [blame]983depends_on:MBEDTLS_SHA256_C:MBEDTLS_PEM_PARSE_C:MBEDTLS_RSA_C:MBEDTLS_PKCS1_V15:MBEDTLS_ECDSA_C:MBEDTLS_SHA1_C
Ron Eldorc1539982018-02-06 18:47:17 +0200[diff] [blame]984x509_verify:"data_files/cert_sha256.crt":"data_files/test-ca.crt":"data_files/crl-ec-sha256.pem":"NULL":0:0:"next":"NULL"
985
Raoul Strackxa4e86142020-06-15 17:03:13 +0200[diff] [blame]986X509 CRT verification #98 (Revoked Cert, revocation date in the future, _with_ MBEDTLS_HAVE_TIME_DATE)
987depends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_SHA1_C:MBEDTLS_RSA_C:MBEDTLS_PKCS1_V15:MBEDTLS_HAVE_TIME_DATE
988x509_verify:"data_files/server1.crt":"data_files/test-ca.crt":"data_files/crl-futureRevocationDate.pem":"NULL":MBEDTLS_ERR_X509_CERT_VERIFY_FAILED:MBEDTLS_X509_BADCERT_REVOKED|MBEDTLS_X509_BADCRL_FUTURE:"compat":"NULL"
989
990X509 CRT verification #99 (Revoked Cert, revocation date in the future, _without_ MBEDTLS_HAVE_TIME_DATE)
991depends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_SHA1_C:MBEDTLS_RSA_C:MBEDTLS_PKCS1_V15:!MBEDTLS_HAVE_TIME_DATE
992x509_verify:"data_files/server1.crt":"data_files/test-ca.crt":"data_files/crl-futureRevocationDate.pem":"NULL":MBEDTLS_ERR_X509_CERT_VERIFY_FAILED:MBEDTLS_X509_BADCERT_REVOKED:"compat":"NULL"
993
Manuel Pégourié-Gonnard7d2a4d82020-07-23 12:39:53 +0200[diff] [blame]994X509 CRT verification: domain identical to IPv4 in SubjectAltName
995depends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_ECDSA_C:MBEDTLS_SHA256_C:MBEDTLS_ECP_DP_SECP256R1_ENABLED:MBEDTLS_RSA_C
996x509_verify:"data_files/server5-tricky-ip-san.crt":"data_files/server5-tricky-ip-san.crt":"data_files/crl_sha256.pem":"abcd":MBEDTLS_ERR_X509_CERT_VERIFY_FAILED:MBEDTLS_X509_BADCERT_CN_MISMATCH:"":"NULL"
997
998X509 CRT verification: domain identical to IPv6 in SubjectAltName
999depends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_ECDSA_C:MBEDTLS_SHA256_C:MBEDTLS_ECP_DP_SECP256R1_ENABLED:MBEDTLS_RSA_C
1000x509_verify:"data_files/server5-tricky-ip-san.crt":"data_files/server5-tricky-ip-san.crt":"data_files/crl_sha256.pem":"abcd.example.com":MBEDTLS_ERR_X509_CERT_VERIFY_FAILED:MBEDTLS_X509_BADCERT_CN_MISMATCH:"":"NULL"
1001
Hanno Becker2389d162019-02-14 12:52:47 +0000[diff] [blame]1002X509 CRT verification with ca callback: failure
Jarno Lamsa557426a2019-03-27 17:08:29 +0200[diff] [blame]1003depends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_SHA1_C:MBEDTLS_RSA_C:MBEDTLS_PKCS1_V15:MBEDTLS_X509_TRUSTED_CERTIFICATE_CALLBACK
Hanno Beckercbb59032019-03-28 14:14:22 +0000[diff] [blame]1004x509_verify_ca_cb_failure:"data_files/server1.crt":"data_files/test-ca.crt":"NULL":MBEDTLS_ERR_X509_FATAL_ERROR
Jarno Lamsa557426a2019-03-27 17:08:29 +0200[diff] [blame]1005
Hanno Becker2389d162019-02-14 12:52:47 +0000[diff] [blame]1006X509 CRT verification callback: bad name
Manuel Pégourié-Gonnarda6568252017-07-05 18:14:38 +0200[diff] [blame]1007depends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_ECDSA_C:MBEDTLS_SHA256_C:MBEDTLS_ECP_DP_SECP256R1_ENABLED:MBEDTLS_ECP_DP_SECP384R1_ENABLED
Manuel Pégourié-Gonnardbe2f0b52017-08-21 11:00:22 +0200[diff] [blame]1008x509_verify_callback:"data_files/server5.crt":"data_files/test-ca2.crt":"globalhost":MBEDTLS_ERR_X509_CERT_VERIFY_FAILED:"depth 1 - serial C1\:43\:E2\:7E\:62\:43\:CC\:E8 - subject C=NL, O=PolarSSL, CN=Polarssl Test EC CA - flags 0x00000000\ndepth 0 - serial 09 - subject C=NL, O=PolarSSL, CN=localhost - flags 0x00000004\n"
Manuel Pégourié-Gonnarda6568252017-07-05 18:14:38 +0200[diff] [blame]1009
Hanno Becker2389d162019-02-14 12:52:47 +0000[diff] [blame]1010X509 CRT verification callback: trusted EE cert
Manuel Pégourié-Gonnard560fea32015-09-01 11:59:24 +0200[diff] [blame]1011depends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_ECDSA_C:MBEDTLS_SHA256_C:MBEDTLS_ECP_DP_SECP256R1_ENABLED
Manuel Pégourié-Gonnardbe2f0b52017-08-21 11:00:22 +0200[diff] [blame]1012x509_verify_callback:"data_files/server5-selfsigned.crt":"data_files/server5-selfsigned.crt":"NULL":0:"depth 0 - serial 53\:A2\:CB\:4B\:12\:4E\:AD\:83\:7D\:A8\:94\:B2 - subject CN=selfsigned, OU=testing, O=PolarSSL, C=NL - flags 0x00000000\n"
Manuel Pégourié-Gonnard560fea32015-09-01 11:59:24 +0200[diff] [blame]1013
Hanno Becker2389d162019-02-14 12:52:47 +0000[diff] [blame]1014X509 CRT verification callback: trusted EE cert, expired
Deomid Ryabkovde420a42016-11-27 14:50:06 +0000[diff] [blame]1015depends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_ECDSA_C:MBEDTLS_SHA256_C:MBEDTLS_ECP_DP_SECP256R1_ENABLED:MBEDTLS_HAVE_TIME_DATE
Manuel Pégourié-Gonnardbe2f0b52017-08-21 11:00:22 +0200[diff] [blame]1016x509_verify_callback:"data_files/server5-ss-expired.crt":"data_files/server5-ss-expired.crt":"NULL":MBEDTLS_ERR_X509_CERT_VERIFY_FAILED:"depth 0 - serial D8\:64\:61\:05\:E3\:A3\:CD\:78 - subject C=UK, O=mbed TLS, OU=testsuite, CN=localhost - flags 0x00000001\n"
Manuel Pégourié-Gonnardbc313012017-06-27 12:51:52 +0200[diff] [blame]1017
Hanno Becker2389d162019-02-14 12:52:47 +0000[diff] [blame]1018X509 CRT verification callback: simple
Manuel Pégourié-Gonnard560fea32015-09-01 11:59:24 +0200[diff] [blame]1019depends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_SHA1_C:MBEDTLS_RSA_C:MBEDTLS_PKCS1_V15
Hanno Becker381c77c2018-11-01 15:07:42 +0000[diff] [blame]1020x509_verify_callback:"data_files/server1.crt":"data_files/test-ca.crt":"NULL":0:"depth 1 - serial 03 - subject C=NL, O=PolarSSL, CN=PolarSSL Test CA - flags 0x00000000\ndepth 0 - serial 01 - subject C=NL, O=PolarSSL, CN=PolarSSL Server 1 - flags 0x00000000\n"
Manuel Pégourié-Gonnard560fea32015-09-01 11:59:24 +0200[diff] [blame]1021
Hanno Becker2389d162019-02-14 12:52:47 +0000[diff] [blame]1022X509 CRT verification callback: simple, EE expired
Deomid Ryabkovde420a42016-11-27 14:50:06 +0000[diff] [blame]1023depends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_SHA256_C:MBEDTLS_ECDSA_C:MBEDTLS_ECP_DP_SECP256R1_ENABLED:MBEDTLS_ECP_DP_SECP384R1_ENABLED:MBEDTLS_SHA1_C:MBEDTLS_HAVE_TIME_DATE
Manuel Pégourié-Gonnardbe2f0b52017-08-21 11:00:22 +0200[diff] [blame]1024x509_verify_callback:"data_files/server5-expired.crt":"data_files/test-ca2.crt":"NULL":MBEDTLS_ERR_X509_CERT_VERIFY_FAILED:"depth 1 - serial C1\:43\:E2\:7E\:62\:43\:CC\:E8 - subject C=NL, O=PolarSSL, CN=Polarssl Test EC CA - flags 0x00000000\ndepth 0 - serial 1E - subject C=NL, O=PolarSSL, CN=localhost - flags 0x00000001\n"
Manuel Pégourié-Gonnardbc313012017-06-27 12:51:52 +0200[diff] [blame]1025
Hanno Becker2389d162019-02-14 12:52:47 +0000[diff] [blame]1026X509 CRT verification callback: simple, root expired
Deomid Ryabkovde420a42016-11-27 14:50:06 +0000[diff] [blame]1027depends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_SHA256_C:MBEDTLS_ECDSA_C:MBEDTLS_ECP_DP_SECP256R1_ENABLED:MBEDTLS_ECP_DP_SECP384R1_ENABLED:MBEDTLS_SHA1_C:MBEDTLS_HAVE_TIME_DATE
Manuel Pégourié-Gonnardbe2f0b52017-08-21 11:00:22 +0200[diff] [blame]1028x509_verify_callback:"data_files/server5.crt":"data_files/test-ca2-expired.crt":"NULL":MBEDTLS_ERR_X509_CERT_VERIFY_FAILED:"depth 1 - serial 01 - subject C=NL, O=PolarSSL, CN=Polarssl Test EC CA - flags 0x00000001\ndepth 0 - serial 09 - subject C=NL, O=PolarSSL, CN=localhost - flags 0x00000000\n"
Manuel Pégourié-Gonnardbc313012017-06-27 12:51:52 +0200[diff] [blame]1029
Hanno Becker2389d162019-02-14 12:52:47 +0000[diff] [blame]1030X509 CRT verification callback: two trusted roots
palaviva07ecda2016-08-07 11:15:29 +0300[diff] [blame]1031depends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_SHA1_C:MBEDTLS_RSA_C:MBEDTLS_PKCS1_V15:MBEDTLS_ECDSA_C:MBEDTLS_ECP_DP_SECP384R1_ENABLED:MBEDTLS_SHA256_C
Hanno Becker381c77c2018-11-01 15:07:42 +0000[diff] [blame]1032x509_verify_callback:"data_files/server1.crt":"data_files/test-ca_cat12.crt":"NULL":0:"depth 1 - serial 03 - subject C=NL, O=PolarSSL, CN=PolarSSL Test CA - flags 0x00000000\ndepth 0 - serial 01 - subject C=NL, O=PolarSSL, CN=PolarSSL Server 1 - flags 0x00000000\n"
Manuel Pégourié-Gonnard560fea32015-09-01 11:59:24 +0200[diff] [blame]1033
Hanno Becker2389d162019-02-14 12:52:47 +0000[diff] [blame]1034X509 CRT verification callback: two trusted roots, reversed order
palaviva07ecda2016-08-07 11:15:29 +0300[diff] [blame]1035depends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_SHA1_C:MBEDTLS_RSA_C:MBEDTLS_PKCS1_V15:MBEDTLS_ECDSA_C:MBEDTLS_ECP_DP_SECP384R1_ENABLED:MBEDTLS_SHA256_C
Hanno Becker381c77c2018-11-01 15:07:42 +0000[diff] [blame]1036x509_verify_callback:"data_files/server1.crt":"data_files/test-ca_cat21.crt":"NULL":0:"depth 1 - serial 03 - subject C=NL, O=PolarSSL, CN=PolarSSL Test CA - flags 0x00000000\ndepth 0 - serial 01 - subject C=NL, O=PolarSSL, CN=PolarSSL Server 1 - flags 0x00000000\n"
Manuel Pégourié-Gonnard560fea32015-09-01 11:59:24 +0200[diff] [blame]1037
Hanno Becker2389d162019-02-14 12:52:47 +0000[diff] [blame]1038X509 CRT verification callback: root included
palaviva07ecda2016-08-07 11:15:29 +0300[diff] [blame]1039depends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_SHA1_C:MBEDTLS_RSA_C:MBEDTLS_PKCS1_V15:MBEDTLS_ECDSA_C:MBEDTLS_ECP_DP_SECP384R1_ENABLED:MBEDTLS_SHA256_C
Hanno Becker381c77c2018-11-01 15:07:42 +0000[diff] [blame]1040x509_verify_callback:"data_files/server1_ca.crt":"data_files/test-ca_cat21.crt":"NULL":0:"depth 1 - serial 03 - subject C=NL, O=PolarSSL, CN=PolarSSL Test CA - flags 0x00000000\ndepth 0 - serial 01 - subject C=NL, O=PolarSSL, CN=PolarSSL Server 1 - flags 0x00000000\n"
Manuel Pégourié-Gonnard560fea32015-09-01 11:59:24 +0200[diff] [blame]1041
Hanno Becker2389d162019-02-14 12:52:47 +0000[diff] [blame]1042X509 CRT verification callback: intermediate ca
Manuel Pégourié-Gonnard43be6cd2017-06-20 09:53:42 +0200[diff] [blame]1043depends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_ECDSA_C:MBEDTLS_RSA_C:MBEDTLS_ECP_DP_SECP256R1_ENABLED:MBEDTLS_ECP_DP_SECP384R1_ENABLED:MBEDTLS_RSA_C:MBEDTLS_PKCS1_V15:MBEDTLS_SHA256_C:MBEDTLS_SHA1_C
Manuel Pégourié-Gonnardbe2f0b52017-08-21 11:00:22 +0200[diff] [blame]1044x509_verify_callback:"data_files/server7_int-ca.crt":"data_files/test-ca_cat12.crt":"NULL":0:"depth 2 - serial C1\:43\:E2\:7E\:62\:43\:CC\:E8 - subject C=NL, O=PolarSSL, CN=Polarssl Test EC CA - flags 0x00000000\ndepth 1 - serial 0E - subject C=NL, O=PolarSSL, CN=PolarSSL Test Intermediate CA - flags 0x00000000\ndepth 0 - serial 10 - subject C=NL, O=PolarSSL, CN=localhost - flags 0x00000000\n"
Manuel Pégourié-Gonnard560fea32015-09-01 11:59:24 +0200[diff] [blame]1045
Hanno Becker2389d162019-02-14 12:52:47 +0000[diff] [blame]1046X509 CRT verification callback: intermediate ca, root included
Manuel Pégourié-Gonnard43be6cd2017-06-20 09:53:42 +0200[diff] [blame]1047depends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_ECDSA_C:MBEDTLS_RSA_C:MBEDTLS_ECP_DP_SECP256R1_ENABLED:MBEDTLS_ECP_DP_SECP384R1_ENABLED:MBEDTLS_RSA_C:MBEDTLS_PKCS1_V15:MBEDTLS_SHA256_C:MBEDTLS_SHA1_C
Manuel Pégourié-Gonnardbe2f0b52017-08-21 11:00:22 +0200[diff] [blame]1048x509_verify_callback:"data_files/server7_int-ca_ca2.crt":"data_files/test-ca_cat12.crt":"NULL":0:"depth 2 - serial C1\:43\:E2\:7E\:62\:43\:CC\:E8 - subject C=NL, O=PolarSSL, CN=Polarssl Test EC CA - flags 0x00000000\ndepth 1 - serial 0E - subject C=NL, O=PolarSSL, CN=PolarSSL Test Intermediate CA - flags 0x00000000\ndepth 0 - serial 10 - subject C=NL, O=PolarSSL, CN=localhost - flags 0x00000000\n"
Manuel Pégourié-Gonnard560fea32015-09-01 11:59:24 +0200[diff] [blame]1049
Hanno Becker2389d162019-02-14 12:52:47 +0000[diff] [blame]1050X509 CRT verification callback: intermediate ca trusted
Manuel Pégourié-Gonnard43be6cd2017-06-20 09:53:42 +0200[diff] [blame]1051depends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_ECDSA_C:MBEDTLS_RSA_C:MBEDTLS_ECP_DP_SECP256R1_ENABLED:MBEDTLS_ECP_DP_SECP384R1_ENABLED:MBEDTLS_RSA_C:MBEDTLS_PKCS1_V15:MBEDTLS_SHA256_C
Manuel Pégourié-Gonnardbe2f0b52017-08-21 11:00:22 +0200[diff] [blame]1052x509_verify_callback:"data_files/server7_int-ca_ca2.crt":"data_files/test-int-ca.crt":"NULL":0:"depth 1 - serial 0E - subject C=NL, O=PolarSSL, CN=PolarSSL Test Intermediate CA - flags 0x00000000\ndepth 0 - serial 10 - subject C=NL, O=PolarSSL, CN=localhost - flags 0x00000000\n"
Manuel Pégourié-Gonnardfdbdd722015-09-01 16:35:00 +0200[diff] [blame]1053
Hanno Becker2389d162019-02-14 12:52:47 +0000[diff] [blame]1054X509 CRT verification callback: intermediate ca, EE expired
Deomid Ryabkovde420a42016-11-27 14:50:06 +0000[diff] [blame]1055depends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_ECDSA_C:MBEDTLS_RSA_C:MBEDTLS_ECP_DP_SECP256R1_ENABLED:MBEDTLS_ECP_DP_SECP384R1_ENABLED:MBEDTLS_RSA_C:MBEDTLS_PKCS1_V15:MBEDTLS_SHA256_C:MBEDTLS_SHA1_C:MBEDTLS_HAVE_TIME_DATE
Manuel Pégourié-Gonnardbe2f0b52017-08-21 11:00:22 +0200[diff] [blame]1056x509_verify_callback:"data_files/server7-expired.crt":"data_files/test-ca2.crt":"NULL":MBEDTLS_ERR_X509_CERT_VERIFY_FAILED:"depth 2 - serial C1\:43\:E2\:7E\:62\:43\:CC\:E8 - subject C=NL, O=PolarSSL, CN=Polarssl Test EC CA - flags 0x00000000\ndepth 1 - serial 0E - subject C=NL, O=PolarSSL, CN=PolarSSL Test Intermediate CA - flags 0x00000000\ndepth 0 - serial 10 - subject C=NL, O=PolarSSL, CN=localhost - flags 0x00000001\n"
Manuel Pégourié-Gonnardbc313012017-06-27 12:51:52 +0200[diff] [blame]1057
Hanno Becker2389d162019-02-14 12:52:47 +0000[diff] [blame]1058X509 CRT verification callback: intermediate ca, int expired
Deomid Ryabkovde420a42016-11-27 14:50:06 +0000[diff] [blame]1059depends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_ECDSA_C:MBEDTLS_RSA_C:MBEDTLS_ECP_DP_SECP256R1_ENABLED:MBEDTLS_ECP_DP_SECP384R1_ENABLED:MBEDTLS_RSA_C:MBEDTLS_PKCS1_V15:MBEDTLS_SHA256_C:MBEDTLS_SHA1_C:MBEDTLS_HAVE_TIME_DATE
Manuel Pégourié-Gonnardbe2f0b52017-08-21 11:00:22 +0200[diff] [blame]1060x509_verify_callback:"data_files/server7_int-ca-exp.crt":"data_files/test-ca2.crt":"NULL":MBEDTLS_ERR_X509_CERT_VERIFY_FAILED:"depth 2 - serial C1\:43\:E2\:7E\:62\:43\:CC\:E8 - subject C=NL, O=PolarSSL, CN=Polarssl Test EC CA - flags 0x00000000\ndepth 1 - serial 0E - subject C=NL, O=PolarSSL, CN=PolarSSL Test Intermediate CA - flags 0x00000001\ndepth 0 - serial 10 - subject C=NL, O=PolarSSL, CN=localhost - flags 0x00000000\n"
Manuel Pégourié-Gonnardbc313012017-06-27 12:51:52 +0200[diff] [blame]1061
Hanno Becker2389d162019-02-14 12:52:47 +0000[diff] [blame]1062X509 CRT verification callback: intermediate ca, root expired
Deomid Ryabkovde420a42016-11-27 14:50:06 +0000[diff] [blame]1063depends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_ECDSA_C:MBEDTLS_RSA_C:MBEDTLS_ECP_DP_SECP256R1_ENABLED:MBEDTLS_ECP_DP_SECP384R1_ENABLED:MBEDTLS_RSA_C:MBEDTLS_PKCS1_V15:MBEDTLS_SHA256_C:MBEDTLS_SHA1_C:MBEDTLS_HAVE_TIME_DATE
Manuel Pégourié-Gonnardbe2f0b52017-08-21 11:00:22 +0200[diff] [blame]1064x509_verify_callback:"data_files/server7_int-ca.crt":"data_files/test-ca2-expired.crt":"NULL":MBEDTLS_ERR_X509_CERT_VERIFY_FAILED:"depth 2 - serial 01 - subject C=NL, O=PolarSSL, CN=Polarssl Test EC CA - flags 0x00000001\ndepth 1 - serial 0E - subject C=NL, O=PolarSSL, CN=PolarSSL Test Intermediate CA - flags 0x00000000\ndepth 0 - serial 10 - subject C=NL, O=PolarSSL, CN=localhost - flags 0x00000000\n"
Manuel Pégourié-Gonnardbc313012017-06-27 12:51:52 +0200[diff] [blame]1065
Hanno Becker2389d162019-02-14 12:52:47 +0000[diff] [blame]1066X509 CRT verification callback: two intermediates
Manuel Pégourié-Gonnard43be6cd2017-06-20 09:53:42 +0200[diff] [blame]1067depends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_ECDSA_C:MBEDTLS_RSA_C:MBEDTLS_ECP_DP_SECP256R1_ENABLED:MBEDTLS_ECP_DP_SECP384R1_ENABLED:MBEDTLS_RSA_C:MBEDTLS_PKCS1_V15:MBEDTLS_SHA256_C:MBEDTLS_SHA1_C
Hanno Becker381c77c2018-11-01 15:07:42 +0000[diff] [blame]1068x509_verify_callback:"data_files/server10_int3_int-ca2.crt":"data_files/test-ca_cat21.crt":"NULL":0:"depth 3 - serial 03 - subject C=NL, O=PolarSSL, CN=PolarSSL Test CA - flags 0x00000000\ndepth 2 - serial 0F - subject C=NL, O=PolarSSL, CN=PolarSSL Test Intermediate EC CA - flags 0x00000000\ndepth 1 - serial 4D - subject C=UK, O=mbed TLS, CN=mbed TLS Test intermediate CA 3 - flags 0x00000000\ndepth 0 - serial 4B - subject CN=localhost - flags 0x00000000\n"
Manuel Pégourié-Gonnard560fea32015-09-01 11:59:24 +0200[diff] [blame]1069
Hanno Becker2389d162019-02-14 12:52:47 +0000[diff] [blame]1070X509 CRT verification callback: two intermediates, root included
Manuel Pégourié-Gonnard43be6cd2017-06-20 09:53:42 +0200[diff] [blame]1071depends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_ECDSA_C:MBEDTLS_RSA_C:MBEDTLS_ECP_DP_SECP256R1_ENABLED:MBEDTLS_ECP_DP_SECP384R1_ENABLED:MBEDTLS_RSA_C:MBEDTLS_PKCS1_V15:MBEDTLS_SHA256_C:MBEDTLS_SHA1_C
Hanno Becker381c77c2018-11-01 15:07:42 +0000[diff] [blame]1072x509_verify_callback:"data_files/server10_int3_int-ca2_ca.crt":"data_files/test-ca_cat21.crt":"NULL":0:"depth 3 - serial 03 - subject C=NL, O=PolarSSL, CN=PolarSSL Test CA - flags 0x00000000\ndepth 2 - serial 0F - subject C=NL, O=PolarSSL, CN=PolarSSL Test Intermediate EC CA - flags 0x00000000\ndepth 1 - serial 4D - subject C=UK, O=mbed TLS, CN=mbed TLS Test intermediate CA 3 - flags 0x00000000\ndepth 0 - serial 4B - subject CN=localhost - flags 0x00000000\n"
Manuel Pégourié-Gonnard560fea32015-09-01 11:59:24 +0200[diff] [blame]1073
Hanno Becker2389d162019-02-14 12:52:47 +0000[diff] [blame]1074X509 CRT verification callback: two intermediates, top int trusted
Manuel Pégourié-Gonnard43be6cd2017-06-20 09:53:42 +0200[diff] [blame]1075depends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_ECDSA_C:MBEDTLS_RSA_C:MBEDTLS_ECP_DP_SECP256R1_ENABLED:MBEDTLS_ECP_DP_SECP384R1_ENABLED:MBEDTLS_RSA_C:MBEDTLS_PKCS1_V15:MBEDTLS_SHA256_C
Manuel Pégourié-Gonnardbe2f0b52017-08-21 11:00:22 +0200[diff] [blame]1076x509_verify_callback:"data_files/server10_int3_int-ca2.crt":"data_files/test-int-ca2.crt":"NULL":0:"depth 2 - serial 0F - subject C=NL, O=PolarSSL, CN=PolarSSL Test Intermediate EC CA - flags 0x00000000\ndepth 1 - serial 4D - subject C=UK, O=mbed TLS, CN=mbed TLS Test intermediate CA 3 - flags 0x00000000\ndepth 0 - serial 4B - subject CN=localhost - flags 0x00000000\n"
Manuel Pégourié-Gonnardfdbdd722015-09-01 16:35:00 +0200[diff] [blame]1077
Hanno Becker2389d162019-02-14 12:52:47 +0000[diff] [blame]1078X509 CRT verification callback: two intermediates, low int trusted
Manuel Pégourié-Gonnard43be6cd2017-06-20 09:53:42 +0200[diff] [blame]1079depends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_ECDSA_C:MBEDTLS_RSA_C:MBEDTLS_ECP_DP_SECP256R1_ENABLED:MBEDTLS_ECP_DP_SECP384R1_ENABLED:MBEDTLS_RSA_C:MBEDTLS_PKCS1_V15:MBEDTLS_SHA256_C:MBEDTLS_SHA1_C
Manuel Pégourié-Gonnardbe2f0b52017-08-21 11:00:22 +0200[diff] [blame]1080x509_verify_callback:"data_files/server10_int3_int-ca2_ca.crt":"data_files/test-int-ca3.crt":"NULL":0:"depth 1 - serial 4D - subject C=UK, O=mbed TLS, CN=mbed TLS Test intermediate CA 3 - flags 0x00000000\ndepth 0 - serial 4B - subject CN=localhost - flags 0x00000000\n"
Manuel Pégourié-Gonnardfdbdd722015-09-01 16:35:00 +0200[diff] [blame]1081
Hanno Becker2389d162019-02-14 12:52:47 +0000[diff] [blame]1082X509 CRT verification callback: no intermediate, bad signature
Manuel Pégourié-Gonnard9bc860c2017-07-14 11:32:38 +0200[diff] [blame]1083depends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_ECDSA_C:MBEDTLS_SHA256_C:MBEDTLS_ECP_DP_SECP256R1_ENABLED:MBEDTLS_ECP_DP_SECP384R1_ENABLED
Manuel Pégourié-Gonnardbe2f0b52017-08-21 11:00:22 +0200[diff] [blame]1084x509_verify_callback:"data_files/server5-badsign.crt":"data_files/test-ca2.crt":"NULL":MBEDTLS_ERR_X509_CERT_VERIFY_FAILED:"depth 0 - serial 09 - subject C=NL, O=PolarSSL, CN=localhost - flags 0x00000008\n"
Manuel Pégourié-Gonnard9bc860c2017-07-14 11:32:38 +0200[diff] [blame]1085
Hanno Becker2389d162019-02-14 12:52:47 +0000[diff] [blame]1086X509 CRT verification callback: one intermediate, bad signature
Manuel Pégourié-Gonnard9bc860c2017-07-14 11:32:38 +0200[diff] [blame]1087depends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_RSA_C:MBEDTLS_PKCS1_V15:MBEDTLS_SHA1_C:MBEDTLS_ECDSA_C:MBEDTLS_ECP_DP_SECP256R1_ENABLED:MBEDTLS_ECP_DP_SECP384R1_ENABLED:MBEDTLS_SHA256_C
Manuel Pégourié-Gonnardbe2f0b52017-08-21 11:00:22 +0200[diff] [blame]1088x509_verify_callback:"data_files/server7-badsign.crt":"data_files/test-ca2.crt":"NULL":MBEDTLS_ERR_X509_CERT_VERIFY_FAILED:"depth 2 - serial C1\:43\:E2\:7E\:62\:43\:CC\:E8 - subject C=NL, O=PolarSSL, CN=Polarssl Test EC CA - flags 0x00000000\ndepth 1 - serial 0E - subject C=NL, O=PolarSSL, CN=PolarSSL Test Intermediate CA - flags 0x00000000\ndepth 0 - serial 10 - subject C=NL, O=PolarSSL, CN=localhost - flags 0x00000008\n"
Manuel Pégourié-Gonnard9bc860c2017-07-14 11:32:38 +0200[diff] [blame]1089
Paul Bakker37940d9f2009-07-10 22:38:58 +0000[diff] [blame]1090X509 Parse Selftest
Manuel Pégourié-Gonnard43be6cd2017-06-20 09:53:42 +0200[diff] [blame]1091depends_on:MBEDTLS_SHA1_C:MBEDTLS_PEM_PARSE_C:MBEDTLS_CERTS_C:MBEDTLS_RSA_C:MBEDTLS_PKCS1_V15
Paul Bakker37940d9f2009-07-10 22:38:58 +0000[diff] [blame]1092x509_selftest:
Paul Bakkerb2c38f52009-07-19 19:36:15 +0000[diff] [blame]1093
Hanno Becker2389d162019-02-14 12:52:47 +0000[diff] [blame]1094X509 CRT ASN1 (Empty Certificate)
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200[diff] [blame]1095x509parse_crt:"":"":MBEDTLS_ERR_X509_INVALID_FORMAT
Paul Bakkerb2c38f52009-07-19 19:36:15 +0000[diff] [blame]1096
Hanno Becker2389d162019-02-14 12:52:47 +0000[diff] [blame]1097X509 CRT ASN1 (inv Certificate, bad tag)
Hanno Becker0f5acc12019-06-04 16:13:23 +0100[diff] [blame]1098x509parse_crt:"0500":"":MBEDTLS_ERR_X509_INVALID_FORMAT
Paul Bakkerb2c38f52009-07-19 19:36:15 +0000[diff] [blame]1099
Hanno Becker2389d162019-02-14 12:52:47 +0000[diff] [blame]1100X509 CRT ASN1 (inv Certificate, no length)
Hanno Beckera5c481e2019-06-04 15:19:09 +0100[diff] [blame]1101x509parse_crt:"30":"":MBEDTLS_ERR_X509_INVALID_FORMAT
Paul Bakkerb2c38f52009-07-19 19:36:15 +0000[diff] [blame]1102
Hanno Becker2389d162019-02-14 12:52:47 +0000[diff] [blame]1103X509 CRT ASN1 (inv Certificate, bad length encoding)
Hanno Beckera5c481e2019-06-04 15:19:09 +0100[diff] [blame]1104x509parse_crt:"3085":"":MBEDTLS_ERR_X509_INVALID_FORMAT
Paul Bakkerfae618f2011-10-12 11:53:52 +0000[diff] [blame]1105
Hanno Becker2389d162019-02-14 12:52:47 +0000[diff] [blame]1106X509 CRT ASN1 (inv Certificate, length data incomplete)
Hanno Beckera5c481e2019-06-04 15:19:09 +0100[diff] [blame]1107x509parse_crt:"308200":"":MBEDTLS_ERR_X509_INVALID_FORMAT
Paul Bakkerc26a1892009-07-19 20:30:14 +0000[diff] [blame]1108
Hanno Becker2389d162019-02-14 12:52:47 +0000[diff] [blame]1109X509 CRT ASN1 (inv Certificate, length out of bounds)
Hanno Beckera5c481e2019-06-04 15:19:09 +0100[diff] [blame]1110x509parse_crt:"3001":"":MBEDTLS_ERR_X509_INVALID_FORMAT
Paul Bakkerc26a1892009-07-19 20:30:14 +0000[diff] [blame]1111
Hanno Becker2389d162019-02-14 12:52:47 +0000[diff] [blame]1112X509 CRT ASN1 (inv TBS, invalid tag)
Hanno Becker0f5acc12019-06-04 16:13:23 +0100[diff] [blame]1113x509parse_crt:"30020500":"":MBEDTLS_ERR_X509_INVALID_FORMAT + MBEDTLS_ERR_ASN1_UNEXPECTED_TAG
Paul Bakkerb2c38f52009-07-19 19:36:15 +0000[diff] [blame]1114
Hanno Becker2389d162019-02-14 12:52:47 +0000[diff] [blame]1115X509 CRT ASN1 (inv TBS, length missing)
Hanno Beckera5c481e2019-06-04 15:19:09 +0100[diff] [blame]1116x509parse_crt:"300130":"":MBEDTLS_ERR_X509_INVALID_FORMAT + MBEDTLS_ERR_ASN1_OUT_OF_DATA
1117
Hanno Becker2389d162019-02-14 12:52:47 +0000[diff] [blame]1118X509 CRT ASN1 (inv TBS, invalid length encoding)
Paul Bakker37940d9f2009-07-10 22:38:58 +0000[diff] [blame]1119x509parse_crt:"30023085":"":MBEDTLS_ERR_X509_INVALID_FORMAT + MBEDTLS_ERR_ASN1_INVALID_LENGTH
Paul Bakkerb2c38f52009-07-19 19:36:15 +0000[diff] [blame]1120
Hanno Becker2389d162019-02-14 12:52:47 +0000[diff] [blame]1121X509 CRT ASN1 (inv TBS, length data incomplete)
Hanno Beckera5c481e2019-06-04 15:19:09 +0100[diff] [blame]1122x509parse_crt:"300430839999":"":MBEDTLS_ERR_X509_INVALID_FORMAT + MBEDTLS_ERR_ASN1_OUT_OF_DATA
Paul Bakkerb2c38f52009-07-19 19:36:15 +0000[diff] [blame]1123
Hanno Becker2389d162019-02-14 12:52:47 +0000[diff] [blame]1124X509 CRT ASN1 (inv TBS, length out of bounds)
Hanno Beckera5c481e2019-06-04 15:19:09 +0100[diff] [blame]1125x509parse_crt:"30023003":"":MBEDTLS_ERR_X509_INVALID_FORMAT + MBEDTLS_ERR_ASN1_OUT_OF_DATA
Paul Bakkerb2c38f52009-07-19 19:36:15 +0000[diff] [blame]1126
Hanno Becker2389d162019-02-14 12:52:47 +0000[diff] [blame]1127X509 CRT ASN1 (TBS empty)
Hanno Becker60dd6fc2019-02-15 11:51:32 +0000[diff] [blame]1128depends_on:MBEDTLS_SHA256_C:MBEDTLS_RSA_C
Hanno Beckera5c481e2019-06-04 15:19:09 +0100[diff] [blame]1129x509parse_crt:"30153000300d06092a864886f70d01010b0500030200ff":"":MBEDTLS_ERR_X509_INVALID_FORMAT + MBEDTLS_ERR_ASN1_OUT_OF_DATA
Paul Bakkerb2c38f52009-07-19 19:36:15 +0000[diff] [blame]1130
Hanno Becker0f5acc12019-06-04 16:13:23 +0100[diff] [blame]1131X509 CRT ASN1 (TBS, invalid version tag, serial missing)
Hanno Becker60dd6fc2019-02-15 11:51:32 +0000[diff] [blame]1132depends_on:MBEDTLS_SHA256_C:MBEDTLS_RSA_C
Hanno Becker0f5acc12019-06-04 16:13:23 +0100[diff] [blame]1133x509parse_crt:"301730020500300d06092a864886f70d01010b0500030200ff":"":MBEDTLS_ERR_X509_INVALID_SERIAL + MBEDTLS_ERR_ASN1_UNEXPECTED_TAG
Paul Bakkerb2c38f52009-07-19 19:36:15 +0000[diff] [blame]1134
Hanno Becker2389d162019-02-14 12:52:47 +0000[diff] [blame]1135X509 CRT ASN1 (TBS, valid outer version tag, no outer length)
Hanno Becker60dd6fc2019-02-15 11:51:32 +0000[diff] [blame]1136depends_on:MBEDTLS_SHA256_C:MBEDTLS_RSA_C
Hanno Beckera9ef4122019-06-04 15:24:18 +0100[diff] [blame]1137x509parse_crt:"30163001a0300d06092a864886f70d01010b0500030200ff":"":MBEDTLS_ERR_X509_INVALID_FORMAT + MBEDTLS_ERR_ASN1_OUT_OF_DATA
Paul Bakkerb2c38f52009-07-19 19:36:15 +0000[diff] [blame]1138
Hanno Becker2389d162019-02-14 12:52:47 +0000[diff] [blame]1139X509 CRT ASN1 (TBS, inv inner version tag)
Hanno Becker60dd6fc2019-02-15 11:51:32 +0000[diff] [blame]1140depends_on:MBEDTLS_SHA256_C:MBEDTLS_RSA_C
Hanno Becker0f5acc12019-06-04 16:13:23 +0100[diff] [blame]1141x509parse_crt:"30193004a0020500300d06092a864886f70d01010b0500030200ff":"":MBEDTLS_ERR_X509_INVALID_VERSION + MBEDTLS_ERR_ASN1_UNEXPECTED_TAG
Paul Bakkerb2c38f52009-07-19 19:36:15 +0000[diff] [blame]1142
Hanno Becker2389d162019-02-14 12:52:47 +0000[diff] [blame]1143X509 CRT ASN1 (TBS, valid inner version tag, no inner length)
Hanno Becker60dd6fc2019-02-15 11:51:32 +0000[diff] [blame]1144depends_on:MBEDTLS_SHA256_C:MBEDTLS_RSA_C
Hanno Beckera9ef4122019-06-04 15:24:18 +0100[diff] [blame]1145x509parse_crt:"30183003a00102300d06092a864886f70d01010b0500030200ff":"":MBEDTLS_ERR_X509_INVALID_VERSION + MBEDTLS_ERR_ASN1_OUT_OF_DATA
Paul Bakkerb2c38f52009-07-19 19:36:15 +0000[diff] [blame]1146
Hanno Becker2389d162019-02-14 12:52:47 +0000[diff] [blame]1147X509 CRT ASN1 (TBS, valid inner version tag, inv inner length encoding)
Hanno Becker60dd6fc2019-02-15 11:51:32 +0000[diff] [blame]1148depends_on:MBEDTLS_SHA256_C:MBEDTLS_RSA_C
Hanno Beckera9ef4122019-06-04 15:24:18 +0100[diff] [blame]1149x509parse_crt:"30193004a0020285300d06092a864886f70d01010b0500030200ff":"":MBEDTLS_ERR_X509_INVALID_VERSION + MBEDTLS_ERR_ASN1_INVALID_LENGTH
Paul Bakkerb2c38f52009-07-19 19:36:15 +0000[diff] [blame]1150
Hanno Becker2389d162019-02-14 12:52:47 +0000[diff] [blame]1151X509 CRT ASN1 (TBS, valid inner version tag, inner length too large for int)
Hanno Becker60dd6fc2019-02-15 11:51:32 +0000[diff] [blame]1152depends_on:MBEDTLS_SHA256_C:MBEDTLS_RSA_C
Gilles Peskine2dedcc52019-09-11 17:23:07 +0200[diff] [blame]1153# tbsCertificate.version = 0x01000000000000000000000000000000 rejected by mbedtls_asn1_get_int
1154x509parse_crt:"30293014a012021001000000000000000000000000000000300d06092a864886f70d01010b0500030200ff":"":MBEDTLS_ERR_X509_INVALID_VERSION + MBEDTLS_ERR_ASN1_INVALID_LENGTH
Paul Bakkerb2c38f52009-07-19 19:36:15 +0000[diff] [blame]1155
Hanno Becker2389d162019-02-14 12:52:47 +0000[diff] [blame]1156X509 CRT ASN1 (TBS, valid inner version tag, inner vs. outer length mismatch)
Hanno Becker60dd6fc2019-02-15 11:51:32 +0000[diff] [blame]1157depends_on:MBEDTLS_SHA256_C:MBEDTLS_RSA_C
Hanno Beckera9ef4122019-06-04 15:24:18 +0100[diff] [blame]1158x509parse_crt:"301b3006a00402010200300d06092a864886f70d01010b0500030200ff":"":MBEDTLS_ERR_X509_INVALID_VERSION + MBEDTLS_ERR_ASN1_LENGTH_MISMATCH
Paul Bakkerb2c38f52009-07-19 19:36:15 +0000[diff] [blame]1159
Hanno Becker2389d162019-02-14 12:52:47 +0000[diff] [blame]1160X509 CRT ASN1 (TBS, valid version tag, length exceeds TBS)
Hanno Becker60dd6fc2019-02-15 11:51:32 +0000[diff] [blame]1161depends_on:MBEDTLS_SHA256_C:MBEDTLS_RSA_C
Hanno Beckera9ef4122019-06-04 15:24:18 +0100[diff] [blame]1162x509parse_crt:"30293014a012021100000000000000000000000000000000300d06092a864886f70d01010b0500030200ff":"":MBEDTLS_ERR_X509_INVALID_VERSION + MBEDTLS_ERR_ASN1_OUT_OF_DATA
Paul Bakkerb2c38f52009-07-19 19:36:15 +0000[diff] [blame]1163
Hanno Becker2389d162019-02-14 12:52:47 +0000[diff] [blame]1164X509 CRT ASN1 (TBS, valid version tag + length, unknown version number 3)
Hanno Becker60dd6fc2019-02-15 11:51:32 +0000[diff] [blame]1165depends_on:MBEDTLS_SHA256_C:MBEDTLS_RSA_C
Hanno Beckera9ef4122019-06-04 15:24:18 +0100[diff] [blame]1166x509parse_crt:"308196308180a0030201038204deadbeef300d06092a864886f70d01010b0500300c310a30080600130454657374301c170c303930313031303030303030170c303931323331323335393539300c310a30080600130454657374302a300d06092A864886F70D010101050003190030160210ffffffffffffffffffffffffffffffff0202ffff300d06092a864886f70d01010b0500030200ff":"":MBEDTLS_ERR_X509_UNKNOWN_VERSION
Paul Bakkerb2c38f52009-07-19 19:36:15 +0000[diff] [blame]1167
Hanno Becker2389d162019-02-14 12:52:47 +0000[diff] [blame]1168X509 CRT ASN1 (TBS, valid version tag + length, unknown version number 4)
Hanno Becker60dd6fc2019-02-15 11:51:32 +0000[diff] [blame]1169depends_on:MBEDTLS_SHA256_C:MBEDTLS_RSA_C
Hanno Beckera9ef4122019-06-04 15:24:18 +0100[diff] [blame]1170x509parse_crt:"308196308180a0030201048204deadbeef300d06092a864886f70d01010b0500300c310a30080600130454657374301c170c303930313031303030303030170c303931323331323335393539300c310a30080600130454657374302a300d06092A864886F70D010101050003190030160210ffffffffffffffffffffffffffffffff0202ffff300d06092a864886f70d01010b0500030200ff":"":MBEDTLS_ERR_X509_UNKNOWN_VERSION
Paul Bakkerb2c38f52009-07-19 19:36:15 +0000[diff] [blame]1171
Hanno Becker2389d162019-02-14 12:52:47 +0000[diff] [blame]1172X509 CRT ASN1 (TBS, valid version tag + length, version number overflow)
Hanno Becker60dd6fc2019-02-15 11:51:32 +0000[diff] [blame]1173depends_on:MBEDTLS_SHA256_C:MBEDTLS_RSA_C
Hanno Beckera9ef4122019-06-04 15:24:18 +0100[diff] [blame]1174x509parse_crt:"308199308183a00602047FFFFFFF8204deadbeef300d06092a864886f70d01010b0500300c310a30080600130454657374301c170c303930313031303030303030170c303931323331323335393539300c310a30080600130454657374302a300d06092A864886F70D010101050003190030160210ffffffffffffffffffffffffffffffff0202ffff300d06092a864886f70d01010b0500030200ff":"":MBEDTLS_ERR_X509_UNKNOWN_VERSION
Paul Bakkerb2c38f52009-07-19 19:36:15 +0000[diff] [blame]1175
Hanno Becker2389d162019-02-14 12:52:47 +0000[diff] [blame]1176X509 CRT ASN1 (TBS, serial missing)
Hanno Becker60dd6fc2019-02-15 11:51:32 +0000[diff] [blame]1177depends_on:MBEDTLS_SHA256_C:MBEDTLS_RSA_C
Hanno Beckera9ef4122019-06-04 15:24:18 +0100[diff] [blame]1178x509parse_crt:"301a3005a003020102300d06092a864886f70d01010b0500030200ff":"":MBEDTLS_ERR_X509_INVALID_SERIAL + MBEDTLS_ERR_ASN1_OUT_OF_DATA
Paul Bakker345fb492009-07-20 21:26:07 +0000[diff] [blame]1179
Hanno Becker2389d162019-02-14 12:52:47 +0000[diff] [blame]1180X509 CRT ASN1 (TBS, inv serial, tag wrong)
Hanno Becker60dd6fc2019-02-15 11:51:32 +0000[diff] [blame]1181depends_on:MBEDTLS_SHA256_C:MBEDTLS_RSA_C
Hanno Becker0f5acc12019-06-04 16:13:23 +0100[diff] [blame]1182x509parse_crt:"301c3007a0030201020500300d06092a864886f70d01010b0500030200ff":"":MBEDTLS_ERR_X509_INVALID_SERIAL + MBEDTLS_ERR_ASN1_UNEXPECTED_TAG
Paul Bakkerb2c38f52009-07-19 19:36:15 +0000[diff] [blame]1183
Hanno Becker2389d162019-02-14 12:52:47 +0000[diff] [blame]1184X509 CRT ASN1 (TBS, inv serial, length missing)
Hanno Becker60dd6fc2019-02-15 11:51:32 +0000[diff] [blame]1185depends_on:MBEDTLS_SHA256_C:MBEDTLS_RSA_C
Hanno Beckera9ef4122019-06-04 15:24:18 +0100[diff] [blame]1186x509parse_crt:"301b3006a00302010282300d06092a864886f70d01010b0500030200ff":"":MBEDTLS_ERR_X509_INVALID_SERIAL + MBEDTLS_ERR_ASN1_OUT_OF_DATA
Paul Bakker345fb492009-07-20 21:26:07 +0000[diff] [blame]1187
Hanno Becker2389d162019-02-14 12:52:47 +0000[diff] [blame]1188X509 CRT ASN1 (TBS, inv serial, inv length encoding)
Hanno Becker60dd6fc2019-02-15 11:51:32 +0000[diff] [blame]1189depends_on:MBEDTLS_SHA256_C:MBEDTLS_RSA_C
Hanno Beckere7d8f962019-06-04 15:25:00 +0100[diff] [blame]1190x509parse_crt:"301c3007a0030201028285300d06092a864886f70d01010b0500030200ff":"":MBEDTLS_ERR_X509_INVALID_SERIAL + MBEDTLS_ERR_ASN1_INVALID_LENGTH
Paul Bakkerb2c38f52009-07-19 19:36:15 +0000[diff] [blame]1191
Hanno Becker2389d162019-02-14 12:52:47 +0000[diff] [blame]1192X509 CRT ASN1 (TBS, inv serial, length out of bounds)
Hanno Becker60dd6fc2019-02-15 11:51:32 +0000[diff] [blame]1193depends_on:MBEDTLS_SHA256_C:MBEDTLS_RSA_C
Hanno Beckere7d8f962019-06-04 15:25:00 +0100[diff] [blame]1194x509parse_crt:"301c3007a0030201028201300d06092a864886f70d01010b0500030200ff":"":MBEDTLS_ERR_X509_INVALID_SERIAL + MBEDTLS_ERR_ASN1_OUT_OF_DATA
Paul Bakker345fb492009-07-20 21:26:07 +0000[diff] [blame]1195
Hanno Becker2389d162019-02-14 12:52:47 +0000[diff] [blame]1196X509 CRT ASN1 (TBS, AlgID missing)
Hanno Becker60dd6fc2019-02-15 11:51:32 +0000[diff] [blame]1197depends_on:MBEDTLS_SHA256_C:MBEDTLS_RSA_C
Hanno Beckera9ef4122019-06-04 15:24:18 +0100[diff] [blame]1198x509parse_crt:"3020300ba0030201028204deadbeef300d06092a864886f70d01010b0500030200ff":"":MBEDTLS_ERR_X509_INVALID_ALG + MBEDTLS_ERR_ASN1_OUT_OF_DATA
Paul Bakkerb2c38f52009-07-19 19:36:15 +0000[diff] [blame]1199
Hanno Becker2389d162019-02-14 12:52:47 +0000[diff] [blame]1200X509 CRT ASN1 (TBS, inv AlgID, tag wrong)
Hanno Becker60dd6fc2019-02-15 11:51:32 +0000[diff] [blame]1201depends_on:MBEDTLS_SHA256_C:MBEDTLS_RSA_C
Hanno Becker0f5acc12019-06-04 16:13:23 +0100[diff] [blame]1202x509parse_crt:"3022300da0030201028204deadbeef0500300d06092a864886f70d01010b0500030200ff":"":MBEDTLS_ERR_X509_INVALID_ALG + MBEDTLS_ERR_ASN1_UNEXPECTED_TAG
Paul Bakkerb2c38f52009-07-19 19:36:15 +0000[diff] [blame]1203
Hanno Becker2389d162019-02-14 12:52:47 +0000[diff] [blame]1204X509 CRT ASN1 (TBS, inv AlgID, OID missing)
Hanno Becker60dd6fc2019-02-15 11:51:32 +0000[diff] [blame]1205depends_on:MBEDTLS_SHA256_C:MBEDTLS_RSA_C
Hanno Becker764fbdf2019-06-04 16:04:36 +0100[diff] [blame]1206x509parse_crt:"307b3073a0030201008204deadbeef3000300c310a30080600130454657374301c170c303930313031303030303030170c303931323331323335393539300c310a30080600130454657374302a300d06092A864886F70D010101050003190030160210ffffffffffffffffffffffffffffffff0202ffff3000030200ff":"":MBEDTLS_ERR_X509_INVALID_ALG + MBEDTLS_ERR_ASN1_OUT_OF_DATA
Paul Bakkerb2c38f52009-07-19 19:36:15 +0000[diff] [blame]1207
Hanno Becker2389d162019-02-14 12:52:47 +0000[diff] [blame]1208X509 CRT ASN1 (TBS, inv AlgID, OID tag wrong)
Hanno Becker60dd6fc2019-02-15 11:51:32 +0000[diff] [blame]1209depends_on:MBEDTLS_SHA256_C:MBEDTLS_RSA_C
Hanno Becker764fbdf2019-06-04 16:04:36 +0100[diff] [blame]1210x509parse_crt:"307f3075a0030201008204deadbeef30020500300c310a30080600130454657374301c170c303930313031303030303030170c303931323331323335393539300c310a30080600130454657374302a300d06092A864886F70D010101050003190030160210ffffffffffffffffffffffffffffffff0202ffff30020500030200ff":"":MBEDTLS_ERR_X509_INVALID_ALG + MBEDTLS_ERR_ASN1_UNEXPECTED_TAG
Paul Bakkerb2c38f52009-07-19 19:36:15 +0000[diff] [blame]1211
Hanno Becker2389d162019-02-14 12:52:47 +0000[diff] [blame]1212X509 CRT ASN1 (TBS, inv AlgID, OID inv length encoding)
Hanno Becker60dd6fc2019-02-15 11:51:32 +0000[diff] [blame]1213depends_on:MBEDTLS_SHA256_C:MBEDTLS_RSA_C
Hanno Becker764fbdf2019-06-04 16:04:36 +0100[diff] [blame]1214x509parse_crt:"307f3075a0030201008204deadbeef30020685300c310a30080600130454657374301c170c303930313031303030303030170c303931323331323335393539300c310a30080600130454657374302a300d06092A864886F70D010101050003190030160210ffffffffffffffffffffffffffffffff0202ffff30020685030200ff":"":MBEDTLS_ERR_X509_INVALID_ALG + MBEDTLS_ERR_ASN1_INVALID_LENGTH
Paul Bakkerb2c38f52009-07-19 19:36:15 +0000[diff] [blame]1215
Hanno Becker2389d162019-02-14 12:52:47 +0000[diff] [blame]1216X509 CRT ASN1 (TBS, inv AlgID, OID length out of bounds)
Hanno Becker60dd6fc2019-02-15 11:51:32 +0000[diff] [blame]1217depends_on:MBEDTLS_SHA256_C:MBEDTLS_RSA_C
Hanno Becker764fbdf2019-06-04 16:04:36 +0100[diff] [blame]1218x509parse_crt:"307f3075a0030201008204deadbeef30020601300c310a30080600130454657374301c170c303930313031303030303030170c303931323331323335393539300c310a30080600130454657374302a300d06092A864886F70D010101050003190030160210ffffffffffffffffffffffffffffffff0202ffff30020601030200ff":"":MBEDTLS_ERR_X509_INVALID_ALG + MBEDTLS_ERR_ASN1_OUT_OF_DATA
Paul Bakkerb2c38f52009-07-19 19:36:15 +0000[diff] [blame]1219
Hanno Becker2389d162019-02-14 12:52:47 +0000[diff] [blame]1220X509 CRT ASN1 (TBS, inv AlgID, OID empty)
Hanno Becker60dd6fc2019-02-15 11:51:32 +0000[diff] [blame]1221depends_on:MBEDTLS_SHA256_C:MBEDTLS_RSA_C
Hanno Becker764fbdf2019-06-04 16:04:36 +0100[diff] [blame]1222x509parse_crt:"307f3075a0030201008204deadbeef30020600300c310a30080600130454657374301c170c303930313031303030303030170c303931323331323335393539300c310a30080600130454657374302a300d06092A864886F70D010101050003190030160210ffffffffffffffffffffffffffffffff0202ffff30020600030200ff":"":MBEDTLS_ERR_X509_UNKNOWN_SIG_ALG + MBEDTLS_ERR_OID_NOT_FOUND
Paul Bakkerb2c38f52009-07-19 19:36:15 +0000[diff] [blame]1223
Hanno Becker2389d162019-02-14 12:52:47 +0000[diff] [blame]1224X509 CRT ASN1 (TBS, inv AlgID, OID unknown)
Hanno Becker60dd6fc2019-02-15 11:51:32 +0000[diff] [blame]1225depends_on:MBEDTLS_SHA256_C:MBEDTLS_RSA_C
Hanno Becker764fbdf2019-06-04 16:04:36 +0100[diff] [blame]1226x509parse_crt:"3081873079a0030201008204deadbeef30060604deadbeef300c310a30080600130454657374301c170c303930313031303030303030170c303931323331323335393539300c310a30080600130454657374302a300d06092A864886F70D010101050003190030160210ffffffffffffffffffffffffffffffff0202ffff30060604deadbeef030200ff":"":MBEDTLS_ERR_X509_UNKNOWN_SIG_ALG + MBEDTLS_ERR_OID_NOT_FOUND
Paul Bakkerb2c38f52009-07-19 19:36:15 +0000[diff] [blame]1227
Hanno Becker2389d162019-02-14 12:52:47 +0000[diff] [blame]1228X509 CRT ASN1 (TBS, inv AlgID, param inv length encoding)
Hanno Becker60dd6fc2019-02-15 11:51:32 +0000[diff] [blame]1229depends_on:MBEDTLS_SHA256_C:MBEDTLS_RSA_C
Hanno Becker764fbdf2019-06-04 16:04:36 +0100[diff] [blame]1230x509parse_crt:"308196308180a0030201008204deadbeef300d06092a864886f70d01010b0685300c310a30080600130454657374301c170c303930313031303030303030170c303931323331323335393539300c310a30080600130454657374302a300d06092A864886F70D010101050003190030160210ffffffffffffffffffffffffffffffff0202ffff300d06092a864886f70d01010b0685030200ff":"":MBEDTLS_ERR_X509_INVALID_ALG + MBEDTLS_ERR_ASN1_INVALID_LENGTH
Paul Bakkerb2c38f52009-07-19 19:36:15 +0000[diff] [blame]1231
Hanno Becker2389d162019-02-14 12:52:47 +0000[diff] [blame]1232X509 CRT ASN1 (TBS, inv AlgID, param length out of bounds)
Hanno Becker60dd6fc2019-02-15 11:51:32 +0000[diff] [blame]1233depends_on:MBEDTLS_SHA256_C:MBEDTLS_RSA_C
Hanno Becker764fbdf2019-06-04 16:04:36 +0100[diff] [blame]1234x509parse_crt:"308196308180a0030201008204deadbeef300d06092a864886f70d01010b0601300c310a30080600130454657374301c170c303930313031303030303030170c303931323331323335393539300c310a30080600130454657374302a300d06092A864886F70D010101050003190030160210ffffffffffffffffffffffffffffffff0202ffff300d06092a864886f70d01010b0601030200ff":"":MBEDTLS_ERR_X509_INVALID_ALG + MBEDTLS_ERR_ASN1_OUT_OF_DATA
Paul Bakkerb2c38f52009-07-19 19:36:15 +0000[diff] [blame]1235
Hanno Becker2389d162019-02-14 12:52:47 +0000[diff] [blame]1236X509 CRT ASN1 (TBS, inv AlgID, param length mismatch)
Hanno Becker60dd6fc2019-02-15 11:51:32 +0000[diff] [blame]1237depends_on:MBEDTLS_SHA256_C:MBEDTLS_RSA_C
Hanno Becker764fbdf2019-06-04 16:04:36 +0100[diff] [blame]1238x509parse_crt:"30819a308182a0030201008204deadbeef300f06092a864886f70d01010b06010000300c310a30080600130454657374301c170c303930313031303030303030170c303931323331323335393539300c310a30080600130454657374302a300d06092A864886F70D010101050003190030160210ffffffffffffffffffffffffffffffff0202ffff300f06092a864886f70d01010b06010000030200ff":"":MBEDTLS_ERR_X509_INVALID_ALG + MBEDTLS_ERR_ASN1_LENGTH_MISMATCH
Hanno Beckera328fff2019-02-12 13:44:17 +0000[diff] [blame]1239
Hanno Becker2389d162019-02-14 12:52:47 +0000[diff] [blame]1240X509 CRT ASN1 (TBS, inv AlgID, params present but empty)
Hanno Becker60dd6fc2019-02-15 11:51:32 +0000[diff] [blame]1241depends_on:MBEDTLS_SHA256_C:MBEDTLS_RSA_C
Hanno Becker764fbdf2019-06-04 16:04:36 +0100[diff] [blame]1242x509parse_crt:"308196308180a0030201008204deadbeef300d06092a864886f70d01010b0600300c310a30080600130454657374301c170c303930313031303030303030170c303931323331323335393539300c310a30080600130454657374302a300d06092A864886F70D010101050003190030160210ffffffffffffffffffffffffffffffff0202ffff300d06092a864886f70d01010b0600030200ff":"":MBEDTLS_ERR_X509_INVALID_ALG
Hanno Beckera328fff2019-02-12 13:44:17 +0000[diff] [blame]1243
Hanno Becker2389d162019-02-14 12:52:47 +0000[diff] [blame]1244X509 CRT ASN1 (TBS, inv AlgID, bad RSASSA-PSS params)
Hanno Becker60dd6fc2019-02-15 11:51:32 +0000[diff] [blame]1245depends_on:MBEDTLS_SHA256_C:MBEDTLS_X509_RSASSA_PSS_SUPPORT
Hanno Becker764fbdf2019-06-04 16:04:36 +0100[diff] [blame]1246x509parse_crt:"308196308180a0030201008204deadbeef300d06092a864886f70d01010a3100300c310a30080600130454657374301c170c303930313031303030303030170c303931323331323335393539300c310a30080600130454657374302a300d06092A864886F70D010101050003190030160210ffffffffffffffffffffffffffffffff0202ffff300d06092a864886f70d01010a3100030200ff":"":MBEDTLS_ERR_X509_INVALID_ALG + MBEDTLS_ERR_ASN1_UNEXPECTED_TAG
Manuel Pégourié-Gonnard85403692014-06-06 14:48:38 +0200[diff] [blame]1247
Hanno Becker2389d162019-02-14 12:52:47 +0000[diff] [blame]1248X509 CRT ASN1 (TBS, Issuer missing)
Hanno Becker60dd6fc2019-02-15 11:51:32 +0000[diff] [blame]1249depends_on:MBEDTLS_SHA256_C:MBEDTLS_RSA_C
Hanno Becker764fbdf2019-06-04 16:04:36 +0100[diff] [blame]1250x509parse_crt:"302f301aa0030201008204deadbeef300d06092a864886f70d01010b0500300d06092a864886f70d01010b0500030200ff":"":MBEDTLS_ERR_X509_INVALID_FORMAT + MBEDTLS_ERR_ASN1_OUT_OF_DATA
Paul Bakkerb2c38f52009-07-19 19:36:15 +0000[diff] [blame]1251
Hanno Becker2389d162019-02-14 12:52:47 +0000[diff] [blame]1252X509 CRT ASN1 (TBS, inv Issuer, RDNSequence inv tag)
Hanno Becker60dd6fc2019-02-15 11:51:32 +0000[diff] [blame]1253depends_on:MBEDTLS_SHA256_C:MBEDTLS_RSA_C
Hanno Becker764fbdf2019-06-04 16:04:36 +0100[diff] [blame]1254x509parse_crt:"3031301ca0030201008204deadbeef300d06092a864886f70d01010b05000500300d06092a864886f70d01010b0500030200ff":"":MBEDTLS_ERR_X509_INVALID_FORMAT + MBEDTLS_ERR_ASN1_UNEXPECTED_TAG
Paul Bakkerb2c38f52009-07-19 19:36:15 +0000[diff] [blame]1255
Hanno Becker2389d162019-02-14 12:52:47 +0000[diff] [blame]1256X509 CRT ASN1 (TBS, inv Issuer, RDNSequence length missing)
Hanno Becker60dd6fc2019-02-15 11:51:32 +0000[diff] [blame]1257depends_on:MBEDTLS_SHA256_C:MBEDTLS_RSA_C
Hanno Becker764fbdf2019-06-04 16:04:36 +0100[diff] [blame]1258x509parse_crt:"3030301ba0030201008204deadbeef300d06092a864886f70d01010b050030300d06092a864886f70d01010b0500030200ff":"":MBEDTLS_ERR_X509_INVALID_FORMAT + MBEDTLS_ERR_ASN1_OUT_OF_DATA
Paul Bakkerb2c38f52009-07-19 19:36:15 +0000[diff] [blame]1259
Hanno Becker2389d162019-02-14 12:52:47 +0000[diff] [blame]1260X509 CRT ASN1 (TBS, inv Issuer, RDNSequence inv length encoding)
Hanno Becker60dd6fc2019-02-15 11:51:32 +0000[diff] [blame]1261depends_on:MBEDTLS_SHA256_C:MBEDTLS_RSA_C
Hanno Becker764fbdf2019-06-04 16:04:36 +0100[diff] [blame]1262x509parse_crt:"3031301ca0030201008204deadbeef300d06092a864886f70d01010b05003085300d06092a864886f70d01010b0500030200ff":"":MBEDTLS_ERR_X509_INVALID_FORMAT + MBEDTLS_ERR_ASN1_INVALID_LENGTH
Paul Bakkerb2c38f52009-07-19 19:36:15 +0000[diff] [blame]1263
Hanno Becker2389d162019-02-14 12:52:47 +0000[diff] [blame]1264X509 CRT ASN1 (TBS, inv Issuer, RDNSequence length out of bounds)
Hanno Becker60dd6fc2019-02-15 11:51:32 +0000[diff] [blame]1265depends_on:MBEDTLS_SHA256_C:MBEDTLS_RSA_C
Hanno Becker764fbdf2019-06-04 16:04:36 +0100[diff] [blame]1266x509parse_crt:"3031301ca0030201008204deadbeef300d06092a864886f70d01010b05003001300d06092a864886f70d01010b0500030200ff":"":MBEDTLS_ERR_X509_INVALID_FORMAT + MBEDTLS_ERR_ASN1_OUT_OF_DATA
Paul Bakkerb2c38f52009-07-19 19:36:15 +0000[diff] [blame]1267
Hanno Becker2389d162019-02-14 12:52:47 +0000[diff] [blame]1268X509 CRT ASN1 (TBS, inv Issuer, RDNSequence empty)
Paul Bakkerb2c38f52009-07-19 19:36:15 +0000[diff] [blame]1269depends_on:MBEDTLS_RSA_C:MBEDTLS_SHA256_C
Hanno Becker5e2cf382019-02-12 15:49:08 +0000[diff] [blame]1270x509parse_crt:"3081893074a0030201028204deadbeef300d06092a864886f70d01010b05003000301c170c303930313031303030303030170c303931323331323335393539300c310a30080600130454657374302a300d06092A864886F70D010101050003190030160210ffffffffffffffffffffffffffffffff0202ffff300d06092a864886f70d01010b0500030200ff":"":MBEDTLS_ERR_X509_INVALID_NAME + MBEDTLS_ERR_ASN1_OUT_OF_DATA
Paul Bakkerb2c38f52009-07-19 19:36:15 +0000[diff] [blame]1271
Hanno Becker2389d162019-02-14 12:52:47 +0000[diff] [blame]1272X509 CRT ASN1 (TBS, inv Issuer, RDN inv tag)
Paul Bakkerb2c38f52009-07-19 19:36:15 +0000[diff] [blame]1273depends_on:MBEDTLS_RSA_C:MBEDTLS_SHA256_C
Hanno Becker0f5acc12019-06-04 16:13:23 +0100[diff] [blame]1274x509parse_crt:"30818b3076a0030201028204deadbeef300d06092a864886f70d01010b050030020500301c170c303930313031303030303030170c303931323331323335393539300c310a30080600130454657374302a300d06092A864886F70D010101050003190030160210ffffffffffffffffffffffffffffffff0202ffff300d06092a864886f70d01010b0500030200ff":"":MBEDTLS_ERR_X509_INVALID_NAME + MBEDTLS_ERR_ASN1_UNEXPECTED_TAG
Paul Bakkerb2c38f52009-07-19 19:36:15 +0000[diff] [blame]1275
Hanno Becker2389d162019-02-14 12:52:47 +0000[diff] [blame]1276X509 CRT ASN1 (TBS, inv Issuer, RDN inv length encoding)
Paul Bakkerb2c38f52009-07-19 19:36:15 +0000[diff] [blame]1277depends_on:MBEDTLS_RSA_C:MBEDTLS_SHA256_C
Hanno Becker5e2cf382019-02-12 15:49:08 +0000[diff] [blame]1278x509parse_crt:"30818b3076a0030201028204deadbeef300d06092a864886f70d01010b050030023185301c170c303930313031303030303030170c303931323331323335393539300c310a30080600130454657374302a300d06092A864886F70D010101050003190030160210ffffffffffffffffffffffffffffffff0202ffff300d06092a864886f70d01010b0500030200ff":"":MBEDTLS_ERR_X509_INVALID_NAME + MBEDTLS_ERR_ASN1_INVALID_LENGTH
Paul Bakkerb2c38f52009-07-19 19:36:15 +0000[diff] [blame]1279
Hanno Becker2389d162019-02-14 12:52:47 +0000[diff] [blame]1280X509 CRT ASN1 (TBS, inv Issuer, RDN length out of bounds)
Paul Bakkerb2c38f52009-07-19 19:36:15 +0000[diff] [blame]1281depends_on:MBEDTLS_RSA_C:MBEDTLS_SHA256_C
Hanno Becker5e2cf382019-02-12 15:49:08 +0000[diff] [blame]1282x509parse_crt:"30818b3076a0030201028204deadbeef300d06092a864886f70d01010b050030023101301c170c303930313031303030303030170c303931323331323335393539300c310a30080600130454657374302a300d06092A864886F70D010101050003190030160210ffffffffffffffffffffffffffffffff0202ffff300d06092a864886f70d01010b0500030200ff":"":MBEDTLS_ERR_X509_INVALID_NAME + MBEDTLS_ERR_ASN1_OUT_OF_DATA
Paul Bakkerb2c38f52009-07-19 19:36:15 +0000[diff] [blame]1283
Hanno Becker2389d162019-02-14 12:52:47 +0000[diff] [blame]1284X509 CRT ASN1 (TBS, inv Issuer, RDN empty)
Paul Bakkerb2c38f52009-07-19 19:36:15 +0000[diff] [blame]1285depends_on:MBEDTLS_RSA_C:MBEDTLS_SHA256_C
Hanno Becker5e2cf382019-02-12 15:49:08 +0000[diff] [blame]1286x509parse_crt:"30818b3076a0030201028204deadbeef300d06092a864886f70d01010b050030023100301c170c303930313031303030303030170c303931323331323335393539300c310a30080600130454657374302a300d06092A864886F70D010101050003190030160210ffffffffffffffffffffffffffffffff0202ffff300d06092a864886f70d01010b0500030200ff":"":MBEDTLS_ERR_X509_INVALID_NAME + MBEDTLS_ERR_ASN1_OUT_OF_DATA
Paul Bakkerb2c38f52009-07-19 19:36:15 +0000[diff] [blame]1287
Hanno Becker2389d162019-02-14 12:52:47 +0000[diff] [blame]1288X509 CRT ASN1 (TBS, inv Issuer, AttrTypeAndValue inv tag)
Paul Bakkerb2c38f52009-07-19 19:36:15 +0000[diff] [blame]1289depends_on:MBEDTLS_RSA_C:MBEDTLS_SHA256_C
Hanno Becker0f5acc12019-06-04 16:13:23 +0100[diff] [blame]1290x509parse_crt:"30818d3078a0030201028204deadbeef300d06092a864886f70d01010b0500300431020500301c170c303930313031303030303030170c303931323331323335393539300c310a30080600130454657374302a300d06092A864886F70D010101050003190030160210ffffffffffffffffffffffffffffffff0202ffff300d06092a864886f70d01010b0500030200ff":"":MBEDTLS_ERR_X509_INVALID_NAME + MBEDTLS_ERR_ASN1_UNEXPECTED_TAG
Paul Bakkerb2c38f52009-07-19 19:36:15 +0000[diff] [blame]1291
Hanno Becker2389d162019-02-14 12:52:47 +0000[diff] [blame]1292X509 CRT ASN1 (TBS, inv Issuer, AttrTypeAndValue inv length encoding)
Hanno Becker01346c62019-02-12 13:32:06 +0000[diff] [blame]1293depends_on:MBEDTLS_RSA_C:MBEDTLS_SHA256_C
Hanno Becker5e2cf382019-02-12 15:49:08 +0000[diff] [blame]1294x509parse_crt:"30818d3078a0030201028204deadbeef300d06092a864886f70d01010b0500300431023085301c170c303930313031303030303030170c303931323331323335393539300c310a30080600130454657374302a300d06092A864886F70D010101050003190030160210ffffffffffffffffffffffffffffffff0202ffff300d06092a864886f70d01010b0500030200ff":"":MBEDTLS_ERR_X509_INVALID_NAME + MBEDTLS_ERR_ASN1_INVALID_LENGTH
Paul Bakkerb2c38f52009-07-19 19:36:15 +0000[diff] [blame]1295
Hanno Becker2389d162019-02-14 12:52:47 +0000[diff] [blame]1296X509 CRT ASN1 (TBS, inv Issuer, AttrTypeAndValue length out of bounds)
Hanno Becker01346c62019-02-12 13:32:06 +0000[diff] [blame]1297depends_on:MBEDTLS_RSA_C:MBEDTLS_SHA256_C
Hanno Becker5e2cf382019-02-12 15:49:08 +0000[diff] [blame]1298x509parse_crt:"30818d3078a0030201028204deadbeef300d06092a864886f70d01010b0500300431023001301c170c303930313031303030303030170c303931323331323335393539300c310a30080600130454657374302a300d06092A864886F70D010101050003190030160210ffffffffffffffffffffffffffffffff0202ffff300d06092a864886f70d01010b0500030200ff":"":MBEDTLS_ERR_X509_INVALID_NAME + MBEDTLS_ERR_ASN1_OUT_OF_DATA
Paul Bakker345fb492009-07-20 21:26:07 +0000[diff] [blame]1299
Hanno Becker2389d162019-02-14 12:52:47 +0000[diff] [blame]1300X509 CRT ASN1 (TBS, inv Issuer, AttrTypeAndValue empty)
Hanno Becker01346c62019-02-12 13:32:06 +0000[diff] [blame]1301depends_on:MBEDTLS_RSA_C:MBEDTLS_SHA256_C
Hanno Becker5e2cf382019-02-12 15:49:08 +0000[diff] [blame]1302x509parse_crt:"30818d3078a0030201028204deadbeef300d06092a864886f70d01010b0500300431023000301c170c303930313031303030303030170c303931323331323335393539300c310a30080600130454657374302a300d06092A864886F70D010101050003190030160210ffffffffffffffffffffffffffffffff0202ffff300d06092a864886f70d01010b0500030200ff":"":MBEDTLS_ERR_X509_INVALID_NAME + MBEDTLS_ERR_ASN1_OUT_OF_DATA
Paul Bakker345fb492009-07-20 21:26:07 +0000[diff] [blame]1303
Hanno Becker2389d162019-02-14 12:52:47 +0000[diff] [blame]1304X509 CRT ASN1 (TBS, inv Issuer, AttrTypeAndValue type inv tag)
Hanno Becker01346c62019-02-12 13:32:06 +0000[diff] [blame]1305depends_on:MBEDTLS_RSA_C:MBEDTLS_SHA256_C
Hanno Becker0f5acc12019-06-04 16:13:23 +0100[diff] [blame]1306x509parse_crt:"30818f307aa0030201028204deadbeef300d06092a864886f70d01010b05003006310430020500301c170c303930313031303030303030170c303931323331323335393539300c310a30080600130454657374302a300d06092A864886F70D010101050003190030160210ffffffffffffffffffffffffffffffff0202ffff300d06092a864886f70d01010b0500030200ff":"":MBEDTLS_ERR_X509_INVALID_NAME + MBEDTLS_ERR_ASN1_UNEXPECTED_TAG
Paul Bakkerb2c38f52009-07-19 19:36:15 +0000[diff] [blame]1307
Hanno Becker2389d162019-02-14 12:52:47 +0000[diff] [blame]1308X509 CRT ASN1 (TBS, inv Issuer, AttrTypeAndValue type inv no length data)
Hanno Becker01346c62019-02-12 13:32:06 +0000[diff] [blame]1309depends_on:MBEDTLS_RSA_C:MBEDTLS_SHA256_C
Hanno Becker5e2cf382019-02-12 15:49:08 +0000[diff] [blame]1310x509parse_crt:"30818e3079a0030201028204deadbeef300d06092a864886f70d01010b050030053103300106301c170c303930313031303030303030170c303931323331323335393539300c310a30080600130454657374302a300d06092A864886F70D010101050003190030160210ffffffffffffffffffffffffffffffff0202ffff300d06092a864886f70d01010b0500030200ff":"":MBEDTLS_ERR_X509_INVALID_NAME + MBEDTLS_ERR_ASN1_OUT_OF_DATA
Paul Bakkerb2c38f52009-07-19 19:36:15 +0000[diff] [blame]1311
Hanno Becker2389d162019-02-14 12:52:47 +0000[diff] [blame]1312X509 CRT ASN1 (TBS, inv Issuer, AttrTypeAndValue type inv length encoding)
Hanno Becker01346c62019-02-12 13:32:06 +0000[diff] [blame]1313depends_on:MBEDTLS_RSA_C:MBEDTLS_SHA256_C
Hanno Becker5e2cf382019-02-12 15:49:08 +0000[diff] [blame]1314x509parse_crt:"30818f307aa0030201028204deadbeef300d06092a864886f70d01010b05003006310430020685301c170c303930313031303030303030170c303931323331323335393539300c310a30080600130454657374302a300d06092A864886F70D010101050003190030160210ffffffffffffffffffffffffffffffff0202ffff300d06092a864886f70d01010b0500030200ff":"":MBEDTLS_ERR_X509_INVALID_NAME + MBEDTLS_ERR_ASN1_INVALID_LENGTH
Paul Bakker345fb492009-07-20 21:26:07 +0000[diff] [blame]1315
Hanno Becker19db19e2019-03-13 10:36:47 +0000[diff] [blame]1316X509 CRT ASN1 (TBS, inv Issuer, AttrTypeAndValue type length out of bounds)
Hanno Becker01346c62019-02-12 13:32:06 +0000[diff] [blame]1317depends_on:MBEDTLS_RSA_C:MBEDTLS_SHA256_C
Hanno Becker5e2cf382019-02-12 15:49:08 +0000[diff] [blame]1318x509parse_crt:"30818f307aa0030201028204deadbeef300d06092a864886f70d01010b05003006310430020601301c170c303930313031303030303030170c303931323331323335393539300c310a30080600130454657374302a300d06092A864886F70D010101050003190030160210ffffffffffffffffffffffffffffffff0202ffff300d06092a864886f70d01010b0500030200ff":"":MBEDTLS_ERR_X509_INVALID_NAME + MBEDTLS_ERR_ASN1_OUT_OF_DATA
Paul Bakker345fb492009-07-20 21:26:07 +0000[diff] [blame]1319
Hanno Becker2389d162019-02-14 12:52:47 +0000[diff] [blame]1320X509 CRT ASN1 (TBS, inv Issuer, AttrTypeAndValue value missing)
Hanno Becker01346c62019-02-12 13:32:06 +0000[diff] [blame]1321depends_on:MBEDTLS_RSA_C:MBEDTLS_SHA256_C
Hanno Becker5e2cf382019-02-12 15:49:08 +0000[diff] [blame]1322x509parse_crt:"30818f307aa0030201028204deadbeef300d06092a864886f70d01010b05003006310430020600301c170c303930313031303030303030170c303931323331323335393539300c310a30080600130454657374302a300d06092A864886F70D010101050003190030160210ffffffffffffffffffffffffffffffff0202ffff300d06092a864886f70d01010b0500030200ff":"":MBEDTLS_ERR_X509_INVALID_NAME + MBEDTLS_ERR_ASN1_OUT_OF_DATA
Paul Bakkerb2c38f52009-07-19 19:36:15 +0000[diff] [blame]1323
Hanno Becker2389d162019-02-14 12:52:47 +0000[diff] [blame]1324X509 CRT ASN1 (TBS, inv Issuer, AttrTypeAndValue value inv tag)
Hanno Becker01346c62019-02-12 13:32:06 +0000[diff] [blame]1325depends_on:MBEDTLS_RSA_C:MBEDTLS_SHA256_C
Hanno Becker0f5acc12019-06-04 16:13:23 +0100[diff] [blame]1326x509parse_crt:"308191307ca0030201028204deadbeef300d06092a864886f70d01010b050030083106300406000500301c170c303930313031303030303030170c303931323331323335393539300c310a30080600130454657374302a300d06092A864886F70D010101050003190030160210ffffffffffffffffffffffffffffffff0202ffff300d06092a864886f70d01010b0500030200ff":"":MBEDTLS_ERR_X509_INVALID_NAME + MBEDTLS_ERR_ASN1_UNEXPECTED_TAG;
Paul Bakkerb2c38f52009-07-19 19:36:15 +0000[diff] [blame]1327
Hanno Becker2389d162019-02-14 12:52:47 +0000[diff] [blame]1328X509 CRT ASN1 (TBS, inv Issuer, AttrTypeAndValue value length missing)
Hanno Becker01346c62019-02-12 13:32:06 +0000[diff] [blame]1329depends_on:MBEDTLS_RSA_C:MBEDTLS_SHA256_C
Hanno Becker5e2cf382019-02-12 15:49:08 +0000[diff] [blame]1330x509parse_crt:"308190307ba0030201028204deadbeef300d06092a864886f70d01010b050030073105300306000c301c170c303930313031303030303030170c303931323331323335393539300c310a30080600130454657374302a300d06092A864886F70D010101050003190030160210ffffffffffffffffffffffffffffffff0202ffff300d06092a864886f70d01010b0500030200ff":"":MBEDTLS_ERR_X509_INVALID_NAME + MBEDTLS_ERR_ASN1_OUT_OF_DATA
Paul Bakker345fb492009-07-20 21:26:07 +0000[diff] [blame]1331
Hanno Becker2389d162019-02-14 12:52:47 +0000[diff] [blame]1332X509 CRT ASN1 (TBS, inv Issuer, AttrTypeAndValue value inv length encoding)
Hanno Becker01346c62019-02-12 13:32:06 +0000[diff] [blame]1333depends_on:MBEDTLS_RSA_C:MBEDTLS_SHA256_C
Hanno Becker5e2cf382019-02-12 15:49:08 +0000[diff] [blame]1334x509parse_crt:"308191307ca0030201028204deadbeef300d06092a864886f70d01010b050030083106300406000C85301c170c303930313031303030303030170c303931323331323335393539300c310a30080600130454657374302a300d06092A864886F70D010101050003190030160210ffffffffffffffffffffffffffffffff0202ffff300d06092a864886f70d01010b0500030200ff":"":MBEDTLS_ERR_X509_INVALID_NAME + MBEDTLS_ERR_ASN1_INVALID_LENGTH
Paul Bakkerb2c38f52009-07-19 19:36:15 +0000[diff] [blame]1335
Hanno Becker2389d162019-02-14 12:52:47 +0000[diff] [blame]1336X509 CRT ASN1 (TBS, inv Issuer, AttrTypeAndValue value length out of bounds)
Hanno Becker01346c62019-02-12 13:32:06 +0000[diff] [blame]1337depends_on:MBEDTLS_RSA_C:MBEDTLS_SHA256_C
Hanno Becker5e2cf382019-02-12 15:49:08 +0000[diff] [blame]1338x509parse_crt:"308191307ca0030201028204deadbeef300d06092a864886f70d01010b050030083106300406000c01301c170c303930313031303030303030170c303931323331323335393539300c310a30080600130454657374302a300d06092A864886F70D010101050003190030160210ffffffffffffffffffffffffffffffff0202ffff300d06092a864886f70d01010b0500030200ff":"":MBEDTLS_ERR_X509_INVALID_NAME + MBEDTLS_ERR_ASN1_OUT_OF_DATA
Paul Bakkerb2c38f52009-07-19 19:36:15 +0000[diff] [blame]1339
Hanno Becker2389d162019-02-14 12:52:47 +0000[diff] [blame]1340X509 CRT ASN1 (TBS, inv Issuer, AttrTypeAndValue value length mismatch)
Hanno Becker01346c62019-02-12 13:32:06 +0000[diff] [blame]1341depends_on:MBEDTLS_RSA_C:MBEDTLS_SHA256_C
Hanno Becker5e2cf382019-02-12 15:49:08 +0000[diff] [blame]1342x509parse_crt:"308193307ea0030201028204deadbeef300d06092a864886f70d01010b0500300a3108300606000c010000301c170c303930313031303030303030170c303931323331323335393539300c310a30080600130454657374302a300d06092A864886F70D010101050003190030160210ffffffffffffffffffffffffffffffff0202ffff300d06092a864886f70d01010b0500030200ff":"":MBEDTLS_ERR_X509_INVALID_NAME + MBEDTLS_ERR_ASN1_LENGTH_MISMATCH
Paul Bakkerb2c38f52009-07-19 19:36:15 +0000[diff] [blame]1343
Hanno Becker2389d162019-02-14 12:52:47 +0000[diff] [blame]1344X509 CRT ASN1 (TBS, inv Issuer, 2nd AttributeTypeValue empty)
Hanno Becker01346c62019-02-12 13:32:06 +0000[diff] [blame]1345depends_on:MBEDTLS_RSA_C:MBEDTLS_SHA256_C
Hanno Becker5e2cf382019-02-12 15:49:08 +0000[diff] [blame]1346x509parse_crt:"308198308182a0030201028204deadbeef300d06092a864886f70d01010b0500300e310c300806000c04546573743000301c170c303930313031303030303030170c303931323331323335393539300c310a30080600130454657374302a300d06092A864886F70D010101050003190030160210ffffffffffffffffffffffffffffffff0202ffff300d06092a864886f70d01010b0500030200ff":"":MBEDTLS_ERR_X509_INVALID_NAME + MBEDTLS_ERR_ASN1_OUT_OF_DATA
Paul Bakkerb2c38f52009-07-19 19:36:15 +0000[diff] [blame]1347
Hanno Becker2389d162019-02-14 12:52:47 +0000[diff] [blame]1348X509 CRT ASN1 (TBS, Validity missing)
Hanno Becker01346c62019-02-12 13:32:06 +0000[diff] [blame]1349depends_on:MBEDTLS_RSA_C:MBEDTLS_SHA256_C
Hanno Becker18459d42019-02-13 11:22:23 +0000[diff] [blame]1350x509parse_crt:"303d3028a0030201028204deadbeef300d06092a864886f70d01010b0500300c310a300806000c0454657374300d06092a864886f70d01010b0500030200ff":"":MBEDTLS_ERR_X509_INVALID_DATE + MBEDTLS_ERR_ASN1_OUT_OF_DATA
Paul Bakkerb2c38f52009-07-19 19:36:15 +0000[diff] [blame]1351
Hanno Becker2389d162019-02-14 12:52:47 +0000[diff] [blame]1352X509 CRT ASN1 (TBS, inv Validity, inv tag)
Hanno Becker01346c62019-02-12 13:32:06 +0000[diff] [blame]1353depends_on:MBEDTLS_RSA_C:MBEDTLS_SHA256_C
Hanno Becker0f5acc12019-06-04 16:13:23 +0100[diff] [blame]1354x509parse_crt:"303f302aa0030201028204deadbeef300d06092a864886f70d01010b0500300c310a300806000c04546573740500300d06092a864886f70d01010b0500030200ff":"":MBEDTLS_ERR_X509_INVALID_DATE + MBEDTLS_ERR_ASN1_UNEXPECTED_TAG
Paul Bakker345fb492009-07-20 21:26:07 +0000[diff] [blame]1355
Hanno Becker2389d162019-02-14 12:52:47 +0000[diff] [blame]1356X509 CRT ASN1 (TBS, inv Validity, length field missing)
Hanno Becker01346c62019-02-12 13:32:06 +0000[diff] [blame]1357depends_on:MBEDTLS_RSA_C:MBEDTLS_SHA256_C
Hanno Becker18459d42019-02-13 11:22:23 +0000[diff] [blame]1358x509parse_crt:"303e3029a0030201028204deadbeef300d06092a864886f70d01010b0500300c310a300806000c045465737430300d06092a864886f70d01010b0500030200ff":"":MBEDTLS_ERR_X509_INVALID_DATE + MBEDTLS_ERR_ASN1_OUT_OF_DATA
Paul Bakkerb2c38f52009-07-19 19:36:15 +0000[diff] [blame]1359
Hanno Becker2389d162019-02-14 12:52:47 +0000[diff] [blame]1360X509 CRT ASN1 (TBS, inv Validity, inv length encoding)
Hanno Becker01346c62019-02-12 13:32:06 +0000[diff] [blame]1361depends_on:MBEDTLS_RSA_C:MBEDTLS_SHA256_C
Hanno Becker18459d42019-02-13 11:22:23 +0000[diff] [blame]1362x509parse_crt:"303f302aa0030201028204deadbeef300d06092a864886f70d01010b0500300c310a300806000c04546573743085300d06092a864886f70d01010b0500030200ff":"":MBEDTLS_ERR_X509_INVALID_DATE + MBEDTLS_ERR_ASN1_INVALID_LENGTH
Paul Bakker345fb492009-07-20 21:26:07 +0000[diff] [blame]1363
Hanno Becker2389d162019-02-14 12:52:47 +0000[diff] [blame]1364X509 CRT ASN1 (TBS, inv Validity, length out of bounds)
Hanno Becker01346c62019-02-12 13:32:06 +0000[diff] [blame]1365depends_on:MBEDTLS_RSA_C:MBEDTLS_SHA256_C
Hanno Becker18459d42019-02-13 11:22:23 +0000[diff] [blame]1366x509parse_crt:"303f302aa0030201028204deadbeef300d06092a864886f70d01010b0500300c310a300806000c04546573743001300d06092a864886f70d01010b0500030200ff":"":MBEDTLS_ERR_X509_INVALID_DATE + MBEDTLS_ERR_ASN1_OUT_OF_DATA
Paul Bakkerb2c38f52009-07-19 19:36:15 +0000[diff] [blame]1367
Hanno Becker2389d162019-02-14 12:52:47 +0000[diff] [blame]1368X509 CRT ASN1 (TBS, inv Validity, notBefore missing)
Hanno Becker01346c62019-02-12 13:32:06 +0000[diff] [blame]1369depends_on:MBEDTLS_RSA_C:MBEDTLS_SHA256_C
Hanno Becker18459d42019-02-13 11:22:23 +0000[diff] [blame]1370x509parse_crt:"30793064a0030201028204deadbeef300d06092a864886f70d01010b0500300c310a300806000c04546573743000300c310a30080600130454657374302a300d06092A864886F70D010101050003190030160210ffffffffffffffffffffffffffffffff0202ffff300d06092a864886f70d01010b0500030200ff":"":MBEDTLS_ERR_X509_INVALID_DATE + MBEDTLS_ERR_ASN1_OUT_OF_DATA
Paul Bakkerb2c38f52009-07-19 19:36:15 +0000[diff] [blame]1371
Hanno Becker2389d162019-02-14 12:52:47 +0000[diff] [blame]1372X509 CRT ASN1 (TBS, inv Validity, notBefore inv tag)
Hanno Becker01346c62019-02-12 13:32:06 +0000[diff] [blame]1373depends_on:MBEDTLS_RSA_C:MBEDTLS_SHA256_C
Hanno Becker0f5acc12019-06-04 16:13:23 +0100[diff] [blame]1374x509parse_crt:"307b3066a0030201028204deadbeef300d06092a864886f70d01010b0500300c310a300806000c045465737430020500300c310a30080600130454657374302a300d06092A864886F70D010101050003190030160210ffffffffffffffffffffffffffffffff0202ffff300d06092a864886f70d01010b0500030200ff":"":MBEDTLS_ERR_X509_INVALID_DATE + MBEDTLS_ERR_ASN1_UNEXPECTED_TAG
Paul Bakkerb2c38f52009-07-19 19:36:15 +0000[diff] [blame]1375
Hanno Becker2389d162019-02-14 12:52:47 +0000[diff] [blame]1376X509 CRT ASN1 (TBS, inv Validity, notBefore no length)
Hanno Becker01346c62019-02-12 13:32:06 +0000[diff] [blame]1377depends_on:MBEDTLS_RSA_C:MBEDTLS_SHA256_C
Hanno Becker18459d42019-02-13 11:22:23 +0000[diff] [blame]1378x509parse_crt:"307a3065a0030201028204deadbeef300d06092a864886f70d01010b0500300c310a300806000c0454657374300117300c310a30080600130454657374302a300d06092A864886F70D010101050003190030160210ffffffffffffffffffffffffffffffff0202ffff300d06092a864886f70d01010b0500030200ff":"":MBEDTLS_ERR_X509_INVALID_DATE + MBEDTLS_ERR_ASN1_OUT_OF_DATA
Paul Bakkerb2c38f52009-07-19 19:36:15 +0000[diff] [blame]1379
Hanno Becker2389d162019-02-14 12:52:47 +0000[diff] [blame]1380X509 CRT ASN1 (TBS, inv Validity, notBefore inv length encoding)
Hanno Becker01346c62019-02-12 13:32:06 +0000[diff] [blame]1381depends_on:MBEDTLS_RSA_C:MBEDTLS_SHA256_C
Hanno Becker18459d42019-02-13 11:22:23 +0000[diff] [blame]1382x509parse_crt:"307b3066a0030201028204deadbeef300d06092a864886f70d01010b0500300c310a300806000c04546573743002178f300c310a30080600130454657374302a300d06092A864886F70D010101050003190030160210ffffffffffffffffffffffffffffffff0202ffff300d06092a864886f70d01010b0500030200ff":"":MBEDTLS_ERR_X509_INVALID_DATE + MBEDTLS_ERR_ASN1_INVALID_LENGTH
Paul Bakkerb2c38f52009-07-19 19:36:15 +0000[diff] [blame]1383
Hanno Becker2389d162019-02-14 12:52:47 +0000[diff] [blame]1384X509 CRT ASN1 (TBS, inv Validity, notBefore length out of bounds)
Hanno Becker01346c62019-02-12 13:32:06 +0000[diff] [blame]1385depends_on:MBEDTLS_RSA_C:MBEDTLS_SHA256_C
Hanno Becker18459d42019-02-13 11:22:23 +0000[diff] [blame]1386x509parse_crt:"307b3066a0030201028204deadbeef300d06092a864886f70d01010b0500300c310a300806000c045465737430021701300c310a30080600130454657374302a300d06092A864886F70D010101050003190030160210ffffffffffffffffffffffffffffffff0202ffff300d06092a864886f70d01010b0500030200ff":"":MBEDTLS_ERR_X509_INVALID_DATE + MBEDTLS_ERR_ASN1_OUT_OF_DATA
Paul Bakker345fb492009-07-20 21:26:07 +0000[diff] [blame]1387
Hanno Becker2389d162019-02-14 12:52:47 +0000[diff] [blame]1388X509 CRT ASN1 (TBS, inv Validity, notBefore empty)
Hanno Becker01346c62019-02-12 13:32:06 +0000[diff] [blame]1389depends_on:MBEDTLS_RSA_C:MBEDTLS_SHA256_C
Hanno Becker18459d42019-02-13 11:22:23 +0000[diff] [blame]1390x509parse_crt:"3081893074a0030201008204deadbeef300d06092a864886f70d01010b0500300c310a3008060013045465737430101700170c303931323331323335393539300c310a30080600130454657374302a300d06092A864886F70D010101050003190030160210ffffffffffffffffffffffffffffffff0202ffff300d06092a864886f70d01010b0500030200ff":"":MBEDTLS_ERR_X509_INVALID_DATE
Paul Bakkerb2c38f52009-07-19 19:36:15 +0000[diff] [blame]1391
Hanno Becker2389d162019-02-14 12:52:47 +0000[diff] [blame]1392X509 CRT ASN1 (TBS, inv Validity, notBefore invalid)
Hanno Becker01346c62019-02-12 13:32:06 +0000[diff] [blame]1393depends_on:MBEDTLS_RSA_C:MBEDTLS_SHA256_C
Hanno Becker18459d42019-02-13 11:22:23 +0000[diff] [blame]1394x509parse_crt:"308196308180a0030201008204deadbeef300d06092a864886f70d01010b0500300c310a30080600130454657374301c170c303930313031303000000000170c303931323331323335393539300c310a30080600130454657374302a300d06092A864886F70D010101050003190030160210ffffffffffffffffffffffffffffffff0202ffff300d06092a864886f70d01010b0500030200ff":"":MBEDTLS_ERR_X509_INVALID_DATE
Paul Bakkerb2c38f52009-07-19 19:36:15 +0000[diff] [blame]1395
Hanno Becker2389d162019-02-14 12:52:47 +0000[diff] [blame]1396X509 CRT ASN1 (TBS, inv Validity, notAfter missing)
Hanno Becker01346c62019-02-12 13:32:06 +0000[diff] [blame]1397depends_on:MBEDTLS_RSA_C:MBEDTLS_SHA256_C
Hanno Becker18459d42019-02-13 11:22:23 +0000[diff] [blame]1398x509parse_crt:"3081873072a0030201008204deadbeef300d06092a864886f70d01010b0500300c310a30080600130454657374300e170c303931323331323335393539300c310a30080600130454657374302a300d06092A864886F70D010101050003190030160210ffffffffffffffffffffffffffffffff0202ffff300d06092a864886f70d01010b0500030200ff":"":MBEDTLS_ERR_X509_INVALID_DATE + MBEDTLS_ERR_ASN1_OUT_OF_DATA
Paul Bakkere4ff4132009-07-27 20:22:10 +0000[diff] [blame]1399
Hanno Becker2389d162019-02-14 12:52:47 +0000[diff] [blame]1400X509 CRT ASN1 (TBS, inv Validity, notAfter inv tag)
Hanno Becker18459d42019-02-13 11:22:23 +0000[diff] [blame]1401depends_on:MBEDTLS_RSA_C:MBEDTLS_SHA256_C
Hanno Becker0f5acc12019-06-04 16:13:23 +0100[diff] [blame]1402x509parse_crt:"3081893074a0030201008204deadbeef300d06092a864886f70d01010b0500300c310a300806001304546573743010170c3039313233313233353935390500300c310a30080600130454657374302a300d06092A864886F70D010101050003190030160210ffffffffffffffffffffffffffffffff0202ffff300d06092a864886f70d01010b0500030200ff":"":MBEDTLS_ERR_X509_INVALID_DATE + MBEDTLS_ERR_ASN1_UNEXPECTED_TAG
Hanno Becker18459d42019-02-13 11:22:23 +0000[diff] [blame]1403
Hanno Becker2389d162019-02-14 12:52:47 +0000[diff] [blame]1404X509 CRT ASN1 (TBS, inv Validity, notAfter length missing)
Hanno Becker18459d42019-02-13 11:22:23 +0000[diff] [blame]1405depends_on:MBEDTLS_RSA_C:MBEDTLS_SHA256_C
1406x509parse_crt:"3081883073a0030201008204deadbeef300d06092a864886f70d01010b0500300c310a30080600130454657374300f170c30393132333132333539353917300c310a30080600130454657374302a300d06092A864886F70D010101050003190030160210ffffffffffffffffffffffffffffffff0202ffff300d06092a864886f70d01010b0500030200ff":"":MBEDTLS_ERR_X509_INVALID_DATE + MBEDTLS_ERR_ASN1_OUT_OF_DATA
1407
Hanno Becker2389d162019-02-14 12:52:47 +0000[diff] [blame]1408X509 CRT ASN1 (TBS, inv Validity, notAfter inv length encoding)
Hanno Becker18459d42019-02-13 11:22:23 +0000[diff] [blame]1409depends_on:MBEDTLS_RSA_C:MBEDTLS_SHA256_C
1410x509parse_crt:"3081893074a0030201008204deadbeef300d06092a864886f70d01010b0500300c310a300806001304546573743010170c3039313233313233353935391785300c310a30080600130454657374302a300d06092A864886F70D010101050003190030160210ffffffffffffffffffffffffffffffff0202ffff300d06092a864886f70d01010b0500030200ff":"":MBEDTLS_ERR_X509_INVALID_DATE + MBEDTLS_ERR_ASN1_INVALID_LENGTH
1411
Hanno Becker2389d162019-02-14 12:52:47 +0000[diff] [blame]1412X509 CRT ASN1 (TBS, inv Validity, notAfter length out of bounds)
Hanno Becker18459d42019-02-13 11:22:23 +0000[diff] [blame]1413depends_on:MBEDTLS_RSA_C:MBEDTLS_SHA256_C
1414x509parse_crt:"3081893074a0030201008204deadbeef300d06092a864886f70d01010b0500300c310a300806001304546573743010170c3039313233313233353935391701300c310a30080600130454657374302a300d06092A864886F70D010101050003190030160210ffffffffffffffffffffffffffffffff0202ffff300d06092a864886f70d01010b0500030200ff":"":MBEDTLS_ERR_X509_INVALID_DATE + MBEDTLS_ERR_ASN1_OUT_OF_DATA
1415
Hanno Becker2389d162019-02-14 12:52:47 +0000[diff] [blame]1416X509 CRT ASN1 (TBS, inv Validity, notAfter empty)
Hanno Becker18459d42019-02-13 11:22:23 +0000[diff] [blame]1417depends_on:MBEDTLS_RSA_C:MBEDTLS_SHA256_C
1418x509parse_crt:"3081893074a0030201008204deadbeef300d06092a864886f70d01010b0500300c310a300806001304546573743010170c3039313233313233353935391700300c310a30080600130454657374302a300d06092A864886F70D010101050003190030160210ffffffffffffffffffffffffffffffff0202ffff300d06092a864886f70d01010b0500030200ff":"":MBEDTLS_ERR_X509_INVALID_DATE
1419
Hanno Becker2389d162019-02-14 12:52:47 +0000[diff] [blame]1420X509 CRT ASN1 (TBS, inv Validity, notAfter invalid)
Hanno Becker18459d42019-02-13 11:22:23 +0000[diff] [blame]1421depends_on:MBEDTLS_RSA_C:MBEDTLS_SHA256_C
1422x509parse_crt:"308196308180a0030201008204deadbeef300d06092a864886f70d01010b0500300c310a30080600130454657374301c170c303931323331323335393539170c303930313031303000000000300c310a30080600130454657374302a300d06092A864886F70D010101050003190030160210ffffffffffffffffffffffffffffffff0202ffff300d06092a864886f70d01010b0500030200ff":"":MBEDTLS_ERR_X509_INVALID_DATE
1423
Hanno Becker7ca07e32019-03-13 10:14:00 +0000[diff] [blame]1424X509 CRT ASN1 (TBS, inv Validity, data remaining after 'notAfter')
Hanno Becker18459d42019-02-13 11:22:23 +0000[diff] [blame]1425depends_on:MBEDTLS_RSA_C:MBEDTLS_SHA256_C
1426x509parse_crt:"308198308182a0030201008204deadbeef300d06092a864886f70d01010b0500300c310a30080600130454657374301e170c303930313031303030303030170c3039313233313233353935391700300c310a30080600130454657374302a300d06092A864886F70D010101050003190030160210ffffffffffffffffffffffffffffffff0202ffff300d06092a864886f70d01010b0500030200ff":"":MBEDTLS_ERR_X509_INVALID_DATE + MBEDTLS_ERR_ASN1_LENGTH_MISMATCH
Paul Bakkerb2c38f52009-07-19 19:36:15 +0000[diff] [blame]1427
Hanno Becker2389d162019-02-14 12:52:47 +0000[diff] [blame]1428X509 CRT ASN1 (TBS, Subject missing)
Paul Bakkerb2c38f52009-07-19 19:36:15 +0000[diff] [blame]1429depends_on:MBEDTLS_RSA_C:MBEDTLS_SHA256_C
Hanno Becker28ae6b12019-02-13 11:59:00 +0000[diff] [blame]1430x509parse_crt:"305b3046a0030201008204deadbeef300d06092a864886f70d01010b0500300c310a30080600130454657374301c170c303930313031303030303030170c303931323331323335393539300d06092a864886f70d01010b0500030200ff":"":MBEDTLS_ERR_X509_INVALID_FORMAT + MBEDTLS_ERR_ASN1_OUT_OF_DATA
1431
Hanno Becker2389d162019-02-14 12:52:47 +0000[diff] [blame]1432X509 CRT ASN1 (TBS, inv Subject, RDNSequence inv tag)
Hanno Becker28ae6b12019-02-13 11:59:00 +0000[diff] [blame]1433depends_on:MBEDTLS_RSA_C:MBEDTLS_SHA256_C
1434x509parse_crt:"305c3047a0030201008204deadbeef300d06092a864886f70d01010b0500300c310a30080600130454657374301c170c303930313031303030303030170c30393132333132333539353900300d06092a864886f70d01010b0500030200ff":"":MBEDTLS_ERR_X509_INVALID_FORMAT + MBEDTLS_ERR_ASN1_UNEXPECTED_TAG
1435
Hanno Becker2389d162019-02-14 12:52:47 +0000[diff] [blame]1436X509 CRT ASN1 (TBS, inv Subject, RDNSequence length missing)
Hanno Becker28ae6b12019-02-13 11:59:00 +0000[diff] [blame]1437depends_on:MBEDTLS_RSA_C:MBEDTLS_SHA256_C
1438x509parse_crt:"305c3047a0030201008204deadbeef300d06092a864886f70d01010b0500300c310a30080600130454657374301c170c303930313031303030303030170c30393132333132333539353930300d06092a864886f70d01010b0500030200ff":"":MBEDTLS_ERR_X509_INVALID_FORMAT + MBEDTLS_ERR_ASN1_OUT_OF_DATA
1439
Hanno Becker2389d162019-02-14 12:52:47 +0000[diff] [blame]1440X509 CRT ASN1 (TBS, inv Subject, RDNSequence inv length encoding)
Hanno Becker28ae6b12019-02-13 11:59:00 +0000[diff] [blame]1441depends_on:MBEDTLS_RSA_C:MBEDTLS_SHA256_C
1442x509parse_crt:"305d3048a0030201008204deadbeef300d06092a864886f70d01010b0500300c310a30080600130454657374301c170c303930313031303030303030170c3039313233313233353935393085300d06092a864886f70d01010b0500030200ff":"":MBEDTLS_ERR_X509_INVALID_FORMAT + MBEDTLS_ERR_ASN1_INVALID_LENGTH
1443
Hanno Becker2389d162019-02-14 12:52:47 +0000[diff] [blame]1444X509 CRT ASN1 (TBS, inv Subject, RDNSequence length out of bounds)
Hanno Becker28ae6b12019-02-13 11:59:00 +0000[diff] [blame]1445depends_on:MBEDTLS_RSA_C:MBEDTLS_SHA256_C
1446x509parse_crt:"305d3048a0030201008204deadbeef300d06092a864886f70d01010b0500300c310a30080600130454657374301c170c303930313031303030303030170c3039313233313233353935393001300d06092a864886f70d01010b0500030200ff":"":MBEDTLS_ERR_X509_INVALID_FORMAT + MBEDTLS_ERR_ASN1_OUT_OF_DATA
1447
Hanno Becker2389d162019-02-14 12:52:47 +0000[diff] [blame]1448X509 CRT ASN1 (TBS, inv Subject, RDN inv tag)
Hanno Becker28ae6b12019-02-13 11:59:00 +0000[diff] [blame]1449depends_on:MBEDTLS_RSA_C:MBEDTLS_SHA256_C
Hanno Becker0f5acc12019-06-04 16:13:23 +0100[diff] [blame]1450x509parse_crt:"30818b3076a0030201028204deadbeef300d06092a864886f70d01010b0500300c310a30080600130454657374301c170c303930313031303030303030170c30393132333132333539353930020500302a300d06092A864886F70D010101050003190030160210ffffffffffffffffffffffffffffffff0202ffff300d06092a864886f70d01010b0500030200ff":"":MBEDTLS_ERR_X509_INVALID_NAME + MBEDTLS_ERR_ASN1_UNEXPECTED_TAG
Hanno Becker28ae6b12019-02-13 11:59:00 +0000[diff] [blame]1451
Hanno Becker2389d162019-02-14 12:52:47 +0000[diff] [blame]1452X509 CRT ASN1 (TBS, inv Subject, RDN inv length encoding)
Hanno Becker28ae6b12019-02-13 11:59:00 +0000[diff] [blame]1453depends_on:MBEDTLS_RSA_C:MBEDTLS_SHA256_C
1454x509parse_crt:"30818b3076a0030201028204deadbeef300d06092a864886f70d01010b0500300c310a30080600130454657374301c170c303930313031303030303030170c30393132333132333539353930023185302a300d06092A864886F70D010101050003190030160210ffffffffffffffffffffffffffffffff0202ffff300d06092a864886f70d01010b0500030200ff":"":MBEDTLS_ERR_X509_INVALID_NAME + MBEDTLS_ERR_ASN1_INVALID_LENGTH
1455
Hanno Becker2389d162019-02-14 12:52:47 +0000[diff] [blame]1456X509 CRT ASN1 (TBS, inv Subject, RDN length out of bounds)
Hanno Becker28ae6b12019-02-13 11:59:00 +0000[diff] [blame]1457depends_on:MBEDTLS_RSA_C:MBEDTLS_SHA256_C
1458x509parse_crt:"30818b3076a0030201028204deadbeef300d06092a864886f70d01010b0500300c310a30080600130454657374301c170c303930313031303030303030170c30393132333132333539353930023101302a300d06092A864886F70D010101050003190030160210ffffffffffffffffffffffffffffffff0202ffff300d06092a864886f70d01010b0500030200ff":"":MBEDTLS_ERR_X509_INVALID_NAME + MBEDTLS_ERR_ASN1_OUT_OF_DATA
1459
Hanno Becker2389d162019-02-14 12:52:47 +0000[diff] [blame]1460X509 CRT ASN1 (TBS, inv Subject, RDN empty)
Hanno Becker28ae6b12019-02-13 11:59:00 +0000[diff] [blame]1461depends_on:MBEDTLS_RSA_C:MBEDTLS_SHA256_C
1462x509parse_crt:"30818b3076a0030201028204deadbeef300d06092a864886f70d01010b0500300c310a30080600130454657374301c170c303930313031303030303030170c30393132333132333539353930023100302a300d06092A864886F70D010101050003190030160210ffffffffffffffffffffffffffffffff0202ffff300d06092a864886f70d01010b0500030200ff":"":MBEDTLS_ERR_X509_INVALID_NAME + MBEDTLS_ERR_ASN1_OUT_OF_DATA
1463
Hanno Becker2389d162019-02-14 12:52:47 +0000[diff] [blame]1464X509 CRT ASN1 (TBS, inv Subject, AttrTypeAndValue inv tag)
Hanno Becker28ae6b12019-02-13 11:59:00 +0000[diff] [blame]1465depends_on:MBEDTLS_RSA_C:MBEDTLS_SHA256_C
Hanno Becker0f5acc12019-06-04 16:13:23 +0100[diff] [blame]1466x509parse_crt:"30818d3078a0030201028204deadbeef300d06092a864886f70d01010b0500300c310a30080600130454657374301c170c303930313031303030303030170c303931323331323335393539300431020500302a300d06092A864886F70D010101050003190030160210ffffffffffffffffffffffffffffffff0202ffff300d06092a864886f70d01010b0500030200ff":"":MBEDTLS_ERR_X509_INVALID_NAME + MBEDTLS_ERR_ASN1_UNEXPECTED_TAG
Hanno Becker28ae6b12019-02-13 11:59:00 +0000[diff] [blame]1467
Hanno Becker2389d162019-02-14 12:52:47 +0000[diff] [blame]1468X509 CRT ASN1 (TBS, inv Subject, AttrTypeAndValue inv length encoding)
Hanno Becker28ae6b12019-02-13 11:59:00 +0000[diff] [blame]1469depends_on:MBEDTLS_RSA_C:MBEDTLS_SHA256_C
1470x509parse_crt:"30818d3078a0030201028204deadbeef300d06092a864886f70d01010b0500300c310a30080600130454657374301c170c303930313031303030303030170c303931323331323335393539300431023085302a300d06092A864886F70D010101050003190030160210ffffffffffffffffffffffffffffffff0202ffff300d06092a864886f70d01010b0500030200ff":"":MBEDTLS_ERR_X509_INVALID_NAME + MBEDTLS_ERR_ASN1_INVALID_LENGTH
1471
Hanno Becker2389d162019-02-14 12:52:47 +0000[diff] [blame]1472X509 CRT ASN1 (TBS, inv Subject, AttrTypeAndValue length out of bounds)
Hanno Becker28ae6b12019-02-13 11:59:00 +0000[diff] [blame]1473depends_on:MBEDTLS_RSA_C:MBEDTLS_SHA256_C
1474x509parse_crt:"30818d3078a0030201028204deadbeef300d06092a864886f70d01010b0500300c310a30080600130454657374301c170c303930313031303030303030170c303931323331323335393539300431023001302a300d06092A864886F70D010101050003190030160210ffffffffffffffffffffffffffffffff0202ffff300d06092a864886f70d01010b0500030200ff":"":MBEDTLS_ERR_X509_INVALID_NAME + MBEDTLS_ERR_ASN1_OUT_OF_DATA
1475
Hanno Becker2389d162019-02-14 12:52:47 +0000[diff] [blame]1476X509 CRT ASN1 (TBS, inv Subject, AttrTypeAndValue empty)
Hanno Becker28ae6b12019-02-13 11:59:00 +0000[diff] [blame]1477depends_on:MBEDTLS_RSA_C:MBEDTLS_SHA256_C
1478x509parse_crt:"30818d3078a0030201028204deadbeef300d06092a864886f70d01010b0500300c310a30080600130454657374301c170c303930313031303030303030170c303931323331323335393539300431023000302a300d06092A864886F70D010101050003190030160210ffffffffffffffffffffffffffffffff0202ffff300d06092a864886f70d01010b0500030200ff":"":MBEDTLS_ERR_X509_INVALID_NAME + MBEDTLS_ERR_ASN1_OUT_OF_DATA
1479
Hanno Becker2389d162019-02-14 12:52:47 +0000[diff] [blame]1480X509 CRT ASN1 (TBS, inv Subject, AttrTypeAndValue type inv tag)
Hanno Becker28ae6b12019-02-13 11:59:00 +0000[diff] [blame]1481depends_on:MBEDTLS_RSA_C:MBEDTLS_SHA256_C
Hanno Becker0f5acc12019-06-04 16:13:23 +0100[diff] [blame]1482x509parse_crt:"30818f307aa0030201028204deadbeef300d06092a864886f70d01010b0500300c310a30080600130454657374301c170c303930313031303030303030170c3039313233313233353935393006310430020500302a300d06092A864886F70D010101050003190030160210ffffffffffffffffffffffffffffffff0202ffff300d06092a864886f70d01010b0500030200ff":"":MBEDTLS_ERR_X509_INVALID_NAME + MBEDTLS_ERR_ASN1_UNEXPECTED_TAG
Hanno Becker28ae6b12019-02-13 11:59:00 +0000[diff] [blame]1483
Hanno Becker2389d162019-02-14 12:52:47 +0000[diff] [blame]1484X509 CRT ASN1 (TBS, inv Subject, AttrTypeAndValue type inv no length data)
Hanno Becker28ae6b12019-02-13 11:59:00 +0000[diff] [blame]1485depends_on:MBEDTLS_RSA_C:MBEDTLS_SHA256_C
1486x509parse_crt:"30818e3079a0030201028204deadbeef300d06092a864886f70d01010b0500300c310a30080600130454657374301c170c303930313031303030303030170c30393132333132333539353930053103300106302a300d06092A864886F70D010101050003190030160210ffffffffffffffffffffffffffffffff0202ffff300d06092a864886f70d01010b0500030200ff":"":MBEDTLS_ERR_X509_INVALID_NAME + MBEDTLS_ERR_ASN1_OUT_OF_DATA
1487
Hanno Becker2389d162019-02-14 12:52:47 +0000[diff] [blame]1488X509 CRT ASN1 (TBS, inv Subject, AttrTypeAndValue type inv length encoding)
Hanno Becker28ae6b12019-02-13 11:59:00 +0000[diff] [blame]1489depends_on:MBEDTLS_RSA_C:MBEDTLS_SHA256_C
1490x509parse_crt:"30818f307aa0030201028204deadbeef300d06092a864886f70d01010b0500300c310a30080600130454657374301c170c303930313031303030303030170c3039313233313233353935393006310430020685302a300d06092A864886F70D010101050003190030160210ffffffffffffffffffffffffffffffff0202ffff300d06092a864886f70d01010b0500030200ff":"":MBEDTLS_ERR_X509_INVALID_NAME + MBEDTLS_ERR_ASN1_INVALID_LENGTH
1491
Hanno Becker2389d162019-02-14 12:52:47 +0000[diff] [blame]1492X509 CRT ASN1 (TBS, inv Subject, AttrTypeAndValue type length out of bounds )
Hanno Becker28ae6b12019-02-13 11:59:00 +0000[diff] [blame]1493depends_on:MBEDTLS_RSA_C:MBEDTLS_SHA256_C
1494x509parse_crt:"30818f307aa0030201028204deadbeef300d06092a864886f70d01010b0500300c310a30080600130454657374301c170c303930313031303030303030170c3039313233313233353935393006310430020601302a300d06092A864886F70D010101050003190030160210ffffffffffffffffffffffffffffffff0202ffff300d06092a864886f70d01010b0500030200ff":"":MBEDTLS_ERR_X509_INVALID_NAME + MBEDTLS_ERR_ASN1_OUT_OF_DATA
1495
Hanno Becker2389d162019-02-14 12:52:47 +0000[diff] [blame]1496X509 CRT ASN1 (TBS, inv Subject, AttrTypeAndValue value missing)
Hanno Becker28ae6b12019-02-13 11:59:00 +0000[diff] [blame]1497depends_on:MBEDTLS_RSA_C:MBEDTLS_SHA256_C
1498x509parse_crt:"30818f307aa0030201028204deadbeef300d06092a864886f70d01010b0500300c310a30080600130454657374301c170c303930313031303030303030170c3039313233313233353935393006310430020600302a300d06092A864886F70D010101050003190030160210ffffffffffffffffffffffffffffffff0202ffff300d06092a864886f70d01010b0500030200ff":"":MBEDTLS_ERR_X509_INVALID_NAME + MBEDTLS_ERR_ASN1_OUT_OF_DATA
1499
Hanno Becker2389d162019-02-14 12:52:47 +0000[diff] [blame]1500X509 CRT ASN1 (TBS, inv Subject, AttrTypeAndValue value inv tag)
Hanno Becker28ae6b12019-02-13 11:59:00 +0000[diff] [blame]1501depends_on:MBEDTLS_RSA_C:MBEDTLS_SHA256_C
Hanno Becker0f5acc12019-06-04 16:13:23 +0100[diff] [blame]1502x509parse_crt:"308191307ca0030201028204deadbeef300d06092a864886f70d01010b0500300c310a30080600130454657374301c170c303930313031303030303030170c30393132333132333539353930083106300406000500302a300d06092A864886F70D010101050003190030160210ffffffffffffffffffffffffffffffff0202ffff300d06092a864886f70d01010b0500030200ff":"":MBEDTLS_ERR_X509_INVALID_NAME + MBEDTLS_ERR_ASN1_UNEXPECTED_TAG;
Hanno Becker28ae6b12019-02-13 11:59:00 +0000[diff] [blame]1503
Hanno Becker2389d162019-02-14 12:52:47 +0000[diff] [blame]1504X509 CRT ASN1 (TBS, inv Subject, AttrTypeAndValue value length missing)
Hanno Becker28ae6b12019-02-13 11:59:00 +0000[diff] [blame]1505depends_on:MBEDTLS_RSA_C:MBEDTLS_SHA256_C
1506x509parse_crt:"308190307ba0030201028204deadbeef300d06092a864886f70d01010b0500300c310a30080600130454657374301c170c303930313031303030303030170c30393132333132333539353930073105300306000c302a300d06092A864886F70D010101050003190030160210ffffffffffffffffffffffffffffffff0202ffff300d06092a864886f70d01010b0500030200ff":"":MBEDTLS_ERR_X509_INVALID_NAME + MBEDTLS_ERR_ASN1_OUT_OF_DATA
1507
Hanno Becker2389d162019-02-14 12:52:47 +0000[diff] [blame]1508X509 CRT ASN1 (TBS, inv Subject, AttrTypeAndValue value inv length encoding)
Hanno Becker28ae6b12019-02-13 11:59:00 +0000[diff] [blame]1509depends_on:MBEDTLS_RSA_C:MBEDTLS_SHA256_C
1510x509parse_crt:"308191307ca0030201028204deadbeef300d06092a864886f70d01010b0500300c310a30080600130454657374301c170c303930313031303030303030170c30393132333132333539353930083106300406000C85302a300d06092A864886F70D010101050003190030160210ffffffffffffffffffffffffffffffff0202ffff300d06092a864886f70d01010b0500030200ff":"":MBEDTLS_ERR_X509_INVALID_NAME + MBEDTLS_ERR_ASN1_INVALID_LENGTH
1511
Hanno Becker2389d162019-02-14 12:52:47 +0000[diff] [blame]1512X509 CRT ASN1 (TBS, inv Subject, AttrTypeAndValue value length out of bounds)
Hanno Becker28ae6b12019-02-13 11:59:00 +0000[diff] [blame]1513depends_on:MBEDTLS_RSA_C:MBEDTLS_SHA256_C
1514x509parse_crt:"308191307ca0030201028204deadbeef300d06092a864886f70d01010b0500300c310a30080600130454657374301c170c303930313031303030303030170c30393132333132333539353930083106300406000c01302a300d06092A864886F70D010101050003190030160210ffffffffffffffffffffffffffffffff0202ffff300d06092a864886f70d01010b0500030200ff":"":MBEDTLS_ERR_X509_INVALID_NAME + MBEDTLS_ERR_ASN1_OUT_OF_DATA
1515
Hanno Becker2389d162019-02-14 12:52:47 +0000[diff] [blame]1516X509 CRT ASN1 (TBS, inv Subject, AttrTypeAndValue value length mismatch)
Hanno Becker28ae6b12019-02-13 11:59:00 +0000[diff] [blame]1517depends_on:MBEDTLS_RSA_C:MBEDTLS_SHA256_C
1518x509parse_crt:"308193307ea0030201028204deadbeef300d06092a864886f70d01010b0500300c310a30080600130454657374301c170c303930313031303030303030170c303931323331323335393539300a3108300606000c010000302a300d06092A864886F70D010101050003190030160210ffffffffffffffffffffffffffffffff0202ffff300d06092a864886f70d01010b0500030200ff":"":MBEDTLS_ERR_X509_INVALID_NAME + MBEDTLS_ERR_ASN1_LENGTH_MISMATCH
1519
Hanno Becker2389d162019-02-14 12:52:47 +0000[diff] [blame]1520X509 CRT ASN1 (TBS, inv Subject, 2nd AttributeTypeValue empty)
Hanno Becker28ae6b12019-02-13 11:59:00 +0000[diff] [blame]1521depends_on:MBEDTLS_RSA_C:MBEDTLS_SHA256_C
1522x509parse_crt:"308198308182a0030201028204deadbeef300d06092a864886f70d01010b0500300c310a30080600130454657374301c170c303930313031303030303030170c303931323331323335393539300e310c300806000c04546573743000302a300d06092A864886F70D010101050003190030160210ffffffffffffffffffffffffffffffff0202ffff300d06092a864886f70d01010b0500030200ff":"":MBEDTLS_ERR_X509_INVALID_NAME + MBEDTLS_ERR_ASN1_OUT_OF_DATA
Paul Bakkerb2c38f52009-07-19 19:36:15 +0000[diff] [blame]1523
Hanno Becker2389d162019-02-14 12:52:47 +0000[diff] [blame]1524X509 CRT ASN1 (TBS, SubPubKeyInfo missing)
Paul Bakkerb2c38f52009-07-19 19:36:15 +0000[diff] [blame]1525depends_on:MBEDTLS_RSA_C:MBEDTLS_SHA256_C
Hanno Beckerbb955e52019-06-04 15:38:48 +0100[diff] [blame]1526x509parse_crt:"30693054a0030201008204deadbeef300d06092a864886f70d01010b0500300c310a30080600130454657374301c170c303930313031303030303030170c303931323331323335393539300c310a30080600130454657374300d06092a864886f70d01010b0500030200ff":"":MBEDTLS_ERR_PK_KEY_INVALID_FORMAT + MBEDTLS_ERR_ASN1_OUT_OF_DATA
Paul Bakkerb2c38f52009-07-19 19:36:15 +0000[diff] [blame]1527
Hanno Becker19db19e2019-03-13 10:36:47 +0000[diff] [blame]1528X509 CRT ASN1 (TBS, inv SubPubKeyInfo, inv tag)
Paul Bakkerb2c38f52009-07-19 19:36:15 +0000[diff] [blame]1529depends_on:MBEDTLS_RSA_C:MBEDTLS_SHA256_C
Hanno Becker0f5acc12019-06-04 16:13:23 +0100[diff] [blame]1530x509parse_crt:"306b3056a0030201008204deadbeef300d06092a864886f70d01010b0500300c310a30080600130454657374301c170c303930313031303030303030170c303931323331323335393539300c310a300806001304546573740500300d06092a864886f70d01010b0500030200ff":"":MBEDTLS_ERR_PK_KEY_INVALID_FORMAT + MBEDTLS_ERR_ASN1_UNEXPECTED_TAG
Paul Bakkerb2c38f52009-07-19 19:36:15 +0000[diff] [blame]1531
Hanno Becker19db19e2019-03-13 10:36:47 +0000[diff] [blame]1532X509 CRT ASN1 (TBS, inv SubPubKeyInfo, length missing)
Paul Bakkerb2c38f52009-07-19 19:36:15 +0000[diff] [blame]1533depends_on:MBEDTLS_RSA_C:MBEDTLS_SHA256_C
Hanno Beckerbb955e52019-06-04 15:38:48 +0100[diff] [blame]1534x509parse_crt:"306a3055a0030201008204deadbeef300d06092a864886f70d01010b0500300c310a30080600130454657374301c170c303930313031303030303030170c303931323331323335393539300c310a3008060013045465737430300d06092a864886f70d01010b0500030200ff":"":MBEDTLS_ERR_PK_KEY_INVALID_FORMAT + MBEDTLS_ERR_ASN1_OUT_OF_DATA
Paul Bakkerb2c38f52009-07-19 19:36:15 +0000[diff] [blame]1535
Hanno Becker19db19e2019-03-13 10:36:47 +0000[diff] [blame]1536X509 CRT ASN1 (TBS, inv SubPubKeyInfo, inv length encoding)
Paul Bakkerb2c38f52009-07-19 19:36:15 +0000[diff] [blame]1537depends_on:MBEDTLS_RSA_C:MBEDTLS_SHA256_C
Hanno Beckerbb955e52019-06-04 15:38:48 +0100[diff] [blame]1538x509parse_crt:"306b3056a0030201008204deadbeef300d06092a864886f70d01010b0500300c310a30080600130454657374301c170c303930313031303030303030170c303931323331323335393539300c310a300806001304546573743085300d06092a864886f70d01010b0500030200ff":"":MBEDTLS_ERR_PK_KEY_INVALID_FORMAT + MBEDTLS_ERR_ASN1_INVALID_LENGTH
Paul Bakkerb2c38f52009-07-19 19:36:15 +0000[diff] [blame]1539
Hanno Becker19db19e2019-03-13 10:36:47 +0000[diff] [blame]1540X509 CRT ASN1 (TBS, inv SubPubKeyInfo, length out of bounds)
Paul Bakkerb2c38f52009-07-19 19:36:15 +0000[diff] [blame]1541depends_on:MBEDTLS_RSA_C:MBEDTLS_SHA256_C
Hanno Beckerbb955e52019-06-04 15:38:48 +0100[diff] [blame]1542x509parse_crt:"306b3056a0030201008204deadbeef300d06092a864886f70d01010b0500300c310a30080600130454657374301c170c303930313031303030303030170c303931323331323335393539300c310a300806001304546573743001300d06092a864886f70d01010b0500030200ff":"":MBEDTLS_ERR_PK_KEY_INVALID_FORMAT + MBEDTLS_ERR_ASN1_OUT_OF_DATA
Paul Bakkerb2c38f52009-07-19 19:36:15 +0000[diff] [blame]1543
Hanno Becker19db19e2019-03-13 10:36:47 +0000[diff] [blame]1544X509 CRT ASN1 (TBS, inv SubPubKeyInfo, empty)
Paul Bakkerb2c38f52009-07-19 19:36:15 +0000[diff] [blame]1545depends_on:MBEDTLS_RSA_C:MBEDTLS_SHA256_C
Hanno Beckerbb955e52019-06-04 15:38:48 +0100[diff] [blame]1546x509parse_crt:"306b3056a0030201008204deadbeef300d06092a864886f70d01010b0500300c310a30080600130454657374301c170c303930313031303030303030170c303931323331323335393539300c310a300806001304546573743000300d06092a864886f70d01010b0500030200ff":"":MBEDTLS_ERR_PK_INVALID_ALG + MBEDTLS_ERR_ASN1_OUT_OF_DATA
Paul Bakkerb2c38f52009-07-19 19:36:15 +0000[diff] [blame]1547
Hanno Becker19db19e2019-03-13 10:36:47 +0000[diff] [blame]1548X509 CRT ASN1 (TBS, inv SubPubKeyInfo, inv algorithm tag)
Paul Bakkerb2c38f52009-07-19 19:36:15 +0000[diff] [blame]1549depends_on:MBEDTLS_RSA_C:MBEDTLS_SHA256_C
Hanno Becker0f5acc12019-06-04 16:13:23 +0100[diff] [blame]1550x509parse_crt:"306d3058a0030201008204deadbeef300d06092a864886f70d01010b0500300c310a30080600130454657374301c170c303930313031303030303030170c303931323331323335393539300c310a3008060013045465737430020500300d06092a864886f70d01010b0500030200ff":"":MBEDTLS_ERR_PK_INVALID_ALG + MBEDTLS_ERR_ASN1_UNEXPECTED_TAG
Paul Bakkerb2c38f52009-07-19 19:36:15 +0000[diff] [blame]1551
Hanno Becker19db19e2019-03-13 10:36:47 +0000[diff] [blame]1552X509 CRT ASN1 (TBS, inv SubPubKeyInfo, algorithm length missing)
Paul Bakkerb2c38f52009-07-19 19:36:15 +0000[diff] [blame]1553depends_on:MBEDTLS_RSA_C:MBEDTLS_SHA256_C
Hanno Beckerbb955e52019-06-04 15:38:48 +0100[diff] [blame]1554x509parse_crt:"306c3057a0030201008204deadbeef300d06092a864886f70d01010b0500300c310a30080600130454657374301c170c303930313031303030303030170c303931323331323335393539300c310a30080600130454657374300130300d06092a864886f70d01010b0500030200ff":"":MBEDTLS_ERR_PK_INVALID_ALG + MBEDTLS_ERR_ASN1_OUT_OF_DATA
Paul Bakkerb2c38f52009-07-19 19:36:15 +0000[diff] [blame]1555
Hanno Becker19db19e2019-03-13 10:36:47 +0000[diff] [blame]1556X509 CRT ASN1 (TBS, inv SubPubKeyInfo, algorithm inv length encoding)
Paul Bakkerb2c38f52009-07-19 19:36:15 +0000[diff] [blame]1557depends_on:MBEDTLS_RSA_C:MBEDTLS_SHA256_C
Hanno Beckerbb955e52019-06-04 15:38:48 +0100[diff] [blame]1558x509parse_crt:"306d3058a0030201008204deadbeef300d06092a864886f70d01010b0500300c310a30080600130454657374301c170c303930313031303030303030170c303931323331323335393539300c310a3008060013045465737430023085300d06092a864886f70d01010b0500030200ff":"":MBEDTLS_ERR_PK_INVALID_ALG + MBEDTLS_ERR_ASN1_INVALID_LENGTH
Paul Bakkerb2c38f52009-07-19 19:36:15 +0000[diff] [blame]1559
Hanno Becker19db19e2019-03-13 10:36:47 +0000[diff] [blame]1560X509 CRT ASN1 (TBS, inv SubPubKeyInfo, algorithm length out of bounds)
Paul Bakkerb2c38f52009-07-19 19:36:15 +0000[diff] [blame]1561depends_on:MBEDTLS_RSA_C:MBEDTLS_SHA256_C
Hanno Beckerbb955e52019-06-04 15:38:48 +0100[diff] [blame]1562x509parse_crt:"306d3058a0030201008204deadbeef300d06092a864886f70d01010b0500300c310a30080600130454657374301c170c303930313031303030303030170c303931323331323335393539300c310a3008060013045465737430023001300d06092a864886f70d01010b0500030200ff":"":MBEDTLS_ERR_PK_INVALID_ALG + MBEDTLS_ERR_ASN1_OUT_OF_DATA
Paul Bakkerb2c38f52009-07-19 19:36:15 +0000[diff] [blame]1563
Hanno Becker19db19e2019-03-13 10:36:47 +0000[diff] [blame]1564X509 CRT ASN1 (TBS, inv SubPubKeyInfo, algorithm empty)
Paul Bakkerb2c38f52009-07-19 19:36:15 +0000[diff] [blame]1565depends_on:MBEDTLS_RSA_C:MBEDTLS_SHA256_C
Hanno Beckerbb955e52019-06-04 15:38:48 +0100[diff] [blame]1566x509parse_crt:"3081883073a0030201008204deadbeef300d06092a864886f70d01010b0500300c310a30080600130454657374301c170c303930313031303030303030170c303931323331323335393539300c310a30080600130454657374301d300003190030160210ffffffffffffffffffffffffffffffff0202ffff300d06092a864886f70d01010b0500030200ff":"":MBEDTLS_ERR_PK_INVALID_ALG + MBEDTLS_ERR_ASN1_OUT_OF_DATA
Paul Bakkerb2c38f52009-07-19 19:36:15 +0000[diff] [blame]1567
Hanno Becker19db19e2019-03-13 10:36:47 +0000[diff] [blame]1568X509 CRT ASN1 (TBS, inv SubPubKeyInfo, algorithm unknown)
Paul Bakkerb2c38f52009-07-19 19:36:15 +0000[diff] [blame]1569depends_on:MBEDTLS_RSA_C:MBEDTLS_SHA256_C
Hanno Beckerbb955e52019-06-04 15:38:48 +0100[diff] [blame]1570x509parse_crt:"308196308180a0030201008204deadbeef300d06092a864886f70d01010b0500300c310a30080600130454657374301c170c303930313031303030303030170c303931323331323335393539300c310a30080600130454657374302a300d06092A864886F70D010100050003190030160210ffffffffffffffffffffffffffffffff0202ffff300d06092a864886f70d01010b0500030200ff":"":MBEDTLS_ERR_PK_UNKNOWN_PK_ALG
1571
Hanno Becker19db19e2019-03-13 10:36:47 +0000[diff] [blame]1572X509 CRT ASN1 (TBS, inv SubPubKeyInfo, bitstring missing)
Hanno Beckerbb955e52019-06-04 15:38:48 +0100[diff] [blame]1573depends_on:MBEDTLS_RSA_C:MBEDTLS_SHA256_C
1574x509parse_crt:"307a3065a0030201008204deadbeef300d06092a864886f70d01010b0500300c310a30080600130454657374301c170c303930313031303030303030170c303931323331323335393539300c310a30080600130454657374300f300d06092A864886F70D0101010500300d06092a864886f70d01010b0500030200ff":"":MBEDTLS_ERR_PK_INVALID_PUBKEY + MBEDTLS_ERR_ASN1_OUT_OF_DATA
1575
Hanno Becker19db19e2019-03-13 10:36:47 +0000[diff] [blame]1576X509 CRT ASN1 (TBS, inv SubPubKeyInfo, bitstring inv tag)
Hanno Beckerbb955e52019-06-04 15:38:48 +0100[diff] [blame]1577depends_on:MBEDTLS_RSA_C:MBEDTLS_SHA256_C
Hanno Becker0f5acc12019-06-04 16:13:23 +0100[diff] [blame]1578x509parse_crt:"307c3067a0030201008204deadbeef300d06092a864886f70d01010b0500300c310a30080600130454657374301c170c303930313031303030303030170c303931323331323335393539300c310a300806001304546573743011300d06092A864886F70D01010105000500300d06092a864886f70d01010b0500030200ff":"":MBEDTLS_ERR_PK_INVALID_PUBKEY + MBEDTLS_ERR_ASN1_UNEXPECTED_TAG
Hanno Beckerbb955e52019-06-04 15:38:48 +0100[diff] [blame]1579
Hanno Becker19db19e2019-03-13 10:36:47 +0000[diff] [blame]1580X509 CRT ASN1 (TBS, inv SubPubKeyInfo, bitstring length missing)
Hanno Beckerbb955e52019-06-04 15:38:48 +0100[diff] [blame]1581depends_on:MBEDTLS_RSA_C:MBEDTLS_SHA256_C
1582x509parse_crt:"307b3066a0030201008204deadbeef300d06092a864886f70d01010b0500300c310a30080600130454657374301c170c303930313031303030303030170c303931323331323335393539300c310a300806001304546573743010300d06092A864886F70D010101050003300d06092a864886f70d01010b0500030200ff":"":MBEDTLS_ERR_PK_INVALID_PUBKEY + MBEDTLS_ERR_ASN1_OUT_OF_DATA
1583
Hanno Becker19db19e2019-03-13 10:36:47 +0000[diff] [blame]1584X509 CRT ASN1 (TBS, inv SubPubKeyInfo, bitstring inv length encoding)
Hanno Beckerbb955e52019-06-04 15:38:48 +0100[diff] [blame]1585depends_on:MBEDTLS_RSA_C:MBEDTLS_SHA256_C
1586x509parse_crt:"307c3067a0030201008204deadbeef300d06092a864886f70d01010b0500300c310a30080600130454657374301c170c303930313031303030303030170c303931323331323335393539300c310a300806001304546573743011300d06092A864886F70D01010105000385300d06092a864886f70d01010b0500030200ff":"":MBEDTLS_ERR_PK_INVALID_PUBKEY + MBEDTLS_ERR_ASN1_INVALID_LENGTH
1587
Hanno Becker19db19e2019-03-13 10:36:47 +0000[diff] [blame]1588X509 CRT ASN1 (TBS, inv SubPubKeyInfo, bitstring length out of bounds)
Hanno Beckerbb955e52019-06-04 15:38:48 +0100[diff] [blame]1589depends_on:MBEDTLS_RSA_C:MBEDTLS_SHA256_C
1590x509parse_crt:"307c3067a0030201008204deadbeef300d06092a864886f70d01010b0500300c310a30080600130454657374301c170c303930313031303030303030170c303931323331323335393539300c310a300806001304546573743011300d06092A864886F70D01010105000301300d06092a864886f70d01010b0500030200ff":"":MBEDTLS_ERR_PK_INVALID_PUBKEY + MBEDTLS_ERR_ASN1_OUT_OF_DATA
1591
Hanno Becker19db19e2019-03-13 10:36:47 +0000[diff] [blame]1592X509 CRT ASN1 (TBS, inv SubPubKeyInfo, no bitstring data)
Hanno Beckerbb955e52019-06-04 15:38:48 +0100[diff] [blame]1593depends_on:MBEDTLS_RSA_C:MBEDTLS_SHA256_C
1594x509parse_crt:"307c3067a0030201008204deadbeef300d06092a864886f70d01010b0500300c310a30080600130454657374301c170c303930313031303030303030170c303931323331323335393539300c310a300806001304546573743011300d06092A864886F70D01010105000300300d06092a864886f70d01010b0500030200ff":"":MBEDTLS_ERR_PK_INVALID_PUBKEY + MBEDTLS_ERR_ASN1_INVALID_DATA
1595
Hanno Becker19db19e2019-03-13 10:36:47 +0000[diff] [blame]1596X509 CRT ASN1 (TBS, inv SubPubKeyInfo, inv bitstring start)
Hanno Beckerbb955e52019-06-04 15:38:48 +0100[diff] [blame]1597depends_on:MBEDTLS_RSA_C:MBEDTLS_SHA256_C
1598x509parse_crt:"307d3068a0030201008204deadbeef300d06092a864886f70d01010b0500300c310a30080600130454657374301c170c303930313031303030303030170c303931323331323335393539300c310a300806001304546573743012300d06092A864886F70D0101010500030101300d06092a864886f70d01010b0500030200ff":"":MBEDTLS_ERR_PK_INVALID_PUBKEY + MBEDTLS_ERR_ASN1_INVALID_DATA
1599
Hanno Becker2389d162019-02-14 12:52:47 +0000[diff] [blame]1600X509 CRT ASN1 (TBS, inv SubPubKeyInfo, inv internal bitstring length)
Hanno Beckerbb955e52019-06-04 15:38:48 +0100[diff] [blame]1601depends_on:MBEDTLS_RSA_C:MBEDTLS_SHA256_C
1602x509parse_crt:"308180306ba0030201008204deadbeef300d06092a864886f70d01010b0500300c310a30080600130454657374301c170c303930313031303030303030170c303931323331323335393539300c310a300806001304546573743015300d06092A864886F70D0101010500030400300000300d06092a864886f70d01010b0500030200ff":"":MBEDTLS_ERR_PK_INVALID_PUBKEY + MBEDTLS_ERR_ASN1_LENGTH_MISMATCH
1603
Hanno Becker2389d162019-02-14 12:52:47 +0000[diff] [blame]1604X509 CRT ASN1 (TBS, inv SubPubKeyInfo, inv internal bitstring tag)
Hanno Beckerbb955e52019-06-04 15:38:48 +0100[diff] [blame]1605depends_on:MBEDTLS_RSA_C:MBEDTLS_SHA256_C
1606x509parse_crt:"308180306ba0030201008204deadbeef300d06092a864886f70d01010b0500300c310a30080600130454657374301c170c303930313031303030303030170c303931323331323335393539300c310a300806001304546573743015300d06092A864886F70D0101010500030400310000300d06092a864886f70d01010b0500030200ff":"":MBEDTLS_ERR_PK_INVALID_PUBKEY + MBEDTLS_ERR_ASN1_UNEXPECTED_TAG
1607
Hanno Becker2389d162019-02-14 12:52:47 +0000[diff] [blame]1608X509 CRT ASN1 (TBS, inv SubPubKeyInfo, inv RSA modulus)
Hanno Beckerbb955e52019-06-04 15:38:48 +0100[diff] [blame]1609depends_on:MBEDTLS_RSA_C:MBEDTLS_SHA256_C
1610x509parse_crt:"3081873072a0030201008204deadbeef300d06092a864886f70d01010b0500300c310a30080600130454657374301c170c303930313031303030303030170c303931323331323335393539300c310a30080600130454657374301c300d06092A864886F70D0101010500030b0030080202ffff0302ffff300d06092a864886f70d01010b0500030200ff":"":MBEDTLS_ERR_PK_INVALID_PUBKEY + MBEDTLS_ERR_ASN1_UNEXPECTED_TAG
1611
Hanno Becker2389d162019-02-14 12:52:47 +0000[diff] [blame]1612X509 CRT ASN1 (TBS, inv SubPubKeyInfo, total length mismatch)
Hanno Beckerbb955e52019-06-04 15:38:48 +0100[diff] [blame]1613depends_on:MBEDTLS_RSA_C:MBEDTLS_SHA256_C
1614x509parse_crt:"3081893074a0030201008204deadbeef300d06092a864886f70d01010b0500300c310a30080600130454657374301c170c303930313031303030303030170c303931323331323335393539300c310a30080600130454657374301e300d06092A864886F70D0101010500030b0030080202ffff0202ffff0500300d06092a864886f70d01010b0500030200ff":"":MBEDTLS_ERR_PK_INVALID_PUBKEY + MBEDTLS_ERR_ASN1_LENGTH_MISMATCH
1615
Hanno Becker2389d162019-02-14 12:52:47 +0000[diff] [blame]1616X509 CRT ASN1 (TBS, inv SubPubKeyInfo, check failed)
Hanno Beckerbb955e52019-06-04 15:38:48 +0100[diff] [blame]1617depends_on:MBEDTLS_RSA_C:MBEDTLS_SHA256_C
1618x509parse_crt:"3081873072a0030201008204deadbeef300d06092a864886f70d01010b0500300c310a30080600130454657374301c170c303930313031303030303030170c303931323331323335393539300c310a30080600130454657374301c300d06092A864886F70D0101010500030b0030080202ffff0202ffff300d06092a864886f70d01010b0500030200ff":"":MBEDTLS_ERR_PK_INVALID_PUBKEY
1619
Hanno Becker2389d162019-02-14 12:52:47 +0000[diff] [blame]1620X509 CRT ASN1 (TBS, inv SubPubKeyInfo, check failed, expanded length notation)
Hanno Beckerbb955e52019-06-04 15:38:48 +0100[diff] [blame]1621depends_on:MBEDTLS_RSA_C:MBEDTLS_SHA256_C
1622x509parse_crt:"308196308180a0030201008204deadbeef300d06092a864886f70d01010b0500300c310a30080600130454657374301c170c303930313031303030303030170c303931323331323335393539300c310a30080600130454657374302a300d06092A864886F70D010101050003190030160210fffffffffffffffffffffffffffffffe0202ffff300d06092a864886f70d01010b0500030200ff":"":MBEDTLS_ERR_PK_INVALID_PUBKEY
Paul Bakkerb2c38f52009-07-19 19:36:15 +0000[diff] [blame]1623
Hanno Becker61cf9e32019-06-13 13:32:44 +0100[diff] [blame]1624# We expect an extension parsing error here because the IssuerID is optional.
1625# Hence, if we find an ASN.1 tag doesn't match the IssuerID, we assume the
1626# IssuerID is skipped and that the tag should hence belong to the next field,
1627# namely the v3 extensions. However, the tag the test exercises is a NULL tag,
1628# and hence we obtain an INVALID_TAG error during extension parsing.
Hanno Becker2389d162019-02-14 12:52:47 +0000[diff] [blame]1629X509 CRT ASN1 (TBS, inv IssuerID, inv tag)
Paul Bakkerb2c38f52009-07-19 19:36:15 +0000[diff] [blame]1630depends_on:MBEDTLS_RSA_C:MBEDTLS_SHA256_C
Hanno Becker0f5acc12019-06-04 16:13:23 +0100[diff] [blame]1631x509parse_crt:"308198308182a0030201028204deadbeef300d06092a864886f70d01010b0500300c310a30080600130454657374301c170c303930313031303030303030170c303931323331323335393539300c310a30080600130454657374302a300d06092A864886F70D010101050003190030160210ffffffffffffffffffffffffffffffff0202ffff0500300d06092a864886f70d01010b0500030200ff":"":MBEDTLS_ERR_X509_INVALID_EXTENSIONS + MBEDTLS_ERR_ASN1_UNEXPECTED_TAG
Paul Bakkerb2c38f52009-07-19 19:36:15 +0000[diff] [blame]1632
Hanno Becker2389d162019-02-14 12:52:47 +0000[diff] [blame]1633X509 CRT ASN1 (TBS, inv IssuerID, length missing)
Paul Bakkerb2c38f52009-07-19 19:36:15 +0000[diff] [blame]1634depends_on:MBEDTLS_RSA_C:MBEDTLS_SHA256_C
Hanno Becker9f06b502019-06-04 15:43:15 +0100[diff] [blame]1635x509parse_crt:"308197308181a0030201028204deadbeef300d06092a864886f70d01010b0500300c310a30080600130454657374301c170c303930313031303030303030170c303931323331323335393539300c310a30080600130454657374302a300d06092A864886F70D010101050003190030160210ffffffffffffffffffffffffffffffff0202ffffa1300d06092a864886f70d01010b0500030200ff":"":MBEDTLS_ERR_X509_INVALID_FORMAT + MBEDTLS_ERR_ASN1_OUT_OF_DATA
Paul Bakkerb2c38f52009-07-19 19:36:15 +0000[diff] [blame]1636
Hanno Becker2389d162019-02-14 12:52:47 +0000[diff] [blame]1637X509 CRT ASN1 (TBS, inv IssuerID, inv length encoding)
Paul Bakkerb2c38f52009-07-19 19:36:15 +0000[diff] [blame]1638depends_on:MBEDTLS_RSA_C:MBEDTLS_SHA256_C
Hanno Becker9f06b502019-06-04 15:43:15 +0100[diff] [blame]1639x509parse_crt:"308198308182a0030201028204deadbeef300d06092a864886f70d01010b0500300c310a30080600130454657374301c170c303930313031303030303030170c303931323331323335393539300c310a30080600130454657374302a300d06092A864886F70D010101050003190030160210ffffffffffffffffffffffffffffffff0202ffffa185300d06092a864886f70d01010b0500030200ff":"":MBEDTLS_ERR_X509_INVALID_FORMAT + MBEDTLS_ERR_ASN1_INVALID_LENGTH
Paul Bakkerb2c38f52009-07-19 19:36:15 +0000[diff] [blame]1640
Hanno Becker2389d162019-02-14 12:52:47 +0000[diff] [blame]1641X509 CRT ASN1 (TBS, inv IssuerID, length out of bounds)
Paul Bakkerb2c38f52009-07-19 19:36:15 +0000[diff] [blame]1642depends_on:MBEDTLS_RSA_C:MBEDTLS_SHA256_C
Hanno Becker9f06b502019-06-04 15:43:15 +0100[diff] [blame]1643x509parse_crt:"308198308182a0030201028204deadbeef300d06092a864886f70d01010b0500300c310a30080600130454657374301c170c303930313031303030303030170c303931323331323335393539300c310a30080600130454657374302a300d06092A864886F70D010101050003190030160210ffffffffffffffffffffffffffffffff0202ffffa101300d06092a864886f70d01010b0500030200ff":"":MBEDTLS_ERR_X509_INVALID_FORMAT + MBEDTLS_ERR_ASN1_OUT_OF_DATA
Paul Bakkerc26a1892009-07-19 20:30:14 +0000[diff] [blame]1644
Hanno Becker2389d162019-02-14 12:52:47 +0000[diff] [blame]1645X509 CRT ASN1 (TBS, no IssuerID, inv SubjectID, length missing)
Paul Bakkerc26a1892009-07-19 20:30:14 +0000[diff] [blame]1646depends_on:MBEDTLS_RSA_C:MBEDTLS_SHA256_C
Hanno Becker9f06b502019-06-04 15:43:15 +0100[diff] [blame]1647x509parse_crt:"308197308181a0030201028204deadbeef300d06092a864886f70d01010b0500300c310a30080600130454657374301c170c303930313031303030303030170c303931323331323335393539300c310a30080600130454657374302a300d06092A864886F70D010101050003190030160210ffffffffffffffffffffffffffffffff0202ffffa2300d06092a864886f70d01010b0500030200ff":"":MBEDTLS_ERR_X509_INVALID_FORMAT + MBEDTLS_ERR_ASN1_OUT_OF_DATA
Paul Bakkerc26a1892009-07-19 20:30:14 +0000[diff] [blame]1648
Hanno Becker2389d162019-02-14 12:52:47 +0000[diff] [blame]1649X509 CRT ASN1 (TBS, no IssuerID, inv SubjectID, inv length encoding)
Paul Bakker37940d9f2009-07-10 22:38:58 +0000[diff] [blame]1650depends_on:MBEDTLS_RSA_C:MBEDTLS_SHA256_C
Hanno Becker9f06b502019-06-04 15:43:15 +0100[diff] [blame]1651x509parse_crt:"308198308182a0030201028204deadbeef300d06092a864886f70d01010b0500300c310a30080600130454657374301c170c303930313031303030303030170c303931323331323335393539300c310a30080600130454657374302a300d06092A864886F70D010101050003190030160210ffffffffffffffffffffffffffffffff0202ffffa285300d06092a864886f70d01010b0500030200ff":"":MBEDTLS_ERR_X509_INVALID_FORMAT + MBEDTLS_ERR_ASN1_INVALID_LENGTH
Paul Bakker37940d9f2009-07-10 22:38:58 +0000[diff] [blame]1652
Hanno Becker2389d162019-02-14 12:52:47 +0000[diff] [blame]1653X509 CRT ASN1 (TBS, no IssuerID, inv SubjectID, length out of bounds)
Paul Bakker37940d9f2009-07-10 22:38:58 +0000[diff] [blame]1654depends_on:MBEDTLS_RSA_C:MBEDTLS_SHA256_C
Hanno Beckerbe3850a2019-06-04 15:45:45 +0100[diff] [blame]1655x509parse_crt:"308198308182a0030201028204deadbeef300d06092a864886f70d01010b0500300c310a30080600130454657374301c170c303930313031303030303030170c303931323331323335393539300c310a30080600130454657374302a300d06092A864886F70D010101050003190030160210ffffffffffffffffffffffffffffffff0202ffffa201300d06092a864886f70d01010b0500030200ff":"":MBEDTLS_ERR_X509_INVALID_FORMAT + MBEDTLS_ERR_ASN1_OUT_OF_DATA
Paul Bakker37940d9f2009-07-10 22:38:58 +0000[diff] [blame]1656
Hanno Becker2389d162019-02-14 12:52:47 +0000[diff] [blame]1657X509 CRT ASN1 (TBS, valid IssuerID, inv SubjectID, inv tag)
Gilles Peskine6710e152020-04-12 14:21:30 +0200[diff] [blame]1658depends_on:!MBEDTLS_X509_ALLOW_EXTENSIONS_NON_V3:MBEDTLS_RSA_C:MBEDTLS_SHA256_C
Hanno Becker0f5acc12019-06-04 16:13:23 +0100[diff] [blame]1659x509parse_crt:"30819a308184a0030201008204deadbeef300d06092a864886f70d01010b0500300c310a30080600130454657374301c170c303930313031303030303030170c303931323331323335393539300c310a30080600130454657374302a300d06092A864886F70D010101050003190030160210ffffffffffffffffffffffffffffffff0202ffffa1000500300d06092a864886f70d01010b0500030200ff":"":MBEDTLS_ERR_X509_INVALID_FORMAT + MBEDTLS_ERR_ASN1_LENGTH_MISMATCH
Paul Bakkere4ff4132009-07-27 20:22:10 +0000[diff] [blame]1660
Hanno Becker2389d162019-02-14 12:52:47 +0000[diff] [blame]1661X509 CRT ASN1 (TBS, valid IssuerID, inv SubjectID, length missing)
Hanno Becker01346c62019-02-12 13:32:06 +0000[diff] [blame]1662depends_on:MBEDTLS_RSA_C:MBEDTLS_SHA256_C
Hanno Beckerbe3850a2019-06-04 15:45:45 +0100[diff] [blame]1663x509parse_crt:"308199308183a0030201028204deadbeef300d06092a864886f70d01010b0500300c310a30080600130454657374301c170c303930313031303030303030170c303931323331323335393539300c310a30080600130454657374302a300d06092A864886F70D010101050003190030160210ffffffffffffffffffffffffffffffff0202ffffa100a2300d06092a864886f70d01010b0500030200ff":"":MBEDTLS_ERR_X509_INVALID_FORMAT + MBEDTLS_ERR_ASN1_OUT_OF_DATA
Paul Bakkerc6ce8382009-07-27 21:34:45 +0000[diff] [blame]1664
Hanno Becker2389d162019-02-14 12:52:47 +0000[diff] [blame]1665X509 CRT ASN1 (TBS, valid IssuerID, inv SubjectID, inv length encoding)
Hanno Becker01346c62019-02-12 13:32:06 +0000[diff] [blame]1666depends_on:MBEDTLS_RSA_C:MBEDTLS_SHA256_C
Hanno Beckerbe3850a2019-06-04 15:45:45 +0100[diff] [blame]1667x509parse_crt:"30819a308184a0030201028204deadbeef300d06092a864886f70d01010b0500300c310a30080600130454657374301c170c303930313031303030303030170c303931323331323335393539300c310a30080600130454657374302a300d06092A864886F70D010101050003190030160210ffffffffffffffffffffffffffffffff0202ffffa100a285300d06092a864886f70d01010b0500030200ff":"":MBEDTLS_ERR_X509_INVALID_FORMAT + MBEDTLS_ERR_ASN1_INVALID_LENGTH
Paul Bakkerc6ce8382009-07-27 21:34:45 +0000[diff] [blame]1668
Hanno Becker2389d162019-02-14 12:52:47 +0000[diff] [blame]1669X509 CRT ASN1 (TBS, valid IssuerID, inv SubjectID, length out of bounds)
Hanno Becker01346c62019-02-12 13:32:06 +0000[diff] [blame]1670depends_on:MBEDTLS_RSA_C:MBEDTLS_SHA256_C
Hanno Beckerbe3850a2019-06-04 15:45:45 +0100[diff] [blame]1671x509parse_crt:"30819a308184a0030201028204deadbeef300d06092a864886f70d01010b0500300c310a30080600130454657374301c170c303930313031303030303030170c303931323331323335393539300c310a30080600130454657374302a300d06092A864886F70D010101050003190030160210ffffffffffffffffffffffffffffffff0202ffffa100a201300d06092a864886f70d01010b0500030200ff":"":MBEDTLS_ERR_X509_INVALID_FORMAT + MBEDTLS_ERR_ASN1_OUT_OF_DATA
Paul Bakkere4ff4132009-07-27 20:22:10 +0000[diff] [blame]1672
Hanno Beckerd51d4852019-03-13 15:18:57 +0000[diff] [blame]1673X509 CRT ASN1 (TBS, IssuerID unsupported in v1 CRT)
Gilles Peskine6710e152020-04-12 14:21:30 +0200[diff] [blame]1674depends_on:!MBEDTLS_X509_ALLOW_EXTENSIONS_NON_V3:MBEDTLS_RSA_C:MBEDTLS_SHA256_C
Hanno Beckerd51d4852019-03-13 15:18:57 +0000[diff] [blame]1675x509parse_crt:"30819a308184a0030201008204deadbeef300d06092a864886f70d01010b0500300c310a30080600130454657374301c170c303930313031303030303030170c303931323331323335393539300c310a30080600130454657374302a300d06092A864886F70D010101050003190030160210ffffffffffffffffffffffffffffffff0202ffffa100a201300d06092a864886f70d01010b0500030200ff":"":MBEDTLS_ERR_X509_INVALID_FORMAT + MBEDTLS_ERR_ASN1_LENGTH_MISMATCH
Paul Bakkere4ff4132009-07-27 20:22:10 +0000[diff] [blame]1676
Gilles Peskine6710e152020-04-12 14:21:30 +0200[diff] [blame]1677X509 CRT ASN1 (TBS, IssuerID unsupported in v1 CRT, ALLOW_EXTENSIONS_NON_V3)
1678depends_on:MBEDTLS_X509_ALLOW_EXTENSIONS_NON_V3:MBEDTLS_RSA_C:MBEDTLS_SHA256_C
1679x509parse_crt:"30819a308184a0030201008204deadbeef300d06092a864886f70d01010b0500300c310a30080600130454657374301c170c303930313031303030303030170c303931323331323335393539300c310a30080600130454657374302a300d06092A864886F70D010101050003190030160210ffffffffffffffffffffffffffffffff0202ffffa100a201300d06092a864886f70d01010b0500030200ff":"":MBEDTLS_ERR_X509_INVALID_EXTENSIONS + MBEDTLS_ERR_ASN1_UNEXPECTED_TAG
1680
Hanno Beckerd51d4852019-03-13 15:18:57 +0000[diff] [blame]1681X509 CRT ASN1 (TBS, SubjectID unsupported in v1 CRT)
Gilles Peskine6710e152020-04-12 14:21:30 +0200[diff] [blame]1682depends_on:!MBEDTLS_X509_ALLOW_EXTENSIONS_NON_V3:MBEDTLS_RSA_C:MBEDTLS_SHA256_C
Hanno Beckerd51d4852019-03-13 15:18:57 +0000[diff] [blame]1683x509parse_crt:"30819a308184a0030201008204deadbeef300d06092a864886f70d01010b0500300c310a30080600130454657374301c170c303930313031303030303030170c303931323331323335393539300c310a30080600130454657374302a300d06092A864886F70D010101050003190030160210ffffffffffffffffffffffffffffffff0202ffffa200a201300d06092a864886f70d01010b0500030200ff":"":MBEDTLS_ERR_X509_INVALID_FORMAT + MBEDTLS_ERR_ASN1_LENGTH_MISMATCH
Paul Bakkere4ff4132009-07-27 20:22:10 +0000[diff] [blame]1684
Gilles Peskine6710e152020-04-12 14:21:30 +0200[diff] [blame]1685X509 CRT ASN1 (TBS, SubjectID unsupported in v1 CRT, ALLOW_EXTENSIONS_NON_V3)
1686depends_on:MBEDTLS_X509_ALLOW_EXTENSIONS_NON_V3:MBEDTLS_RSA_C:MBEDTLS_SHA256_C
1687x509parse_crt:"30819a308184a0030201008204deadbeef300d06092a864886f70d01010b0500300c310a30080600130454657374301c170c303930313031303030303030170c303931323331323335393539300c310a30080600130454657374302a300d06092A864886F70D010101050003190030160210ffffffffffffffffffffffffffffffff0202ffffa200a201300d06092a864886f70d01010b0500030200ff":"":MBEDTLS_ERR_X509_INVALID_EXTENSIONS + MBEDTLS_ERR_ASN1_UNEXPECTED_TAG
1688
Hanno Becker2389d162019-02-14 12:52:47 +0000[diff] [blame]1689X509 CRT ASN1 (TBS, inv v3Ext, inv tag)
Hanno Becker01346c62019-02-12 13:32:06 +0000[diff] [blame]1690depends_on:MBEDTLS_RSA_C:MBEDTLS_SHA256_C
Hanno Becker0f5acc12019-06-04 16:13:23 +0100[diff] [blame]1691x509parse_crt:"30819c308186a0030201028204deadbeef300d06092a864886f70d01010b0500300c310a30080600130454657374301c170c303930313031303030303030170c303931323331323335393539300c310a30080600130454657374302a300d06092A864886F70D010101050003190030160210ffffffffffffffffffffffffffffffff0202ffffa100a2000500300d06092a864886f70d01010b0500030200ff":"":MBEDTLS_ERR_X509_INVALID_EXTENSIONS + MBEDTLS_ERR_ASN1_UNEXPECTED_TAG
Paul Bakkere4ff4132009-07-27 20:22:10 +0000[diff] [blame]1692
Hanno Becker2389d162019-02-14 12:52:47 +0000[diff] [blame]1693X509 CRT ASN1 (TBS, inv v3Ext, outer length missing)
Hanno Becker01346c62019-02-12 13:32:06 +0000[diff] [blame]1694depends_on:MBEDTLS_RSA_C:MBEDTLS_SHA256_C
Hanno Becker05987e32019-06-04 15:51:22 +0100[diff] [blame]1695x509parse_crt:"30819b308185a0030201028204deadbeef300d06092a864886f70d01010b0500300c310a30080600130454657374301c170c303930313031303030303030170c303931323331323335393539300c310a30080600130454657374302a300d06092A864886F70D010101050003190030160210ffffffffffffffffffffffffffffffff0202ffffa100a200a3300d06092a864886f70d01010b0500030200ff":"":MBEDTLS_ERR_X509_INVALID_EXTENSIONS + MBEDTLS_ERR_ASN1_OUT_OF_DATA
Paul Bakker37940d9f2009-07-10 22:38:58 +0000[diff] [blame]1696
Hanno Becker2389d162019-02-14 12:52:47 +0000[diff] [blame]1697X509 CRT ASN1 (TBS, inv v3Ext, outer length inv encoding)
Hanno Becker01346c62019-02-12 13:32:06 +0000[diff] [blame]1698depends_on:MBEDTLS_RSA_C:MBEDTLS_SHA256_C
Hanno Becker05987e32019-06-04 15:51:22 +0100[diff] [blame]1699x509parse_crt:"30819c308186a0030201028204deadbeef300d06092a864886f70d01010b0500300c310a30080600130454657374301c170c303930313031303030303030170c303931323331323335393539300c310a30080600130454657374302a300d06092A864886F70D010101050003190030160210ffffffffffffffffffffffffffffffff0202ffffa100a200a385300d06092a864886f70d01010b0500030200ff":"":MBEDTLS_ERR_X509_INVALID_EXTENSIONS + MBEDTLS_ERR_ASN1_INVALID_LENGTH
Paul Bakker37940d9f2009-07-10 22:38:58 +0000[diff] [blame]1700
Hanno Becker2389d162019-02-14 12:52:47 +0000[diff] [blame]1701X509 CRT ASN1 (TBS, inv v3Ext, outer length out of bounds)
Hanno Becker01346c62019-02-12 13:32:06 +0000[diff] [blame]1702depends_on:MBEDTLS_RSA_C:MBEDTLS_SHA256_C
Hanno Becker05987e32019-06-04 15:51:22 +0100[diff] [blame]1703x509parse_crt:"30819c308186a0030201028204deadbeef300d06092a864886f70d01010b0500300c310a30080600130454657374301c170c303930313031303030303030170c303931323331323335393539300c310a30080600130454657374302a300d06092A864886F70D010101050003190030160210ffffffffffffffffffffffffffffffff0202ffffa100a200a301300d06092a864886f70d01010b0500030200ff":"":MBEDTLS_ERR_X509_INVALID_EXTENSIONS + MBEDTLS_ERR_ASN1_OUT_OF_DATA
Paul Bakker37940d9f2009-07-10 22:38:58 +0000[diff] [blame]1704
Hanno Becker2389d162019-02-14 12:52:47 +0000[diff] [blame]1705X509 CRT ASN1 (TBS, inv v3Ext, outer length 0)
Hanno Becker01346c62019-02-12 13:32:06 +0000[diff] [blame]1706depends_on:MBEDTLS_RSA_C:MBEDTLS_SHA256_C
Hanno Becker05987e32019-06-04 15:51:22 +0100[diff] [blame]1707x509parse_crt:"30819c308186a0030201028204deadbeef300d06092a864886f70d01010b0500300c310a30080600130454657374301c170c303930313031303030303030170c303931323331323335393539300c310a30080600130454657374302a300d06092A864886F70D010101050003190030160210ffffffffffffffffffffffffffffffff0202ffffa100a200a300300d06092a864886f70d01010b0500030200ff":"":MBEDTLS_ERR_X509_INVALID_EXTENSIONS + MBEDTLS_ERR_ASN1_OUT_OF_DATA
Paul Bakker37940d9f2009-07-10 22:38:58 +0000[diff] [blame]1708
Hanno Becker2389d162019-02-14 12:52:47 +0000[diff] [blame]1709X509 CRT ASN1 (TBS, inv v3Ext, inner tag invalid)
Hanno Becker01346c62019-02-12 13:32:06 +0000[diff] [blame]1710depends_on:MBEDTLS_RSA_C:MBEDTLS_SHA256_C
Hanno Becker0f5acc12019-06-04 16:13:23 +0100[diff] [blame]1711x509parse_crt:"30819e308188a0030201028204deadbeef300d06092a864886f70d01010b0500300c310a30080600130454657374301c170c303930313031303030303030170c303931323331323335393539300c310a30080600130454657374302a300d06092A864886F70D010101050003190030160210ffffffffffffffffffffffffffffffff0202ffffa100a200a3020500300d06092a864886f70d01010b0500030200ff":"":MBEDTLS_ERR_X509_INVALID_EXTENSIONS + MBEDTLS_ERR_ASN1_UNEXPECTED_TAG
Paul Bakker37940d9f2009-07-10 22:38:58 +0000[diff] [blame]1712
Hanno Becker2389d162019-02-14 12:52:47 +0000[diff] [blame]1713X509 CRT ASN1 (TBS, inv v3Ext, inner length missing)
Hanno Becker05987e32019-06-04 15:51:22 +0100[diff] [blame]1714depends_on:MBEDTLS_RSA_C:MBEDTLS_SHA256_C
1715x509parse_crt:"30819d308187a0030201028204deadbeef300d06092a864886f70d01010b0500300c310a30080600130454657374301c170c303930313031303030303030170c303931323331323335393539300c310a30080600130454657374302a300d06092A864886F70D010101050003190030160210ffffffffffffffffffffffffffffffff0202ffffa100a200a30130300d06092a864886f70d01010b0500030200ff":"":MBEDTLS_ERR_X509_INVALID_EXTENSIONS + MBEDTLS_ERR_ASN1_OUT_OF_DATA
1716
Hanno Becker2389d162019-02-14 12:52:47 +0000[diff] [blame]1717X509 CRT ASN1 (TBS, inv v3Ext, inner length inv encoding)
Hanno Becker05987e32019-06-04 15:51:22 +0100[diff] [blame]1718depends_on:MBEDTLS_RSA_C:MBEDTLS_SHA256_C
1719x509parse_crt:"30819e308188a0030201028204deadbeef300d06092a864886f70d01010b0500300c310a30080600130454657374301c170c303930313031303030303030170c303931323331323335393539300c310a30080600130454657374302a300d06092A864886F70D010101050003190030160210ffffffffffffffffffffffffffffffff0202ffffa100a200a3023085300d06092a864886f70d01010b0500030200ff":"":MBEDTLS_ERR_X509_INVALID_EXTENSIONS + MBEDTLS_ERR_ASN1_INVALID_LENGTH
1720
Hanno Becker2389d162019-02-14 12:52:47 +0000[diff] [blame]1721X509 CRT ASN1 (TBS, inv v3Ext, inner length out of bounds)
Hanno Becker05987e32019-06-04 15:51:22 +0100[diff] [blame]1722depends_on:MBEDTLS_RSA_C:MBEDTLS_SHA256_C
1723x509parse_crt:"30819e308188a0030201028204deadbeef300d06092a864886f70d01010b0500300c310a30080600130454657374301c170c303930313031303030303030170c303931323331323335393539300c310a30080600130454657374302a300d06092A864886F70D010101050003190030160210ffffffffffffffffffffffffffffffff0202ffffa100a200a3023001300d06092a864886f70d01010b0500030200ff":"":MBEDTLS_ERR_X509_INVALID_EXTENSIONS + MBEDTLS_ERR_ASN1_OUT_OF_DATA
1724
Hanno Becker2389d162019-02-14 12:52:47 +0000[diff] [blame]1725X509 CRT ASN1 (TBS, inv v3Ext, inner/outer length mismatch)
Hanno Becker05987e32019-06-04 15:51:22 +0100[diff] [blame]1726depends_on:MBEDTLS_RSA_C:MBEDTLS_SHA256_C
1727x509parse_crt:"30819f308189a0030201028204deadbeef300d06092a864886f70d01010b0500300c310a30080600130454657374301c170c303930313031303030303030170c303931323331323335393539300c310a30080600130454657374302a300d06092A864886F70D010101050003190030160210ffffffffffffffffffffffffffffffff0202ffffa100a200a303300000300d06092a864886f70d01010b0500030200ff":"":MBEDTLS_ERR_X509_INVALID_EXTENSIONS + MBEDTLS_ERR_ASN1_LENGTH_MISMATCH
1728
Hanno Becker2389d162019-02-14 12:52:47 +0000[diff] [blame]1729X509 CRT ASN1 (TBS, inv v3Ext, first ext inv tag)
Hanno Becker05987e32019-06-04 15:51:22 +0100[diff] [blame]1730depends_on:MBEDTLS_RSA_C:MBEDTLS_SHA256_C
Hanno Becker0f5acc12019-06-04 16:13:23 +0100[diff] [blame]1731x509parse_crt:"3081a030818aa0030201028204deadbeef300d06092a864886f70d01010b0500300c310a30080600130454657374301c170c303930313031303030303030170c303931323331323335393539300c310a30080600130454657374302a300d06092A864886F70D010101050003190030160210ffffffffffffffffffffffffffffffff0202ffffa100a200a30430020500300d06092a864886f70d01010b0500030200ff":"":MBEDTLS_ERR_X509_INVALID_EXTENSIONS + MBEDTLS_ERR_ASN1_UNEXPECTED_TAG
Hanno Becker05987e32019-06-04 15:51:22 +0100[diff] [blame]1732
Hanno Becker2389d162019-02-14 12:52:47 +0000[diff] [blame]1733X509 CRT ASN1 (TBS, inv v3Ext, first ext length missing)
Hanno Becker05987e32019-06-04 15:51:22 +0100[diff] [blame]1734depends_on:MBEDTLS_RSA_C:MBEDTLS_SHA256_C
1735x509parse_crt:"30819f308189a0030201028204deadbeef300d06092a864886f70d01010b0500300c310a30080600130454657374301c170c303930313031303030303030170c303931323331323335393539300c310a30080600130454657374302a300d06092A864886F70D010101050003190030160210ffffffffffffffffffffffffffffffff0202ffffa100a200a303300130300d06092a864886f70d01010b0500030200ff":"":MBEDTLS_ERR_X509_INVALID_EXTENSIONS + MBEDTLS_ERR_ASN1_OUT_OF_DATA
1736
Hanno Becker2389d162019-02-14 12:52:47 +0000[diff] [blame]1737X509 CRT ASN1 (TBS, inv v3Ext, inv first ext length encoding)
Hanno Becker05987e32019-06-04 15:51:22 +0100[diff] [blame]1738depends_on:MBEDTLS_RSA_C:MBEDTLS_SHA256_C
1739x509parse_crt:"3081a030818aa0030201028204deadbeef300d06092a864886f70d01010b0500300c310a30080600130454657374301c170c303930313031303030303030170c303931323331323335393539300c310a30080600130454657374302a300d06092A864886F70D010101050003190030160210ffffffffffffffffffffffffffffffff0202ffffa100a200a30430023085300d06092a864886f70d01010b0500030200ff":"":MBEDTLS_ERR_X509_INVALID_EXTENSIONS + MBEDTLS_ERR_ASN1_INVALID_LENGTH
1740
Hanno Becker2389d162019-02-14 12:52:47 +0000[diff] [blame]1741X509 CRT ASN1 (TBS, inv v3Ext, first ext length out of bounds)
Hanno Becker05987e32019-06-04 15:51:22 +0100[diff] [blame]1742depends_on:MBEDTLS_RSA_C:MBEDTLS_SHA256_C
1743x509parse_crt:"3081a030818aa0030201028204deadbeef300d06092a864886f70d01010b0500300c310a30080600130454657374301c170c303930313031303030303030170c303931323331323335393539300c310a30080600130454657374302a300d06092A864886F70D010101050003190030160210ffffffffffffffffffffffffffffffff0202ffffa100a200a30430023001300d06092a864886f70d01010b0500030200ff":"":MBEDTLS_ERR_X509_INVALID_EXTENSIONS + MBEDTLS_ERR_ASN1_OUT_OF_DATA
1744
Hanno Becker2389d162019-02-14 12:52:47 +0000[diff] [blame]1745X509 CRT ASN1 (TBS, inv v3Ext, first ext empty)
Hanno Becker05987e32019-06-04 15:51:22 +0100[diff] [blame]1746depends_on:MBEDTLS_RSA_C:MBEDTLS_SHA256_C
1747x509parse_crt:"3081a030818aa0030201028204deadbeef300d06092a864886f70d01010b0500300c310a30080600130454657374301c170c303930313031303030303030170c303931323331323335393539300c310a30080600130454657374302a300d06092A864886F70D010101050003190030160210ffffffffffffffffffffffffffffffff0202ffffa100a200a30430023000300d06092a864886f70d01010b0500030200ff":"":MBEDTLS_ERR_X509_INVALID_EXTENSIONS + MBEDTLS_ERR_ASN1_OUT_OF_DATA
1748
Hanno Becker2389d162019-02-14 12:52:47 +0000[diff] [blame]1749X509 CRT ASN1 (TBS, inv v3Ext, first ext extnID inv tag)
Hanno Becker05987e32019-06-04 15:51:22 +0100[diff] [blame]1750depends_on:MBEDTLS_RSA_C:MBEDTLS_SHA256_C
Hanno Becker0f5acc12019-06-04 16:13:23 +0100[diff] [blame]1751x509parse_crt:"3081a230818ca0030201028204deadbeef300d06092a864886f70d01010b0500300c310a30080600130454657374301c170c303930313031303030303030170c303931323331323335393539300c310a30080600130454657374302a300d06092A864886F70D010101050003190030160210ffffffffffffffffffffffffffffffff0202ffffa100a200a306300430020500300d06092a864886f70d01010b0500030200ff":"":MBEDTLS_ERR_X509_INVALID_EXTENSIONS + MBEDTLS_ERR_ASN1_UNEXPECTED_TAG
Hanno Becker05987e32019-06-04 15:51:22 +0100[diff] [blame]1752
Hanno Becker2389d162019-02-14 12:52:47 +0000[diff] [blame]1753X509 CRT ASN1 (TBS, inv v3Ext, first ext extnID length missing)
Hanno Becker05987e32019-06-04 15:51:22 +0100[diff] [blame]1754depends_on:MBEDTLS_RSA_C:MBEDTLS_SHA256_C
1755x509parse_crt:"3081a130818ba0030201028204deadbeef300d06092a864886f70d01010b0500300c310a30080600130454657374301c170c303930313031303030303030170c303931323331323335393539300c310a30080600130454657374302a300d06092A864886F70D010101050003190030160210ffffffffffffffffffffffffffffffff0202ffffa100a200a3053003300106300d06092a864886f70d01010b0500030200ff":"":MBEDTLS_ERR_X509_INVALID_EXTENSIONS + MBEDTLS_ERR_ASN1_OUT_OF_DATA
1756
Hanno Becker2389d162019-02-14 12:52:47 +0000[diff] [blame]1757X509 CRT ASN1 (TBS, inv v3Ext, first ext extnID inv length encoding)
Hanno Becker05987e32019-06-04 15:51:22 +0100[diff] [blame]1758depends_on:MBEDTLS_RSA_C:MBEDTLS_SHA256_C
1759x509parse_crt:"3081a230818ca0030201028204deadbeef300d06092a864886f70d01010b0500300c310a30080600130454657374301c170c303930313031303030303030170c303931323331323335393539300c310a30080600130454657374302a300d06092A864886F70D010101050003190030160210ffffffffffffffffffffffffffffffff0202ffffa100a200a306300430020685300d06092a864886f70d01010b0500030200ff":"":MBEDTLS_ERR_X509_INVALID_EXTENSIONS + MBEDTLS_ERR_ASN1_INVALID_LENGTH
1760
Hanno Becker2389d162019-02-14 12:52:47 +0000[diff] [blame]1761X509 CRT ASN1 (TBS, inv v3Ext, first ext extnID length out of bounds)
Hanno Becker05987e32019-06-04 15:51:22 +0100[diff] [blame]1762depends_on:MBEDTLS_RSA_C:MBEDTLS_SHA256_C
1763x509parse_crt:"3081a230818ca0030201028204deadbeef300d06092a864886f70d01010b0500300c310a30080600130454657374301c170c303930313031303030303030170c303931323331323335393539300c310a30080600130454657374302a300d06092A864886F70D010101050003190030160210ffffffffffffffffffffffffffffffff0202ffffa100a200a306300430020601300d06092a864886f70d01010b0500030200ff":"":MBEDTLS_ERR_X509_INVALID_EXTENSIONS + MBEDTLS_ERR_ASN1_OUT_OF_DATA
1764
Hanno Becker2389d162019-02-14 12:52:47 +0000[diff] [blame]1765X509 CRT ASN1 (TBS, inv v3Ext, no extnValue)
Hanno Becker05987e32019-06-04 15:51:22 +0100[diff] [blame]1766depends_on:MBEDTLS_RSA_C:MBEDTLS_SHA256_C
1767x509parse_crt:"3081a230818ca0030201028204deadbeef300d06092a864886f70d01010b0500300c310a30080600130454657374301c170c303930313031303030303030170c303931323331323335393539300c310a30080600130454657374302a300d06092A864886F70D010101050003190030160210ffffffffffffffffffffffffffffffff0202ffffa100a200a306300430020600300d06092a864886f70d01010b0500030200ff":"":MBEDTLS_ERR_X509_INVALID_EXTENSIONS + MBEDTLS_ERR_ASN1_OUT_OF_DATA
1768
Hanno Becker2389d162019-02-14 12:52:47 +0000[diff] [blame]1769X509 CRT ASN1 (TBS, inv v3Ext, inv critical tag)
Hanno Becker05987e32019-06-04 15:51:22 +0100[diff] [blame]1770depends_on:MBEDTLS_RSA_C:MBEDTLS_SHA256_C
Hanno Becker0f5acc12019-06-04 16:13:23 +0100[diff] [blame]1771x509parse_crt:"3081a430818ea0030201028204deadbeef300d06092a864886f70d01010b0500300c310a30080600130454657374301c170c303930313031303030303030170c303931323331323335393539300c310a30080600130454657374302a300d06092A864886F70D010101050003190030160210ffffffffffffffffffffffffffffffff0202ffffa100a200a3083006300406000500300d06092a864886f70d01010b0500030200ff":"":MBEDTLS_ERR_X509_INVALID_EXTENSIONS + MBEDTLS_ERR_ASN1_UNEXPECTED_TAG
Hanno Becker05987e32019-06-04 15:51:22 +0100[diff] [blame]1772
Hanno Becker2389d162019-02-14 12:52:47 +0000[diff] [blame]1773X509 CRT ASN1 (TBS, inv v3Ext, critical length missing)
Hanno Becker05987e32019-06-04 15:51:22 +0100[diff] [blame]1774depends_on:MBEDTLS_RSA_C:MBEDTLS_SHA256_C
1775x509parse_crt:"3081a330818da0030201028204deadbeef300d06092a864886f70d01010b0500300c310a30080600130454657374301c170c303930313031303030303030170c303931323331323335393539300c310a30080600130454657374302a300d06092A864886F70D010101050003190030160210ffffffffffffffffffffffffffffffff0202ffffa100a200a30730053003060001300d06092a864886f70d01010b0500030200ff":"":MBEDTLS_ERR_X509_INVALID_EXTENSIONS + MBEDTLS_ERR_ASN1_OUT_OF_DATA
1776
Hanno Becker2389d162019-02-14 12:52:47 +0000[diff] [blame]1777X509 CRT ASN1 (TBS, inv v3Ext, critical inv length encoding)
Hanno Becker05987e32019-06-04 15:51:22 +0100[diff] [blame]1778depends_on:MBEDTLS_RSA_C:MBEDTLS_SHA256_C
1779x509parse_crt:"3081a430818ea0030201028204deadbeef300d06092a864886f70d01010b0500300c310a30080600130454657374301c170c303930313031303030303030170c303931323331323335393539300c310a30080600130454657374302a300d06092A864886F70D010101050003190030160210ffffffffffffffffffffffffffffffff0202ffffa100a200a3083006300406000185300d06092a864886f70d01010b0500030200ff":"":MBEDTLS_ERR_X509_INVALID_EXTENSIONS + MBEDTLS_ERR_ASN1_INVALID_LENGTH
1780
Hanno Becker2389d162019-02-14 12:52:47 +0000[diff] [blame]1781X509 CRT ASN1 (TBS, inv v3Ext, critical length out of bounds)
Hanno Becker05987e32019-06-04 15:51:22 +0100[diff] [blame]1782depends_on:MBEDTLS_RSA_C:MBEDTLS_SHA256_C
1783x509parse_crt:"3081a430818ea0030201028204deadbeef300d06092a864886f70d01010b0500300c310a30080600130454657374301c170c303930313031303030303030170c303931323331323335393539300c310a30080600130454657374302a300d06092A864886F70D010101050003190030160210ffffffffffffffffffffffffffffffff0202ffffa100a200a3083006300406000101300d06092a864886f70d01010b0500030200ff":"":MBEDTLS_ERR_X509_INVALID_EXTENSIONS + MBEDTLS_ERR_ASN1_OUT_OF_DATA
1784
Hanno Becker2389d162019-02-14 12:52:47 +0000[diff] [blame]1785X509 CRT ASN1 (TBS, inv v3Ext, critical length 0)
Hanno Becker05987e32019-06-04 15:51:22 +0100[diff] [blame]1786depends_on:MBEDTLS_RSA_C:MBEDTLS_SHA256_C
1787x509parse_crt:"3081a430818ea0030201028204deadbeef300d06092a864886f70d01010b0500300c310a30080600130454657374301c170c303930313031303030303030170c303931323331323335393539300c310a30080600130454657374302a300d06092A864886F70D010101050003190030160210ffffffffffffffffffffffffffffffff0202ffffa100a200a3083006300406000100300d06092a864886f70d01010b0500030200ff":"":MBEDTLS_ERR_X509_INVALID_EXTENSIONS + MBEDTLS_ERR_ASN1_INVALID_LENGTH
1788
Hanno Becker2389d162019-02-14 12:52:47 +0000[diff] [blame]1789X509 CRT ASN1 (TBS, inv v3Ext, critical length 2)
Hanno Becker05987e32019-06-04 15:51:22 +0100[diff] [blame]1790depends_on:MBEDTLS_RSA_C:MBEDTLS_SHA256_C
1791x509parse_crt:"3081a6308190a0030201028204deadbeef300d06092a864886f70d01010b0500300c310a30080600130454657374301c170c303930313031303030303030170c303931323331323335393539300c310a30080600130454657374302a300d06092A864886F70D010101050003190030160210ffffffffffffffffffffffffffffffff0202ffffa100a200a30a30083006060001020000300d06092a864886f70d01010b0500030200ff":"":MBEDTLS_ERR_X509_INVALID_EXTENSIONS + MBEDTLS_ERR_ASN1_INVALID_LENGTH
1792
Hanno Becker2389d162019-02-14 12:52:47 +0000[diff] [blame]1793X509 CRT ASN1 (TBS, inv v3Ext, extnValue inv tag)
Hanno Becker05987e32019-06-04 15:51:22 +0100[diff] [blame]1794depends_on:MBEDTLS_RSA_C:MBEDTLS_SHA256_C
Hanno Becker0f5acc12019-06-04 16:13:23 +0100[diff] [blame]1795x509parse_crt:"3081a7308191a0030201028204deadbeef300d06092a864886f70d01010b0500300c310a30080600130454657374301c170c303930313031303030303030170c303931323331323335393539300c310a30080600130454657374302a300d06092A864886F70D010101050003190030160210ffffffffffffffffffffffffffffffff0202ffffa100a200a30b3009300706000101000500300d06092a864886f70d01010b0500030200ff":"":MBEDTLS_ERR_X509_INVALID_EXTENSIONS + MBEDTLS_ERR_ASN1_UNEXPECTED_TAG
Hanno Becker05987e32019-06-04 15:51:22 +0100[diff] [blame]1796
Hanno Becker2389d162019-02-14 12:52:47 +0000[diff] [blame]1797X509 CRT ASN1 (TBS, inv v3Ext, extnValue length missing)
Hanno Becker05987e32019-06-04 15:51:22 +0100[diff] [blame]1798depends_on:MBEDTLS_RSA_C:MBEDTLS_SHA256_C
1799x509parse_crt:"3081a6308190a0030201028204deadbeef300d06092a864886f70d01010b0500300c310a30080600130454657374301c170c303930313031303030303030170c303931323331323335393539300c310a30080600130454657374302a300d06092A864886F70D010101050003190030160210ffffffffffffffffffffffffffffffff0202ffffa100a200a30a30083006060001010004300d06092a864886f70d01010b0500030200ff":"":MBEDTLS_ERR_X509_INVALID_EXTENSIONS + MBEDTLS_ERR_ASN1_OUT_OF_DATA
1800
Hanno Becker2389d162019-02-14 12:52:47 +0000[diff] [blame]1801X509 CRT ASN1 (TBS, inv v3Ext, extnValue length inv encoding)
Hanno Becker05987e32019-06-04 15:51:22 +0100[diff] [blame]1802depends_on:MBEDTLS_RSA_C:MBEDTLS_SHA256_C
1803x509parse_crt:"3081a7308191a0030201028204deadbeef300d06092a864886f70d01010b0500300c310a30080600130454657374301c170c303930313031303030303030170c303931323331323335393539300c310a30080600130454657374302a300d06092A864886F70D010101050003190030160210ffffffffffffffffffffffffffffffff0202ffffa100a200a30b3009300706000101000485300d06092a864886f70d01010b0500030200ff":"":MBEDTLS_ERR_X509_INVALID_EXTENSIONS + MBEDTLS_ERR_ASN1_INVALID_LENGTH
1804
Hanno Becker2389d162019-02-14 12:52:47 +0000[diff] [blame]1805X509 CRT ASN1 (TBS, inv v3Ext, extnValue length out of bounds)
Hanno Becker05987e32019-06-04 15:51:22 +0100[diff] [blame]1806depends_on:MBEDTLS_RSA_C:MBEDTLS_SHA256_C
1807x509parse_crt:"3081a7308191a0030201028204deadbeef300d06092a864886f70d01010b0500300c310a30080600130454657374301c170c303930313031303030303030170c303931323331323335393539300c310a30080600130454657374302a300d06092A864886F70D010101050003190030160210ffffffffffffffffffffffffffffffff0202ffffa100a200a30b3009300706000101000401300d06092a864886f70d01010b0500030200ff":"":MBEDTLS_ERR_X509_INVALID_EXTENSIONS + MBEDTLS_ERR_ASN1_OUT_OF_DATA
1808
Hanno Becker8671e812019-03-14 08:22:51 +0000[diff] [blame]1809X509 CRT ASN1 (TBS, inv v3Ext, data remaining after extnValue)
Hanno Becker05987e32019-06-04 15:51:22 +0100[diff] [blame]1810depends_on:MBEDTLS_RSA_C:MBEDTLS_SHA256_C
1811x509parse_crt:"3081a9308193a0030201028204deadbeef300d06092a864886f70d01010b0500300c310a30080600130454657374301c170c303930313031303030303030170c303931323331323335393539300c310a30080600130454657374302a300d06092A864886F70D010101050003190030160210ffffffffffffffffffffffffffffffff0202ffffa100a200a30d300b3009060001010004000500300d06092a864886f70d01010b0500030200ff":"":MBEDTLS_ERR_X509_INVALID_EXTENSIONS + MBEDTLS_ERR_ASN1_LENGTH_MISMATCH
1812
Hanno Becker7b8330a2019-09-12 14:06:33 +0100[diff] [blame]1813X509 CRT ASN1 (TBSCertificate v3, inv CertificatePolicies, data missing)
1814depends_on:MBEDTLS_RSA_C:MBEDTLS_SHA256_C
Hanno Beckerc15ff982019-09-12 14:21:57 +0100[diff] [blame]1815x509parse_crt:"3081a7308191a0030201028204deadbeef300d06092a864886f70d01010b0500300c310a30080600130454657374301c170c303930313031303030303030170c303931323331323335393539300c310a30080600130454657374302a300d06092a864886f70d010101050003190030160210ffffffffffffffffffffffffffffffff0202ffffa100a200a30b300930070603551d200400300d06092a864886f70d01010b0500030200ff":"":MBEDTLS_ERR_X509_INVALID_EXTENSIONS + MBEDTLS_ERR_ASN1_OUT_OF_DATA
Hanno Becker7b8330a2019-09-12 14:06:33 +0100[diff] [blame]1816
Hanno Becker6dfa6652019-09-12 16:03:08 +0100[diff] [blame]1817X509 CRT ASN1 (TBSCertificate v3, inv CertificatePolicies, invalid outer tag)
Hanno Becker7b8330a2019-09-12 14:06:33 +0100[diff] [blame]1818depends_on:MBEDTLS_RSA_C:MBEDTLS_SHA256_C
Hanno Becker6dfa6652019-09-12 16:03:08 +0100[diff] [blame]1819x509parse_crt:"3081a9308193a0030201028204deadbeef300d06092a864886f70d01010b0500300c310a30080600130454657374301c170c303930313031303030303030170c303931323331323335393539300c310a30080600130454657374302a300d06092a864886f70d010101050003190030160210ffffffffffffffffffffffffffffffff0202ffffa100a200a30d300b30090603551d2004020500300d06092a864886f70d01010b0500030200ff":"":MBEDTLS_ERR_X509_INVALID_EXTENSIONS + MBEDTLS_ERR_ASN1_UNEXPECTED_TAG
Hanno Becker7b8330a2019-09-12 14:06:33 +0100[diff] [blame]1820
Hanno Becker6dfa6652019-09-12 16:03:08 +0100[diff] [blame]1821X509 CRT ASN1 (TBSCertificate v3, inv CertificatePolicies, outer length missing)
Hanno Becker7b8330a2019-09-12 14:06:33 +0100[diff] [blame]1822depends_on:MBEDTLS_RSA_C:MBEDTLS_SHA256_C
Hanno Becker6dfa6652019-09-12 16:03:08 +0100[diff] [blame]1823x509parse_crt:"3081a8308192a0030201028204deadbeef300d06092a864886f70d01010b0500300c310a30080600130454657374301c170c303930313031303030303030170c303931323331323335393539300c310a30080600130454657374302a300d06092a864886f70d010101050003190030160210ffffffffffffffffffffffffffffffff0202ffffa100a200a30c300a30080603551d20040130300d06092a864886f70d01010b0500030200ff":"":MBEDTLS_ERR_X509_INVALID_EXTENSIONS + MBEDTLS_ERR_ASN1_OUT_OF_DATA
1824
1825X509 CRT ASN1 (TBSCertificate v3, inv CertificatePolicies, outer length inv encoding)
1826depends_on:MBEDTLS_RSA_C:MBEDTLS_SHA256_C
1827x509parse_crt:"3081a9308193a0030201028204deadbeef300d06092a864886f70d01010b0500300c310a30080600130454657374301c170c303930313031303030303030170c303931323331323335393539300c310a30080600130454657374302a300d06092a864886f70d010101050003190030160210ffffffffffffffffffffffffffffffff0202ffffa100a200a30d300b30090603551d2004023085300d06092a864886f70d01010b0500030200ff":"":MBEDTLS_ERR_X509_INVALID_EXTENSIONS + MBEDTLS_ERR_ASN1_INVALID_LENGTH
1828
1829X509 CRT ASN1 (TBSCertificate v3, inv CertificatePolicies, outer length out of bounds)
1830depends_on:MBEDTLS_RSA_C:MBEDTLS_SHA256_C
1831x509parse_crt:"3081a9308193a0030201028204deadbeef300d06092a864886f70d01010b0500300c310a30080600130454657374301c170c303930313031303030303030170c303931323331323335393539300c310a30080600130454657374302a300d06092a864886f70d010101050003190030160210ffffffffffffffffffffffffffffffff0202ffffa100a200a30d300b30090603551d2004023001300d06092a864886f70d01010b0500030200ff":"":MBEDTLS_ERR_X509_INVALID_EXTENSIONS + MBEDTLS_ERR_ASN1_OUT_OF_DATA
1832
1833X509 CRT ASN1 (TBSCertificate v3, inv CertificatePolicies, no policies)
1834depends_on:MBEDTLS_RSA_C:MBEDTLS_SHA256_C
1835x509parse_crt:"3081a9308193a0030201028204deadbeef300d06092a864886f70d01010b0500300c310a30080600130454657374301c170c303930313031303030303030170c303931323331323335393539300c310a30080600130454657374302a300d06092a864886f70d010101050003190030160210ffffffffffffffffffffffffffffffff0202ffffa100a200a30d300b30090603551d2004023000300d06092a864886f70d01010b0500030200ff":"":MBEDTLS_ERR_X509_INVALID_EXTENSIONS + MBEDTLS_ERR_ASN1_LENGTH_MISMATCH
1836
1837X509 CRT ASN1 (TBSCertificate v3, inv CertificatePolicies, policy invalid tag)
1838depends_on:MBEDTLS_RSA_C:MBEDTLS_SHA256_C
1839x509parse_crt:"3081ab308195a0030201028204deadbeef300d06092a864886f70d01010b0500300c310a30080600130454657374301c170c303930313031303030303030170c303931323331323335393539300c310a30080600130454657374302a300d06092a864886f70d010101050003190030160210ffffffffffffffffffffffffffffffff0202ffffa100a200a30f300d300b0603551d20040430020500300d06092a864886f70d01010b0500030200ff":"":MBEDTLS_ERR_X509_INVALID_EXTENSIONS + MBEDTLS_ERR_ASN1_UNEXPECTED_TAG
1840
1841X509 CRT ASN1 (TBSCertificate v3, inv CertificatePolicies, policy length missing)
1842depends_on:MBEDTLS_RSA_C:MBEDTLS_SHA256_C
1843x509parse_crt:"3081aa308194a0030201028204deadbeef300d06092a864886f70d01010b0500300c310a30080600130454657374301c170c303930313031303030303030170c303931323331323335393539300c310a30080600130454657374302a300d06092a864886f70d010101050003190030160210ffffffffffffffffffffffffffffffff0202ffffa100a200a30e300c300a0603551d200403300130300d06092a864886f70d01010b0500030200ff":"":MBEDTLS_ERR_X509_INVALID_EXTENSIONS + MBEDTLS_ERR_ASN1_OUT_OF_DATA
1844
1845X509 CRT ASN1 (TBSCertificate v3, inv CertificatePolicies, policy length inv encoding)
1846depends_on:MBEDTLS_RSA_C:MBEDTLS_SHA256_C
1847x509parse_crt:"3081ab308195a0030201028204deadbeef300d06092a864886f70d01010b0500300c310a30080600130454657374301c170c303930313031303030303030170c303931323331323335393539300c310a30080600130454657374302a300d06092a864886f70d010101050003190030160210ffffffffffffffffffffffffffffffff0202ffffa100a200a30f300d300b0603551d20040430023085300d06092a864886f70d01010b0500030200ff":"":MBEDTLS_ERR_X509_INVALID_EXTENSIONS + MBEDTLS_ERR_ASN1_INVALID_LENGTH
1848
1849X509 CRT ASN1 (TBSCertificate v3, inv CertificatePolicies, policy length out of bounds)
1850depends_on:MBEDTLS_RSA_C:MBEDTLS_SHA256_C
1851x509parse_crt:"3081ab308195a0030201028204deadbeef300d06092a864886f70d01010b0500300c310a30080600130454657374301c170c303930313031303030303030170c303931323331323335393539300c310a30080600130454657374302a300d06092a864886f70d010101050003190030160210ffffffffffffffffffffffffffffffff0202ffffa100a200a30f300d300b0603551d20040430023001300d06092a864886f70d01010b0500030200ff":"":MBEDTLS_ERR_X509_INVALID_EXTENSIONS + MBEDTLS_ERR_ASN1_OUT_OF_DATA
1852
1853X509 CRT ASN1 (TBSCertificate v3, inv CertificatePolicies, empty policy)
1854depends_on:MBEDTLS_RSA_C:MBEDTLS_SHA256_C
1855x509parse_crt:"3081ab308195a0030201028204deadbeef300d06092a864886f70d01010b0500300c310a30080600130454657374301c170c303930313031303030303030170c303931323331323335393539300c310a30080600130454657374302a300d06092a864886f70d010101050003190030160210ffffffffffffffffffffffffffffffff0202ffffa100a200a30f300d300b0603551d20040430023000300d06092a864886f70d01010b0500030200ff":"":MBEDTLS_ERR_X509_INVALID_EXTENSIONS + MBEDTLS_ERR_ASN1_OUT_OF_DATA
1856
1857X509 CRT ASN1 (TBSCertificate v3, inv CertificatePolicies, policy invalid OID tag)
1858depends_on:MBEDTLS_RSA_C:MBEDTLS_SHA256_C
1859x509parse_crt:"3081ad308197a0030201028204deadbeef300d06092a864886f70d01010b0500300c310a30080600130454657374301c170c303930313031303030303030170c303931323331323335393539300c310a30080600130454657374302a300d06092a864886f70d010101050003190030160210ffffffffffffffffffffffffffffffff0202ffffa100a200a311300f300d0603551d200406300430020500300d06092a864886f70d01010b0500030200ff":"":MBEDTLS_ERR_X509_INVALID_EXTENSIONS + MBEDTLS_ERR_ASN1_UNEXPECTED_TAG
1860
1861X509 CRT ASN1 (TBSCertificate v3, inv CertificatePolicies, policy no OID length)
1862depends_on:MBEDTLS_RSA_C:MBEDTLS_SHA256_C
1863x509parse_crt:"3081ac308196a0030201028204deadbeef300d06092a864886f70d01010b0500300c310a30080600130454657374301c170c303930313031303030303030170c303931323331323335393539300c310a30080600130454657374302a300d06092a864886f70d010101050003190030160210ffffffffffffffffffffffffffffffff0202ffffa100a200a310300e300c0603551d2004053003300106300d06092a864886f70d01010b0500030200ff":"":MBEDTLS_ERR_X509_INVALID_EXTENSIONS + MBEDTLS_ERR_ASN1_OUT_OF_DATA
1864
1865X509 CRT ASN1 (TBSCertificate v3, inv CertificatePolicies, policy OID length inv encoding)
1866depends_on:MBEDTLS_RSA_C:MBEDTLS_SHA256_C
1867x509parse_crt:"3081ad308197a0030201028204deadbeef300d06092a864886f70d01010b0500300c310a30080600130454657374301c170c303930313031303030303030170c303931323331323335393539300c310a30080600130454657374302a300d06092a864886f70d010101050003190030160210ffffffffffffffffffffffffffffffff0202ffffa100a200a311300f300d0603551d200406300430020685300d06092a864886f70d01010b0500030200ff":"":MBEDTLS_ERR_X509_INVALID_EXTENSIONS + MBEDTLS_ERR_ASN1_INVALID_LENGTH
1868
1869X509 CRT ASN1 (TBSCertificate v3, inv CertificatePolicies, policy OID length out of bounds)
1870depends_on:MBEDTLS_RSA_C:MBEDTLS_SHA256_C
1871x509parse_crt:"3081ad308197a0030201028204deadbeef300d06092a864886f70d01010b0500300c310a30080600130454657374301c170c303930313031303030303030170c303931323331323335393539300c310a30080600130454657374302a300d06092a864886f70d010101050003190030160210ffffffffffffffffffffffffffffffff0202ffffa100a200a311300f300d0603551d200406300430020601300d06092a864886f70d01010b0500030200ff":"":MBEDTLS_ERR_X509_INVALID_EXTENSIONS + MBEDTLS_ERR_ASN1_OUT_OF_DATA
1872
1873X509 CRT ASN1 (TBSCertificate v3, inv CertificatePolicies, unknown critical policy)
1874depends_on:MBEDTLS_RSA_C:MBEDTLS_SHA256_C:!MBEDTLS_X509_ALLOW_UNSUPPORTED_CRITICAL_EXTENSION
1875x509parse_crt:"3081b130819ba0030201028204deadbeef300d06092a864886f70d01010b0500300c310a30080600130454657374301c170c303930313031303030303030170c303931323331323335393539300c310a30080600130454657374302a300d06092a864886f70d010101050003190030160210ffffffffffffffffffffffffffffffff0202ffffa100a200a315301330110603551d20010101040730053003060100300d06092a864886f70d01010b0500030200ff":"":MBEDTLS_ERR_X509_FEATURE_UNAVAILABLE
1876
1877X509 CRT ASN1 (TBSCertificate v3, inv CertificatePolicies, policy qualifier invalid tag)
1878depends_on:MBEDTLS_RSA_C:MBEDTLS_SHA256_C
1879x509parse_crt:"3081b030819aa0030201028204deadbeef300d06092a864886f70d01010b0500300c310a30080600130454657374301c170c303930313031303030303030170c303931323331323335393539300c310a30080600130454657374302a300d06092a864886f70d010101050003190030160210ffffffffffffffffffffffffffffffff0202ffffa100a200a314301230100603551d200409300730050601000500300d06092a864886f70d01010b0500030200ff":"":MBEDTLS_ERR_X509_INVALID_EXTENSIONS + MBEDTLS_ERR_ASN1_UNEXPECTED_TAG
1880
1881X509 CRT ASN1 (TBSCertificate v3, inv CertificatePolicies, policy qualifier no length)
1882depends_on:MBEDTLS_RSA_C:MBEDTLS_SHA256_C
1883x509parse_crt:"3081af308199a0030201028204deadbeef300d06092a864886f70d01010b0500300c310a30080600130454657374301c170c303930313031303030303030170c303931323331323335393539300c310a30080600130454657374302a300d06092a864886f70d010101050003190030160210ffffffffffffffffffffffffffffffff0202ffffa100a200a3133011300f0603551d2004083006300406010030300d06092a864886f70d01010b0500030200ff":"":MBEDTLS_ERR_X509_INVALID_EXTENSIONS + MBEDTLS_ERR_ASN1_OUT_OF_DATA
1884
1885X509 CRT ASN1 (TBSCertificate v3, inv CertificatePolicies, policy qualifier inv length encoding)
1886depends_on:MBEDTLS_RSA_C:MBEDTLS_SHA256_C
1887x509parse_crt:"3081b030819aa0030201028204deadbeef300d06092a864886f70d01010b0500300c310a30080600130454657374301c170c303930313031303030303030170c303931323331323335393539300c310a30080600130454657374302a300d06092a864886f70d010101050003190030160210ffffffffffffffffffffffffffffffff0202ffffa100a200a314301230100603551d200409300730050601003085300d06092a864886f70d01010b0500030200ff":"":MBEDTLS_ERR_X509_INVALID_EXTENSIONS + MBEDTLS_ERR_ASN1_INVALID_LENGTH
1888
1889X509 CRT ASN1 (TBSCertificate v3, inv CertificatePolicies, policy qualifier length out of bounds)
1890depends_on:MBEDTLS_RSA_C:MBEDTLS_SHA256_C
1891x509parse_crt:"3081b030819aa0030201028204deadbeef300d06092a864886f70d01010b0500300c310a30080600130454657374301c170c303930313031303030303030170c303931323331323335393539300c310a30080600130454657374302a300d06092a864886f70d010101050003190030160210ffffffffffffffffffffffffffffffff0202ffffa100a200a314301230100603551d200409300730050601003001300d06092a864886f70d01010b0500030200ff":"":MBEDTLS_ERR_X509_INVALID_EXTENSIONS + MBEDTLS_ERR_ASN1_OUT_OF_DATA
Hanno Becker7b8330a2019-09-12 14:06:33 +0100[diff] [blame]1892
Hanno Becker2389d162019-02-14 12:52:47 +0000[diff] [blame]1893X509 CRT ASN1 (TBS, inv extBasicConstraint, no pathlen length)
Hanno Becker05987e32019-06-04 15:51:22 +0100[diff] [blame]1894depends_on:MBEDTLS_RSA_C:MBEDTLS_SHA256_C
1895x509parse_crt:"3081b030819aa0030201028204deadbeef300d06092a864886f70d01010b0500300c310a30080600130454657374301c170c303930313031303030303030170c303931323331323335393539300c310a30080600130454657374302a300d06092A864886F70D010101050003190030160210ffffffffffffffffffffffffffffffff0202ffffa100a200a314301230100603551d130101010406300402010102300d06092a864886f70d01010b0500030200ff":"":MBEDTLS_ERR_X509_INVALID_EXTENSIONS + MBEDTLS_ERR_ASN1_OUT_OF_DATA
1896
Andrzej Kurek16050742020-04-14 09:49:52 -0400[diff] [blame]1897X509 CRT ASN1 (inv extBasicConstraint, pathlen is INT_MAX)
1898depends_on:MBEDTLS_RSA_C:MBEDTLS_SHA256_C:MBEDTLS_SHA1_C
Jerry Yu19c04782023-06-01 13:30:06 +0800[diff] [blame]1899x509parse_crt_file:"data_files/parse_input/server1_pathlen_int_max.crt":MBEDTLS_ERR_X509_INVALID_EXTENSIONS + MBEDTLS_ERR_ASN1_INVALID_LENGTH
Andrzej Kurek16050742020-04-14 09:49:52 -0400[diff] [blame]1900
1901X509 CRT ASN1 (pathlen is INT_MAX-1)
1902depends_on:MBEDTLS_RSA_C:MBEDTLS_SHA256_C:MBEDTLS_SHA1_C
Jerry Yu19c04782023-06-01 13:30:06 +0800[diff] [blame]1903x509parse_crt_file:"data_files/parse_input/server1_pathlen_int_max-1.crt":0
Andrzej Kurek16050742020-04-14 09:49:52 -0400[diff] [blame]1904
Hanno Becker2389d162019-02-14 12:52:47 +0000[diff] [blame]1905X509 CRT ASN1 (TBS, inv extBasicConstraint, pathlen inv length encoding)
Hanno Becker05987e32019-06-04 15:51:22 +0100[diff] [blame]1906depends_on:MBEDTLS_RSA_C:MBEDTLS_SHA256_C
1907x509parse_crt:"3081b130819ba0030201028204deadbeef300d06092a864886f70d01010b0500300c310a30080600130454657374301c170c303930313031303030303030170c303931323331323335393539300c310a30080600130454657374302a300d06092A864886F70D010101050003190030160210ffffffffffffffffffffffffffffffff0202ffffa100a200a315301330110603551d13010101040730050201010285300d06092a864886f70d01010b0500030200ff":"":MBEDTLS_ERR_X509_INVALID_EXTENSIONS + MBEDTLS_ERR_ASN1_INVALID_LENGTH
1908
Hanno Becker2389d162019-02-14 12:52:47 +0000[diff] [blame]1909X509 CRT ASN1 (TBS, inv extBasicConstraint, pathlen length out of bounds)
Hanno Becker05987e32019-06-04 15:51:22 +0100[diff] [blame]1910depends_on:MBEDTLS_RSA_C:MBEDTLS_SHA256_C
1911x509parse_crt:"3081b130819ba0030201028204deadbeef300d06092a864886f70d01010b0500300c310a30080600130454657374301c170c303930313031303030303030170c303931323331323335393539300c310a30080600130454657374302a300d06092A864886F70D010101050003190030160210ffffffffffffffffffffffffffffffff0202ffffa100a200a315301330110603551d13010101040730050201010201300d06092a864886f70d01010b0500030200ff":"":MBEDTLS_ERR_X509_INVALID_EXTENSIONS + MBEDTLS_ERR_ASN1_OUT_OF_DATA
1912
Hanno Becker2389d162019-02-14 12:52:47 +0000[diff] [blame]1913X509 CRT ASN1 (TBS, inv extBasicConstraint, pathlen empty)
Hanno Becker05987e32019-06-04 15:51:22 +0100[diff] [blame]1914depends_on:MBEDTLS_RSA_C:MBEDTLS_SHA256_C
1915x509parse_crt:"3081b130819ba0030201028204deadbeef300d06092a864886f70d01010b0500300c310a30080600130454657374301c170c303930313031303030303030170c303931323331323335393539300c310a30080600130454657374302a300d06092A864886F70D010101050003190030160210ffffffffffffffffffffffffffffffff0202ffffa100a200a315301330110603551d13010101040730050201010200300d06092a864886f70d01010b0500030200ff":"":MBEDTLS_ERR_X509_INVALID_EXTENSIONS + MBEDTLS_ERR_ASN1_INVALID_LENGTH
1916
Hanno Becker2389d162019-02-14 12:52:47 +0000[diff] [blame]1917X509 CRT ASN1 (TBS, inv extBasicConstraint, pathlen length mismatch)
Hanno Becker05987e32019-06-04 15:51:22 +0100[diff] [blame]1918depends_on:MBEDTLS_RSA_C:MBEDTLS_SHA256_C
1919x509parse_crt:"3081b430819ea0030201028204deadbeef300d06092a864886f70d01010b0500300c310a30080600130454657374301c170c303930313031303030303030170c303931323331323335393539300c310a30080600130454657374302a300d06092A864886F70D010101050003190030160210ffffffffffffffffffffffffffffffff0202ffffa100a200a318301630140603551d13010101040a30080201010201010500300d06092a864886f70d01010b0500030200ff":"":MBEDTLS_ERR_X509_INVALID_EXTENSIONS + MBEDTLS_ERR_ASN1_LENGTH_MISMATCH
1920
Hanno Becker2389d162019-02-14 12:52:47 +0000[diff] [blame]1921X509 CRT ASN1 (TBS, inv v3Ext, ExtKeyUsage bad second tag)
Hanno Becker05987e32019-06-04 15:51:22 +0100[diff] [blame]1922depends_on:MBEDTLS_RSA_C:MBEDTLS_SHA256_C
1923x509parse_crt:"3081bd3081a7a0030201028204deadbeef300d06092a864886f70d01010b0500300c310a30080600130454657374301c170c303930313031303030303030170c303931323331323335393539300c310a30080600130454657374302a300d06092A864886F70D010101050003190030160210ffffffffffffffffffffffffffffffff0202ffffa100a200a321301f301d0603551d250416301406082b0601050507030107082b06010505070302300d06092a864886f70d01010b0500030200ff":"":MBEDTLS_ERR_X509_INVALID_EXTENSIONS + MBEDTLS_ERR_ASN1_UNEXPECTED_TAG
1924
hanno-becker95f316a2023-02-08 08:53:22 -0500[diff] [blame]1925X509 CRT ASN1 (TBS, inv SubjectAltName, empty)
1926depends_on:MBEDTLS_RSA_C:MBEDTLS_SHA256_C
1927x509parse_crt:"3081a7308191a0030201028204deadbeef300d06092a864886f70d01010b0500300c310a30080600130454657374301c170c303930313031303030303030170c303931323331323335393539300c310a30080600130454657374302a300d06092A864886F70D010101050003190030160210ffffffffffffffffffffffffffffffff0202ffffa100a200a30b300930070603551d110400300d06092a864886f70d01010b0500030200ff":"":MBEDTLS_ERR_X509_INVALID_EXTENSIONS + MBEDTLS_ERR_ASN1_OUT_OF_DATA
1928
1929X509 CRT ASN1 (TBS, inv SubjectAltName, inv tag)
1930depends_on:MBEDTLS_RSA_C:MBEDTLS_SHA256_C
1931x509parse_crt:"3081a9308193a0030201028204deadbeef300d06092a864886f70d01010b0500300c310a30080600130454657374301c170c303930313031303030303030170c303931323331323335393539300c310a30080600130454657374302a300d06092A864886F70D010101050003190030160210ffffffffffffffffffffffffffffffff0202ffffa100a200a30d300b30090603551d1104020500300d06092a864886f70d01010b0500030200ff":"":MBEDTLS_ERR_X509_INVALID_EXTENSIONS + MBEDTLS_ERR_ASN1_UNEXPECTED_TAG
1932
1933X509 CRT ASN1 (TBS, inv SubjectAltName, length missing)
1934depends_on:MBEDTLS_RSA_C:MBEDTLS_SHA256_C
1935x509parse_crt:"3081a8308192a0030201028204deadbeef300d06092a864886f70d01010b0500300c310a30080600130454657374301c170c303930313031303030303030170c303931323331323335393539300c310a30080600130454657374302a300d06092A864886F70D010101050003190030160210ffffffffffffffffffffffffffffffff0202ffffa100a200a30c300a30080603551d11040130300d06092a864886f70d01010b0500030200ff":"":MBEDTLS_ERR_X509_INVALID_EXTENSIONS + MBEDTLS_ERR_ASN1_OUT_OF_DATA
1936
1937X509 CRT ASN1 (TBS, inv SubjectAltName, inv length encoding)
1938depends_on:MBEDTLS_RSA_C:MBEDTLS_SHA256_C
1939x509parse_crt:"3081a9308193a0030201028204deadbeef300d06092a864886f70d01010b0500300c310a30080600130454657374301c170c303930313031303030303030170c303931323331323335393539300c310a30080600130454657374302a300d06092A864886F70D010101050003190030160210ffffffffffffffffffffffffffffffff0202ffffa100a200a30d300b30090603551d1104023085300d06092a864886f70d01010b0500030200ff":"":MBEDTLS_ERR_X509_INVALID_EXTENSIONS + MBEDTLS_ERR_ASN1_INVALID_LENGTH
1940
1941X509 CRT ASN1 (TBS, inv SubjectAltName, length out of bounds)
1942depends_on:MBEDTLS_RSA_C:MBEDTLS_SHA256_C
1943x509parse_crt:"3081a9308193a0030201028204deadbeef300d06092a864886f70d01010b0500300c310a30080600130454657374301c170c303930313031303030303030170c303931323331323335393539300c310a30080600130454657374302a300d06092A864886F70D010101050003190030160210ffffffffffffffffffffffffffffffff0202ffffa100a200a30d300b30090603551d1104023001300d06092a864886f70d01010b0500030200ff":"":MBEDTLS_ERR_X509_INVALID_EXTENSIONS + MBEDTLS_ERR_ASN1_OUT_OF_DATA
1944
1945X509 CRT ASN1 (TBS, inv SubjectAltName, data remaining after name SEQUENCE)
1946depends_on:MBEDTLS_RSA_C:MBEDTLS_SHA256_C
1947x509parse_crt:"3081aa308194a0030201028204deadbeef300d06092a864886f70d01010b0500300c310a30080600130454657374301c170c303930313031303030303030170c303931323331323335393539300c310a30080600130454657374302a300d06092A864886F70D010101050003190030160210ffffffffffffffffffffffffffffffff0202ffffa100a200a30e300c300a0603551d110403300000300d06092a864886f70d01010b0500030200ff":"":MBEDTLS_ERR_X509_INVALID_EXTENSIONS + MBEDTLS_ERR_ASN1_LENGTH_MISMATCH
1948
1949X509 CRT ASN1 (TBS, inv SubjectAltName, name component length missing)
1950depends_on:MBEDTLS_RSA_C:MBEDTLS_SHA256_C
1951x509parse_crt:"3081aa308194a0030201028204deadbeef300d06092a864886f70d01010b0500300c310a30080600130454657374301c170c303930313031303030303030170c303931323331323335393539300c310a30080600130454657374302a300d06092A864886F70D010101050003190030160210ffffffffffffffffffffffffffffffff0202ffffa100a200a30e300c300a0603551d110403300180300d06092a864886f70d01010b0500030200ff":"":MBEDTLS_ERR_X509_INVALID_EXTENSIONS + MBEDTLS_ERR_ASN1_OUT_OF_DATA
1952
1953X509 CRT ASN1 (TBS, inv SubjectAltName, name component inv length encoding)
1954depends_on:MBEDTLS_RSA_C:MBEDTLS_SHA256_C
1955x509parse_crt:"3081ab308195a0030201028204deadbeef300d06092a864886f70d01010b0500300c310a30080600130454657374301c170c303930313031303030303030170c303931323331323335393539300c310a30080600130454657374302a300d06092A864886F70D010101050003190030160210ffffffffffffffffffffffffffffffff0202ffffa100a200a30f300d300b0603551d11040430028085300d06092a864886f70d01010b0500030200ff":"":MBEDTLS_ERR_X509_INVALID_EXTENSIONS + MBEDTLS_ERR_ASN1_INVALID_LENGTH
1956
1957X509 CRT ASN1 (TBS, inv SubjectAltName, name component length out of bounds)
1958depends_on:MBEDTLS_RSA_C:MBEDTLS_SHA256_C
1959x509parse_crt:"3081ab308195a0030201028204deadbeef300d06092a864886f70d01010b0500300c310a30080600130454657374301c170c303930313031303030303030170c303931323331323335393539300c310a30080600130454657374302a300d06092A864886F70D010101050003190030160210ffffffffffffffffffffffffffffffff0202ffffa100a200a30f300d300b0603551d11040430028001300d06092a864886f70d01010b0500030200ff":"":MBEDTLS_ERR_X509_INVALID_EXTENSIONS + MBEDTLS_ERR_ASN1_OUT_OF_DATA
1960
1961X509 CRT ASN1 (TBS, inv SubjectAltName, name component unexpected tag)
1962depends_on:MBEDTLS_RSA_C:MBEDTLS_SHA256_C
1963x509parse_crt:"3081ab308195a0030201028204deadbeef300d06092a864886f70d01010b0500300c310a30080600130454657374301c170c303930313031303030303030170c303931323331323335393539300c310a30080600130454657374302a300d06092A864886F70D010101050003190030160210ffffffffffffffffffffffffffffffff0202ffffa100a200a30f300d300b0603551d11040430024000300d06092a864886f70d01010b0500030200ff":"":MBEDTLS_ERR_X509_INVALID_EXTENSIONS + MBEDTLS_ERR_ASN1_UNEXPECTED_TAG
1964
1965X509 CRT ASN1 (TBS, inv SubjectAltName, otherName component empty)
1966depends_on:MBEDTLS_RSA_C:MBEDTLS_SHA256_C
1967x509parse_crt:"3081ab308195a0030201028204deadbeef300d06092a864886f70d01010b0500300c310a30080600130454657374301c170c303930313031303030303030170c303931323331323335393539300c310a30080600130454657374302a300d06092A864886F70D010101050003190030160210ffffffffffffffffffffffffffffffff0202ffffa100a200a30f300d300b0603551d1104043002a000300d06092a864886f70d01010b0500030200ff":"":MBEDTLS_ERR_X509_INVALID_EXTENSIONS + MBEDTLS_ERR_ASN1_OUT_OF_DATA
1968
1969X509 CRT ASN1 (TBS, inv SubjectAltName, otherName invalid OID tag)
1970depends_on:MBEDTLS_RSA_C:MBEDTLS_SHA256_C
1971x509parse_crt:"3081ad308197a0030201028204deadbeef300d06092a864886f70d01010b0500300c310a30080600130454657374301c170c303930313031303030303030170c303931323331323335393539300c310a30080600130454657374302a300d06092A864886F70D010101050003190030160210ffffffffffffffffffffffffffffffff0202ffffa100a200a311300f300d0603551d1104063004a0020500300d06092a864886f70d01010b0500030200ff":"":MBEDTLS_ERR_X509_INVALID_EXTENSIONS + MBEDTLS_ERR_ASN1_UNEXPECTED_TAG
1972
1973X509 CRT ASN1 (TBS, inv SubjectAltName, otherName OID length missing)
1974depends_on:MBEDTLS_RSA_C:MBEDTLS_SHA256_C
1975x509parse_crt:"3081ac308196a0030201028204deadbeef300d06092a864886f70d01010b0500300c310a30080600130454657374301c170c303930313031303030303030170c303931323331323335393539300c310a30080600130454657374302a300d06092A864886F70D010101050003190030160210ffffffffffffffffffffffffffffffff0202ffffa100a200a310300e300c0603551d1104053003a00106300d06092a864886f70d01010b0500030200ff":"":MBEDTLS_ERR_X509_INVALID_EXTENSIONS + MBEDTLS_ERR_ASN1_OUT_OF_DATA
1976
1977X509 CRT ASN1 (TBS, inv SubjectAltName, otherName OID inv length encoding)
1978depends_on:MBEDTLS_RSA_C:MBEDTLS_SHA256_C
1979x509parse_crt:"3081ad308197a0030201028204deadbeef300d06092a864886f70d01010b0500300c310a30080600130454657374301c170c303930313031303030303030170c303931323331323335393539300c310a30080600130454657374302a300d06092A864886F70D010101050003190030160210ffffffffffffffffffffffffffffffff0202ffffa100a200a311300f300d0603551d1104063004a0020685300d06092a864886f70d01010b0500030200ff":"":MBEDTLS_ERR_X509_INVALID_EXTENSIONS + MBEDTLS_ERR_ASN1_INVALID_LENGTH
1980
1981X509 CRT ASN1 (TBS, inv SubjectAltName, otherName OID length out of bounds)
1982depends_on:MBEDTLS_RSA_C:MBEDTLS_SHA256_C
1983x509parse_crt:"3081ad308197a0030201028204deadbeef300d06092a864886f70d01010b0500300c310a30080600130454657374301c170c303930313031303030303030170c303931323331323335393539300c310a30080600130454657374302a300d06092A864886F70D010101050003190030160210ffffffffffffffffffffffffffffffff0202ffffa100a200a311300f300d0603551d1104063004a0020601300d06092a864886f70d01010b0500030200ff":"":MBEDTLS_ERR_X509_INVALID_EXTENSIONS + MBEDTLS_ERR_ASN1_OUT_OF_DATA
1984
1985X509 CRT ASN1 (TBS, inv SubjectAltName, HWModuleName EXPLICIT tag missing
1986depends_on:MBEDTLS_RSA_C:MBEDTLS_SHA256_C
1987x509parse_crt:"3081b530819fa0030201028204deadbeef300d06092a864886f70d01010b0500300c310a30080600130454657374301c170c303930313031303030303030170c303931323331323335393539300c310a30080600130454657374302a300d06092A864886F70D010101050003190030160210ffffffffffffffffffffffffffffffff0202ffffa100a200a319301730150603551d11040e300ca00a06082b06010505070804300d06092a864886f70d01010b0500030200ff":"":MBEDTLS_ERR_X509_INVALID_EXTENSIONS + MBEDTLS_ERR_ASN1_OUT_OF_DATA
1988
1989X509 CRT ASN1 (TBS, inv SubjectAltName, HWModuleName unexpected EXPLICIT tag)
1990depends_on:MBEDTLS_RSA_C:MBEDTLS_SHA256_C
1991x509parse_crt:"3081b73081a1a0030201028204deadbeef300d06092a864886f70d01010b0500300c310a30080600130454657374301c170c303930313031303030303030170c303931323331323335393539300c310a30080600130454657374302a300d06092A864886F70D010101050003190030160210ffffffffffffffffffffffffffffffff0202ffffa100a200a31b301930170603551d110410300ea00c06082b060105050708040500300d06092a864886f70d01010b0500030200ff":"":MBEDTLS_ERR_X509_INVALID_EXTENSIONS + MBEDTLS_ERR_ASN1_UNEXPECTED_TAG
1992
1993X509 CRT ASN1 (TBS, inv SubjectAltName, HWModuleName outer length missing)
1994depends_on:MBEDTLS_RSA_C:MBEDTLS_SHA256_C
1995x509parse_crt:"3081b63081a0a0030201028204deadbeef300d06092a864886f70d01010b0500300c310a30080600130454657374301c170c303930313031303030303030170c303931323331323335393539300c310a30080600130454657374302a300d06092A864886F70D010101050003190030160210ffffffffffffffffffffffffffffffff0202ffffa100a200a31a301830160603551d11040f300da00b06082b06010505070804a0300d06092a864886f70d01010b0500030200ff":"":MBEDTLS_ERR_X509_INVALID_EXTENSIONS + MBEDTLS_ERR_ASN1_OUT_OF_DATA
1996
1997X509 CRT ASN1 (TBS, inv SubjectAltName, HWModuleName inv outer length)
1998depends_on:MBEDTLS_RSA_C:MBEDTLS_SHA256_C
1999x509parse_crt:"3081b73081a1a0030201028204deadbeef300d06092a864886f70d01010b0500300c310a30080600130454657374301c170c303930313031303030303030170c303931323331323335393539300c310a30080600130454657374302a300d06092A864886F70D010101050003190030160210ffffffffffffffffffffffffffffffff0202ffffa100a200a31b301930170603551d110410300ea00c06082b06010505070804a085300d06092a864886f70d01010b0500030200ff":"":MBEDTLS_ERR_X509_INVALID_EXTENSIONS + MBEDTLS_ERR_ASN1_INVALID_LENGTH
2000
2001X509 CRT ASN1 (TBS, inv SubjectAltName, HWModuleName outer length out of bounds)
2002depends_on:MBEDTLS_RSA_C:MBEDTLS_SHA256_C
2003x509parse_crt:"3081b73081a1a0030201028204deadbeef300d06092a864886f70d01010b0500300c310a30080600130454657374301c170c303930313031303030303030170c303931323331323335393539300c310a30080600130454657374302a300d06092A864886F70D010101050003190030160210ffffffffffffffffffffffffffffffff0202ffffa100a200a31b301930170603551d110410300ea00c06082b06010505070804a001300d06092a864886f70d01010b0500030200ff":"":MBEDTLS_ERR_X509_INVALID_EXTENSIONS + MBEDTLS_ERR_ASN1_OUT_OF_DATA
2004
2005X509 CRT ASN1 (TBS, inv SubjectAltName, HWModuleName outer length 0)
2006depends_on:MBEDTLS_RSA_C:MBEDTLS_SHA256_C
2007x509parse_crt:"3081b73081a1a0030201028204deadbeef300d06092a864886f70d01010b0500300c310a30080600130454657374301c170c303930313031303030303030170c303931323331323335393539300c310a30080600130454657374302a300d06092A864886F70D010101050003190030160210ffffffffffffffffffffffffffffffff0202ffffa100a200a31b301930170603551d110410300ea00c06082b06010505070804a000300d06092a864886f70d01010b0500030200ff":"":MBEDTLS_ERR_X509_INVALID_EXTENSIONS + MBEDTLS_ERR_ASN1_OUT_OF_DATA
2008
2009X509 CRT ASN1 (TBS, inv SubjectAltName, HWModuleName inner tag invalid)
2010depends_on:MBEDTLS_RSA_C:MBEDTLS_SHA256_C
2011x509parse_crt:"3081b93081a3a0030201028204deadbeef300d06092a864886f70d01010b0500300c310a30080600130454657374301c170c303930313031303030303030170c303931323331323335393539300c310a30080600130454657374302a300d06092A864886F70D010101050003190030160210ffffffffffffffffffffffffffffffff0202ffffa100a200a31d301b30190603551d1104123010a00e06082b06010505070804a0020500300d06092a864886f70d01010b0500030200ff":"":MBEDTLS_ERR_X509_INVALID_EXTENSIONS + MBEDTLS_ERR_ASN1_UNEXPECTED_TAG
2012
2013X509 CRT ASN1 (TBS, inv SubjectAltName, HWModuleName inner length missing)
2014depends_on:MBEDTLS_RSA_C:MBEDTLS_SHA256_C
2015x509parse_crt:"3081b83081a2a0030201028204deadbeef300d06092a864886f70d01010b0500300c310a30080600130454657374301c170c303930313031303030303030170c303931323331323335393539300c310a30080600130454657374302a300d06092A864886F70D010101050003190030160210ffffffffffffffffffffffffffffffff0202ffffa100a200a31c301a30180603551d110411300fa00d06082b06010505070804a00130300d06092a864886f70d01010b0500030200ff":"":MBEDTLS_ERR_X509_INVALID_EXTENSIONS + MBEDTLS_ERR_ASN1_OUT_OF_DATA
2016
2017X509 CRT ASN1 (TBS, inv SubjectAltName, HWModuleName inner length inv encoding)
2018depends_on:MBEDTLS_RSA_C:MBEDTLS_SHA256_C
2019x509parse_crt:"3081b93081a3a0030201028204deadbeef300d06092a864886f70d01010b0500300c310a30080600130454657374301c170c303930313031303030303030170c303931323331323335393539300c310a30080600130454657374302a300d06092A864886F70D010101050003190030160210ffffffffffffffffffffffffffffffff0202ffffa100a200a31d301b30190603551d1104123010a00e06082b06010505070804a0023085300d06092a864886f70d01010b0500030200ff":"":MBEDTLS_ERR_X509_INVALID_EXTENSIONS + MBEDTLS_ERR_ASN1_INVALID_LENGTH
2020
2021X509 CRT ASN1 (TBS, inv SubjectAltName, HWModuleName inner length out of bounds)
2022depends_on:MBEDTLS_RSA_C:MBEDTLS_SHA256_C
2023x509parse_crt:"3081b93081a3a0030201028204deadbeef300d06092a864886f70d01010b0500300c310a30080600130454657374301c170c303930313031303030303030170c303931323331323335393539300c310a30080600130454657374302a300d06092A864886F70D010101050003190030160210ffffffffffffffffffffffffffffffff0202ffffa100a200a31d301b30190603551d1104123010a00e06082b06010505070804a0023001300d06092a864886f70d01010b0500030200ff":"":MBEDTLS_ERR_X509_INVALID_EXTENSIONS + MBEDTLS_ERR_ASN1_OUT_OF_DATA
2024
2025X509 CRT ASN1 (TBS, inv SubjectAltName, HWModuleName empty)
2026depends_on:MBEDTLS_RSA_C:MBEDTLS_SHA256_C
2027x509parse_crt:"3081b93081a3a0030201028204deadbeef300d06092a864886f70d01010b0500300c310a30080600130454657374301c170c303930313031303030303030170c303931323331323335393539300c310a30080600130454657374302a300d06092A864886F70D010101050003190030160210ffffffffffffffffffffffffffffffff0202ffffa100a200a31d301b30190603551d1104123010a00e06082b06010505070804a0023000300d06092a864886f70d01010b0500030200ff":"":MBEDTLS_ERR_X509_INVALID_EXTENSIONS + MBEDTLS_ERR_ASN1_OUT_OF_DATA
2028
2029X509 CRT ASN1 (TBS, inv SubjectAltName, HWModuleName unexpected OID tag)
2030depends_on:MBEDTLS_RSA_C:MBEDTLS_SHA256_C
2031x509parse_crt:"3081bb3081a5a0030201028204deadbeef300d06092a864886f70d01010b0500300c310a30080600130454657374301c170c303930313031303030303030170c303931323331323335393539300c310a30080600130454657374302a300d06092A864886F70D010101050003190030160210ffffffffffffffffffffffffffffffff0202ffffa100a200a31f301d301b0603551d1104143012a01006082b06010505070804a00430020500300d06092a864886f70d01010b0500030200ff":"":MBEDTLS_ERR_X509_INVALID_EXTENSIONS + MBEDTLS_ERR_ASN1_UNEXPECTED_TAG
2032
2033X509 CRT ASN1 (TBS, inv SubjectAltName, HWModuleName OID no length)
2034depends_on:MBEDTLS_RSA_C:MBEDTLS_SHA256_C
2035x509parse_crt:"3081ba3081a4a0030201028204deadbeef300d06092a864886f70d01010b0500300c310a30080600130454657374301c170c303930313031303030303030170c303931323331323335393539300c310a30080600130454657374302a300d06092A864886F70D010101050003190030160210ffffffffffffffffffffffffffffffff0202ffffa100a200a31e301c301a0603551d1104133011a00f06082b06010505070804a003300106300d06092a864886f70d01010b0500030200ff":"":MBEDTLS_ERR_X509_INVALID_EXTENSIONS + MBEDTLS_ERR_ASN1_OUT_OF_DATA
2036
2037X509 CRT ASN1 (TBS, inv SubjectAltName, HWModuleName OID inv length encoding)
2038depends_on:MBEDTLS_RSA_C:MBEDTLS_SHA256_C
2039x509parse_crt:"3081bb3081a5a0030201028204deadbeef300d06092a864886f70d01010b0500300c310a30080600130454657374301c170c303930313031303030303030170c303931323331323335393539300c310a30080600130454657374302a300d06092A864886F70D010101050003190030160210ffffffffffffffffffffffffffffffff0202ffffa100a200a31f301d301b0603551d1104143012a01006082b06010505070804a00430020685300d06092a864886f70d01010b0500030200ff":"":MBEDTLS_ERR_X509_INVALID_EXTENSIONS + MBEDTLS_ERR_ASN1_INVALID_LENGTH
2040
2041X509 CRT ASN1 (TBS, inv SubjectAltName, HWModuleName OID length out of bounds)
2042depends_on:MBEDTLS_RSA_C:MBEDTLS_SHA256_C
2043x509parse_crt:"3081bb3081a5a0030201028204deadbeef300d06092a864886f70d01010b0500300c310a30080600130454657374301c170c303930313031303030303030170c303931323331323335393539300c310a30080600130454657374302a300d06092A864886F70D010101050003190030160210ffffffffffffffffffffffffffffffff0202ffffa100a200a31f301d301b0603551d1104143012a01006082b06010505070804a00430020601300d06092a864886f70d01010b0500030200ff":"":MBEDTLS_ERR_X509_INVALID_EXTENSIONS + MBEDTLS_ERR_ASN1_OUT_OF_DATA
2044
2045X509 CRT ASN1 (TBS, inv SubjectAltName, HWModuleName data missing)
2046depends_on:MBEDTLS_RSA_C:MBEDTLS_SHA256_C
2047x509parse_crt:"3081bb3081a5a0030201028204deadbeef300d06092a864886f70d01010b0500300c310a30080600130454657374301c170c303930313031303030303030170c303931323331323335393539300c310a30080600130454657374302a300d06092A864886F70D010101050003190030160210ffffffffffffffffffffffffffffffff0202ffffa100a200a31f301d301b0603551d1104143012a01006082b06010505070804a00430020600300d06092a864886f70d01010b0500030200ff":"":MBEDTLS_ERR_X509_INVALID_EXTENSIONS + MBEDTLS_ERR_ASN1_OUT_OF_DATA
2048
2049X509 CRT ASN1 (TBS, inv SubjectAltName, HWModuleName data invalid tag)
2050depends_on:MBEDTLS_RSA_C:MBEDTLS_SHA256_C
2051x509parse_crt:"3081bd3081a7a0030201028204deadbeef300d06092a864886f70d01010b0500300c310a30080600130454657374301c170c303930313031303030303030170c303931323331323335393539300c310a30080600130454657374302a300d06092A864886F70D010101050003190030160210ffffffffffffffffffffffffffffffff0202ffffa100a200a321301f301d0603551d1104163014a01206082b06010505070804a006300406000500300d06092a864886f70d01010b0500030200ff":"":MBEDTLS_ERR_X509_INVALID_EXTENSIONS + MBEDTLS_ERR_ASN1_UNEXPECTED_TAG
2052
2053X509 CRT ASN1 (TBS, inv SubjectAltName, HWModuleName data length missing)
2054depends_on:MBEDTLS_RSA_C:MBEDTLS_SHA256_C
2055x509parse_crt:"3081bc3081a6a0030201028204deadbeef300d06092a864886f70d01010b0500300c310a30080600130454657374301c170c303930313031303030303030170c303931323331323335393539300c310a30080600130454657374302a300d06092A864886F70D010101050003190030160210ffffffffffffffffffffffffffffffff0202ffffa100a200a320301e301c0603551d1104153013a01106082b06010505070804a0053003060004300d06092a864886f70d01010b0500030200ff":"":MBEDTLS_ERR_X509_INVALID_EXTENSIONS + MBEDTLS_ERR_ASN1_OUT_OF_DATA
2056
2057X509 CRT ASN1 (TBS, inv SubjectAltName, HWModuleName data inv length encoding)
2058depends_on:MBEDTLS_RSA_C:MBEDTLS_SHA256_C
2059x509parse_crt:"3081bd3081a7a0030201028204deadbeef300d06092a864886f70d01010b0500300c310a30080600130454657374301c170c303930313031303030303030170c303931323331323335393539300c310a30080600130454657374302a300d06092A864886F70D010101050003190030160210ffffffffffffffffffffffffffffffff0202ffffa100a200a321301f301d0603551d1104163014a01206082b06010505070804a006300406000485300d06092a864886f70d01010b0500030200ff":"":MBEDTLS_ERR_X509_INVALID_EXTENSIONS + MBEDTLS_ERR_ASN1_INVALID_LENGTH
2060
2061X509 CRT ASN1 (TBS, inv SubjectAltName, HWModuleName data length out of bounds)
2062depends_on:MBEDTLS_RSA_C:MBEDTLS_SHA256_C
2063x509parse_crt:"3081bd3081a7a0030201028204deadbeef300d06092a864886f70d01010b0500300c310a30080600130454657374301c170c303930313031303030303030170c303931323331323335393539300c310a30080600130454657374302a300d06092A864886F70D010101050003190030160210ffffffffffffffffffffffffffffffff0202ffffa100a200a321301f301d0603551d1104163014a01206082b06010505070804a006300406000401300d06092a864886f70d01010b0500030200ff":"":MBEDTLS_ERR_X509_INVALID_EXTENSIONS + MBEDTLS_ERR_ASN1_OUT_OF_DATA
2064
2065X509 CRT ASN1 (TBS, inv SubjectAltName, HWModuleName data remaining #1)
2066depends_on:MBEDTLS_RSA_C:MBEDTLS_SHA256_C
2067x509parse_crt:"3081bf3081a9a0030201028204deadbeef300d06092a864886f70d01010b0500300c310a30080600130454657374301c170c303930313031303030303030170c303931323331323335393539300c310a30080600130454657374302a300d06092A864886F70D010101050003190030160210ffffffffffffffffffffffffffffffff0202ffffa100a200a3233021301f0603551d1104183016a01406082b06010505070804a0083006060004000500300d06092a864886f70d01010b0500030200ff":"":MBEDTLS_ERR_X509_INVALID_EXTENSIONS + MBEDTLS_ERR_ASN1_LENGTH_MISMATCH
2068
2069X509 CRT ASN1 (TBS, inv SubjectAltName, HWModuleName data remaining #2)
2070depends_on:MBEDTLS_RSA_C:MBEDTLS_SHA256_C
2071x509parse_crt:"3081bf3081a9a0030201028204deadbeef300d06092a864886f70d01010b0500300c310a30080600130454657374301c170c303930313031303030303030170c303931323331323335393539300c310a30080600130454657374302a300d06092A864886F70D010101050003190030160210ffffffffffffffffffffffffffffffff0202ffffa100a200a3233021301f0603551d1104183016a01406082b06010505070804a0083004060004000500300d06092a864886f70d01010b0500030200ff":"":MBEDTLS_ERR_X509_INVALID_EXTENSIONS + MBEDTLS_ERR_ASN1_LENGTH_MISMATCH
2072
2073X509 CRT ASN1 (TBS, inv SubjectAltName, HWModuleName data remaining #3)
2074depends_on:MBEDTLS_RSA_C:MBEDTLS_SHA256_C
2075x509parse_crt:"3081bf3081a9a0030201028204deadbeef300d06092a864886f70d01010b0500300c310a30080600130454657374301c170c303930313031303030303030170c303931323331323335393539300c310a30080600130454657374302a300d06092A864886F70D010101050003190030160210ffffffffffffffffffffffffffffffff0202ffffa100a200a3233021301f0603551d1104183016a01406082b06010505070804a0063004060004000500300d06092a864886f70d01010b0500030200ff":"":MBEDTLS_ERR_X509_INVALID_EXTENSIONS + MBEDTLS_ERR_ASN1_LENGTH_MISMATCH
2076
Hanno Becker2389d162019-02-14 12:52:47 +0000[diff] [blame]2077X509 CRT ASN1 (TBS, inv v3Ext, SubjectAltName repeated)
Hanno Becker05987e32019-06-04 15:51:22 +0100[diff] [blame]2078depends_on:MBEDTLS_RSA_C:MBEDTLS_SHA256_C
2079x509parse_crt:"3081dc3081c6a0030201028204deadbeef300d06092a864886f70d01010b0500300c310a30080600130454657374301c170c303930313031303030303030170c303931323331323335393539300c310a30080600130454657374302a300d06092A864886F70D010101050003190030160210ffffffffffffffffffffffffffffffff0202ffffa100a200a340303e301d0603551d11041630148208666f6f2e7465737482086261722e74657374301d0603551d11041630148208666f6f2e7465737482086261722e74657374300d06092a864886f70d01010b0500030200ff":"":MBEDTLS_ERR_X509_INVALID_EXTENSIONS
2080
Hanno Becker2389d162019-02-14 12:52:47 +0000[diff] [blame]2081X509 CRT ASN1 (TBS, inv v3Ext, ExtKeyUsage repeated)
Hanno Becker05987e32019-06-04 15:51:22 +0100[diff] [blame]2082depends_on:MBEDTLS_RSA_C:MBEDTLS_SHA256_C
2083x509parse_crt:"3081dc3081c6a0030201028204deadbeef300d06092a864886f70d01010b0500300c310a30080600130454657374301c170c303930313031303030303030170c303931323331323335393539300c310a30080600130454657374302a300d06092A864886F70D010101050003190030160210ffffffffffffffffffffffffffffffff0202ffffa100a200a340303e301d0603551d250416301406082b0601050507030106082b06010505070302301d0603551d250416301406082b0601050507030106082b06010505070302300d06092a864886f70d01010b0500030200ff":"":MBEDTLS_ERR_X509_INVALID_EXTENSIONS
2084
Hanno Becker2389d162019-02-14 12:52:47 +0000[diff] [blame]2085X509 CRT ASN1 (TBS, inv v3Ext, SubjectAltName repeated outside Extensions)
Hanno Becker05987e32019-06-04 15:51:22 +0100[diff] [blame]2086depends_on:MBEDTLS_RSA_C:MBEDTLS_SHA256_C
2087x509parse_crt:"3081dc3081c6a0030201028204deadbeef300d06092a864886f70d01010b0500300c310a30080600130454657374301c170c303930313031303030303030170c303931323331323335393539300c310a30080600130454657374302a300d06092A864886F70D010101050003190030160210ffffffffffffffffffffffffffffffff0202ffffa100a200a321301f301d0603551d11041630148208666f6f2e7465737482086261722e74657374301d0603551d11041630148208666f6f2e7465737482086261722e74657374300d06092a864886f70d01010b0500030200ff":"":MBEDTLS_ERR_X509_INVALID_FORMAT + MBEDTLS_ERR_ASN1_LENGTH_MISMATCH
2088
Gilles Peskine6710e152020-04-12 14:21:30 +0200[diff] [blame]2089X509 CRT (TBS, valid v3Ext in v1 CRT, ALLOW_EXTENSIONS_NON_V3)
2090depends_on:MBEDTLS_X509_ALLOW_EXTENSIONS_NON_V3:MBEDTLS_RSA_C:MBEDTLS_SHA256_C
2091x509parse_crt:"3081b93081a3a0030201008204deadbeef300d06092a864886f70d01010b0500300c310a30080600130454657374301c170c303930313031303030303030170c303931323331323335393539300c310a30080600130454657374302a300d06092A864886F70D010101050003190030160210ffffffffffffffffffffffffffffffff0202ffffa321301f301d0603551d11041630148208666f6f2e7465737482086261722e74657374300d06092a864886f70d01010b0500030200ff":"cert. version \: 1\nserial number \: DE\:AD\:BE\:EF\nissuer name \: ??=Test\nsubject name \: ??=Test\nissued on \: 2009-01-01 00\:00\:00\nexpires on \: 2009-12-31 23\:59\:59\nsigned using \: RSA with SHA-256\nRSA key size \: 128 bits\nsubject alt name \:\n dNSName \: foo.test\n dNSName \: bar.test\n":0
2092
2093X509 CRT (TBS, valid v3Ext in v2 CRT, ALLOW_EXTENSIONS_NON_V3)
2094depends_on:MBEDTLS_X509_ALLOW_EXTENSIONS_NON_V3:MBEDTLS_RSA_C:MBEDTLS_SHA256_C
2095x509parse_crt:"3081b93081a3a0030201018204deadbeef300d06092a864886f70d01010b0500300c310a30080600130454657374301c170c303930313031303030303030170c303931323331323335393539300c310a30080600130454657374302a300d06092A864886F70D010101050003190030160210ffffffffffffffffffffffffffffffff0202ffffa321301f301d0603551d11041630148208666f6f2e7465737482086261722e74657374300d06092a864886f70d01010b0500030200ff":"cert. version \: 2\nserial number \: DE\:AD\:BE\:EF\nissuer name \: ??=Test\nsubject name \: ??=Test\nissued on \: 2009-01-01 00\:00\:00\nexpires on \: 2009-12-31 23\:59\:59\nsigned using \: RSA with SHA-256\nRSA key size \: 128 bits\nsubject alt name \:\n dNSName \: foo.test\n dNSName \: bar.test\n":0
2096
2097X509 CRT (TBS, valid v3Ext in v3 CRT)
Hanno Becker04b10c02019-03-13 15:19:28 +0000[diff] [blame]2098depends_on:MBEDTLS_RSA_C:MBEDTLS_SHA256_C
Gilles Peskine6710e152020-04-12 14:21:30 +0200[diff] [blame]2099x509parse_crt:"3081b93081a3a0030201028204deadbeef300d06092a864886f70d01010b0500300c310a30080600130454657374301c170c303930313031303030303030170c303931323331323335393539300c310a30080600130454657374302a300d06092A864886F70D010101050003190030160210ffffffffffffffffffffffffffffffff0202ffffa321301f301d0603551d11041630148208666f6f2e7465737482086261722e74657374300d06092a864886f70d01010b0500030200ff":"cert. version \: 3\nserial number \: DE\:AD\:BE\:EF\nissuer name \: ??=Test\nsubject name \: ??=Test\nissued on \: 2009-01-01 00\:00\:00\nexpires on \: 2009-12-31 23\:59\:59\nsigned using \: RSA with SHA-256\nRSA key size \: 128 bits\nsubject alt name \:\n dNSName \: foo.test\n dNSName \: bar.test\n":0
2100
2101X509 CRT ASN1 (TBS, valid v3Ext in v1 CRT)
2102depends_on:!MBEDTLS_X509_ALLOW_EXTENSIONS_NON_V3:MBEDTLS_RSA_C:MBEDTLS_SHA256_C
Hanno Becker04b10c02019-03-13 15:19:28 +0000[diff] [blame]2103x509parse_crt:"3081b93081a3a0030201008204deadbeef300d06092a864886f70d01010b0500300c310a30080600130454657374301c170c303930313031303030303030170c303931323331323335393539300c310a30080600130454657374302a300d06092A864886F70D010101050003190030160210ffffffffffffffffffffffffffffffff0202ffffa321301f301d0603551d11041630148208666f6f2e7465737482086261722e74657374300d06092a864886f70d01010b0500030200ff":"":MBEDTLS_ERR_X509_INVALID_FORMAT + MBEDTLS_ERR_ASN1_LENGTH_MISMATCH
2104
2105X509 CRT ASN1 (TBS, valid v3Ext in v2 CRT)
Gilles Peskine6710e152020-04-12 14:21:30 +0200[diff] [blame]2106depends_on:!MBEDTLS_X509_ALLOW_EXTENSIONS_NON_V3:MBEDTLS_RSA_C:MBEDTLS_SHA256_C
Hanno Becker04b10c02019-03-13 15:19:28 +0000[diff] [blame]2107x509parse_crt:"3081b93081a3a0030201018204deadbeef300d06092a864886f70d01010b0500300c310a30080600130454657374301c170c303930313031303030303030170c303931323331323335393539300c310a30080600130454657374302a300d06092A864886F70D010101050003190030160210ffffffffffffffffffffffffffffffff0202ffffa321301f301d0603551d11041630148208666f6f2e7465737482086261722e74657374300d06092a864886f70d01010b0500030200ff":"":MBEDTLS_ERR_X509_INVALID_FORMAT + MBEDTLS_ERR_ASN1_LENGTH_MISMATCH
2108
Hanno Becker2389d162019-02-14 12:52:47 +0000[diff] [blame]2109X509 CRT ASN1 (TBS, valid SubjectID, valid IssuerID, inv v3Ext, SubjectAltName repeated outside Extensions, inv SubjectAltNames tag)
Hanno Becker05987e32019-06-04 15:51:22 +0100[diff] [blame]2110depends_on:MBEDTLS_RSA_C:MBEDTLS_SHA1_C
2111x509parse_crt:"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":"":MBEDTLS_ERR_X509_INVALID_EXTENSIONS + MBEDTLS_ERR_ASN1_UNEXPECTED_TAG
2112
Hanno Becker2389d162019-02-14 12:52:47 +0000[diff] [blame]2113X509 CRT ASN1 (SignatureAlgorithm missing)
Paul Bakker37940d9f2009-07-10 22:38:58 +0000[diff] [blame]2114depends_on:MBEDTLS_RSA_C:MBEDTLS_SHA256_C
Hanno Becker5f88a772019-06-04 15:54:43 +0100[diff] [blame]2115x509parse_crt:"3081aa3081a7a0030201028204deadbeef300d06092a864886f70d01010b0500300c310a30080600130454657374301c170c303930313031303030303030170c303931323331323335393539300c310a30080600130454657374302a300d06092A864886F70D010101050003190030160210ffffffffffffffffffffffffffffffff0202ffffa100a200a321301f301d0603551d11041630148208666f6f2e7465737482086261722e74657374":"":MBEDTLS_ERR_X509_INVALID_ALG + MBEDTLS_ERR_ASN1_OUT_OF_DATA
Paul Bakker37940d9f2009-07-10 22:38:58 +0000[diff] [blame]2116
Hanno Becker2389d162019-02-14 12:52:47 +0000[diff] [blame]2117X509 CRT ASN1 (inv SignatureAlgorithm, bad tag)
Paul Bakker37940d9f2009-07-10 22:38:58 +0000[diff] [blame]2118depends_on:MBEDTLS_RSA_C:MBEDTLS_SHA256_C
Hanno Becker0f5acc12019-06-04 16:13:23 +0100[diff] [blame]2119x509parse_crt:"3081ac3081a7a0030201028204deadbeef300d06092a864886f70d01010b0500300c310a30080600130454657374301c170c303930313031303030303030170c303931323331323335393539300c310a30080600130454657374302a300d06092A864886F70D010101050003190030160210ffffffffffffffffffffffffffffffff0202ffffa100a200a321301f301d0603551d11041630148208666f6f2e7465737482086261722e746573740500":"":MBEDTLS_ERR_X509_INVALID_ALG + MBEDTLS_ERR_ASN1_UNEXPECTED_TAG
Paul Bakker37940d9f2009-07-10 22:38:58 +0000[diff] [blame]2120
Hanno Becker2389d162019-02-14 12:52:47 +0000[diff] [blame]2121X509 CRT ASN1 (inv SignatureAlgorithm, length missing)
Paul Bakker37940d9f2009-07-10 22:38:58 +0000[diff] [blame]2122depends_on:MBEDTLS_RSA_C:MBEDTLS_SHA256_C
Hanno Becker5f88a772019-06-04 15:54:43 +0100[diff] [blame]2123x509parse_crt:"3081ab3081a7a0030201028204deadbeef300d06092a864886f70d01010b0500300c310a30080600130454657374301c170c303930313031303030303030170c303931323331323335393539300c310a30080600130454657374302a300d06092A864886F70D010101050003190030160210ffffffffffffffffffffffffffffffff0202ffffa100a200a321301f301d0603551d11041630148208666f6f2e7465737482086261722e7465737430":"":MBEDTLS_ERR_X509_INVALID_ALG + MBEDTLS_ERR_ASN1_OUT_OF_DATA
Paul Bakker37940d9f2009-07-10 22:38:58 +0000[diff] [blame]2124
Hanno Becker2389d162019-02-14 12:52:47 +0000[diff] [blame]2125X509 CRT ASN1 (inv SignatureAlgorithm, inv length encoding)
Paul Bakker37940d9f2009-07-10 22:38:58 +0000[diff] [blame]2126depends_on:MBEDTLS_RSA_C:MBEDTLS_SHA256_C
Hanno Becker5f88a772019-06-04 15:54:43 +0100[diff] [blame]2127x509parse_crt:"3081ac3081a7a0030201028204deadbeef300d06092a864886f70d01010b0500300c310a30080600130454657374301c170c303930313031303030303030170c303931323331323335393539300c310a30080600130454657374302a300d06092A864886F70D010101050003190030160210ffffffffffffffffffffffffffffffff0202ffffa100a200a321301f301d0603551d11041630148208666f6f2e7465737482086261722e746573743085":"":MBEDTLS_ERR_X509_INVALID_ALG + MBEDTLS_ERR_ASN1_INVALID_LENGTH
Paul Bakker37940d9f2009-07-10 22:38:58 +0000[diff] [blame]2128
Hanno Becker2389d162019-02-14 12:52:47 +0000[diff] [blame]2129X509 CRT ASN1 (inv SignatureAlgorithm, length out of bounds)
Hanno Becker01346c62019-02-12 13:32:06 +0000[diff] [blame]2130depends_on:MBEDTLS_RSA_C:MBEDTLS_SHA256_C
Hanno Becker5f88a772019-06-04 15:54:43 +0100[diff] [blame]2131x509parse_crt:"3081ac3081a7a0030201028204deadbeef300d06092a864886f70d01010b0500300c310a30080600130454657374301c170c303930313031303030303030170c303931323331323335393539300c310a30080600130454657374302a300d06092A864886F70D010101050003190030160210ffffffffffffffffffffffffffffffff0202ffffa100a200a321301f301d0603551d11041630148208666f6f2e7465737482086261722e746573743001":"":MBEDTLS_ERR_X509_INVALID_ALG + MBEDTLS_ERR_ASN1_OUT_OF_DATA
2132
Hanno Becker2389d162019-02-14 12:52:47 +0000[diff] [blame]2133X509 CRT ASN1 (inv SignatureAlgorithm, not the same as SignatureAlgorithm in TBS)
Hanno Becker5f88a772019-06-04 15:54:43 +0100[diff] [blame]2134depends_on:MBEDTLS_RSA_C:MBEDTLS_SHA256_C
2135x509parse_crt:"3081bd3081a7a0030201028204deadbeef300d06092a864886f70d01010b0500300c310a30080600130454657374301c170c303930313031303030303030170c303931323331323335393539300c310a30080600130454657374302a300d06092A864886F70D010101050003190030160210ffffffffffffffffffffffffffffffff0202ffffa100a200a321301f301d0603551d11041630148208666f6f2e7465737482086261722e74657374300d06092a864886f70d01010a0500030200ff":"":MBEDTLS_ERR_X509_SIG_MISMATCH
Paul Bakker37940d9f2009-07-10 22:38:58 +0000[diff] [blame]2136
Hanno Becker2389d162019-02-14 12:52:47 +0000[diff] [blame]2137X509 CRT ASN1 (Signature missing)
Hanno Becker44199b62019-02-14 12:25:03 +0000[diff] [blame]2138depends_on:MBEDTLS_RSA_C:MBEDTLS_SHA256_C
2139x509parse_crt:"3081b93081a7a0030201028204deadbeef300d06092a864886f70d01010b0500300c310a30080600130454657374301c170c303930313031303030303030170c303931323331323335393539300c310a30080600130454657374302a300d06092A864886F70D010101050003190030160210ffffffffffffffffffffffffffffffff0202ffffa100a200a321301f301d0603551d11041630148208666f6f2e7465737482086261722e74657374300d06092a864886f70d01010b0500":"":MBEDTLS_ERR_X509_INVALID_SIGNATURE + MBEDTLS_ERR_ASN1_OUT_OF_DATA
2140
Hanno Becker2389d162019-02-14 12:52:47 +0000[diff] [blame]2141X509 CRT ASN1 (inv Signature, bad tag)
Hanno Becker44199b62019-02-14 12:25:03 +0000[diff] [blame]2142depends_on:MBEDTLS_RSA_C:MBEDTLS_SHA256_C
Hanno Becker0f5acc12019-06-04 16:13:23 +0100[diff] [blame]2143x509parse_crt:"3081bb3081a7a0030201028204deadbeef300d06092a864886f70d01010b0500300c310a30080600130454657374301c170c303930313031303030303030170c303931323331323335393539300c310a30080600130454657374302a300d06092A864886F70D010101050003190030160210ffffffffffffffffffffffffffffffff0202ffffa100a200a321301f301d0603551d11041630148208666f6f2e7465737482086261722e74657374300d06092a864886f70d01010b05000500":"":MBEDTLS_ERR_X509_INVALID_SIGNATURE + MBEDTLS_ERR_ASN1_UNEXPECTED_TAG
Hanno Becker44199b62019-02-14 12:25:03 +0000[diff] [blame]2144
Hanno Becker2389d162019-02-14 12:52:47 +0000[diff] [blame]2145X509 CRT ASN1 (inv Signature, length missing)
Hanno Becker44199b62019-02-14 12:25:03 +0000[diff] [blame]2146depends_on:MBEDTLS_RSA_C:MBEDTLS_SHA256_C
2147x509parse_crt:"3081ba3081a7a0030201028204deadbeef300d06092a864886f70d01010b0500300c310a30080600130454657374301c170c303930313031303030303030170c303931323331323335393539300c310a30080600130454657374302a300d06092A864886F70D010101050003190030160210ffffffffffffffffffffffffffffffff0202ffffa100a200a321301f301d0603551d11041630148208666f6f2e7465737482086261722e74657374300d06092a864886f70d01010b050003":"":MBEDTLS_ERR_X509_INVALID_SIGNATURE + MBEDTLS_ERR_ASN1_OUT_OF_DATA
2148
Hanno Becker2389d162019-02-14 12:52:47 +0000[diff] [blame]2149X509 CRT ASN1 (inv Signature, inv length encoding)
Hanno Becker44199b62019-02-14 12:25:03 +0000[diff] [blame]2150depends_on:MBEDTLS_RSA_C:MBEDTLS_SHA256_C
2151x509parse_crt:"3081bb3081a7a0030201028204deadbeef300d06092a864886f70d01010b0500300c310a30080600130454657374301c170c303930313031303030303030170c303931323331323335393539300c310a30080600130454657374302a300d06092A864886F70D010101050003190030160210ffffffffffffffffffffffffffffffff0202ffffa100a200a321301f301d0603551d11041630148208666f6f2e7465737482086261722e74657374300d06092a864886f70d01010b05000385":"":MBEDTLS_ERR_X509_INVALID_SIGNATURE + MBEDTLS_ERR_ASN1_INVALID_LENGTH
2152
Hanno Becker2389d162019-02-14 12:52:47 +0000[diff] [blame]2153X509 CRT ASN1 (inv Signature, length out of bounds)
Hanno Becker44199b62019-02-14 12:25:03 +0000[diff] [blame]2154depends_on:MBEDTLS_RSA_C:MBEDTLS_SHA256_C
2155x509parse_crt:"3081bb3081a7a0030201028204deadbeef300d06092a864886f70d01010b0500300c310a30080600130454657374301c170c303930313031303030303030170c303931323331323335393539300c310a30080600130454657374302a300d06092A864886F70D010101050003190030160210ffffffffffffffffffffffffffffffff0202ffffa100a200a321301f301d0603551d11041630148208666f6f2e7465737482086261722e74657374300d06092a864886f70d01010b05000301":"":MBEDTLS_ERR_X509_INVALID_SIGNATURE + MBEDTLS_ERR_ASN1_OUT_OF_DATA
2156
Gilles Peskine2dedcc52019-09-11 17:23:07 +0200[diff] [blame]2157X509 CRT ASN1 (inv Signature, inv data #1)
Hanno Becker44199b62019-02-14 12:25:03 +0000[diff] [blame]2158depends_on:MBEDTLS_RSA_C:MBEDTLS_SHA256_C
Gilles Peskine2dedcc52019-09-11 17:23:07 +0200[diff] [blame]2159# signature = bit string with invalid encoding (missing number of unused bits)
Hanno Becker44199b62019-02-14 12:25:03 +0000[diff] [blame]2160x509parse_crt:"3081bb3081a7a0030201028204deadbeef300d06092a864886f70d01010b0500300c310a30080600130454657374301c170c303930313031303030303030170c303931323331323335393539300c310a30080600130454657374302a300d06092A864886F70D010101050003190030160210ffffffffffffffffffffffffffffffff0202ffffa100a200a321301f301d0603551d11041630148208666f6f2e7465737482086261722e74657374300d06092a864886f70d01010b05000300":"":MBEDTLS_ERR_X509_INVALID_SIGNATURE + MBEDTLS_ERR_ASN1_INVALID_DATA
2161
Gilles Peskine2dedcc52019-09-11 17:23:07 +0200[diff] [blame]2162X509 CRT ASN1 (inv Signature, inv data #2)
Hanno Becker44199b62019-02-14 12:25:03 +0000[diff] [blame]2163depends_on:MBEDTLS_RSA_C:MBEDTLS_SHA256_C
Gilles Peskine2dedcc52019-09-11 17:23:07 +0200[diff] [blame]2164# signature = bit string with invalid encoding (number of unused bits too large)
2165x509parse_crt:"3081bc3081a7a0030201028204deadbeef300d06092a864886f70d01010b0500300c310a30080600130454657374301c170c303930313031303030303030170c303931323331323335393539300c310a30080600130454657374302a300d06092A864886F70D010101050003190030160210ffffffffffffffffffffffffffffffff0202ffffa100a200a321301f301d0603551d11041630148208666f6f2e7465737482086261722e74657374300d06092a864886f70d01010b0500030108":"":MBEDTLS_ERR_X509_INVALID_SIGNATURE + MBEDTLS_ERR_ASN1_INVALID_DATA
2166
Gilles Peskinef70d3eb2019-10-04 19:24:06 +0200[diff] [blame]2167X509 CRT ASN1 (empty Signature)
2168depends_on:MBEDTLS_RSA_C:MBEDTLS_SHA256_C
2169# signature = empty bit string in DER encoding
2170x509parse_crt:"3081bc3081a7a0030201028204deadbeef300d06092a864886f70d01010b0500300c310a30080600130454657374301c170c303930313031303030303030170c303931323331323335393539300c310a30080600130454657374302a300d06092A864886F70D010101050003190030160210ffffffffffffffffffffffffffffffff0202ffffa100a200a321301f301d0603551d11041630148208666f6f2e7465737482086261722e74657374300d06092a864886f70d01010b0500030100":"cert. version \: 3\nserial number \: DE\:AD\:BE\:EF\nissuer name \: ??=Test\nsubject name \: ??=Test\nissued on \: 2009-01-01 00\:00\:00\nexpires on \: 2009-12-31 23\:59\:59\nsigned using \: RSA with SHA-256\nRSA key size \: 128 bits\nsubject alt name \:\n dNSName \: foo.test\n dNSName \: bar.test\n":0
Gilles Peskine2dedcc52019-09-11 17:23:07 +0200[diff] [blame]2171
2172X509 CRT ASN1 (dummy 24-bit Signature)
2173depends_on:MBEDTLS_RSA_C:MBEDTLS_SHA256_C
2174# signature = bit string "011001100110111101101111"
2175x509parse_crt:"3081bf3081a7a0030201028204deadbeef300d06092a864886f70d01010b0500300c310a30080600130454657374301c170c303930313031303030303030170c303931323331323335393539300c310a30080600130454657374302a300d06092A864886F70D010101050003190030160210ffffffffffffffffffffffffffffffff0202ffffa100a200a321301f301d0603551d11041630148208666f6f2e7465737482086261722e74657374300d06092a864886f70d01010b0500030400666f6f":"cert. version \: 3\nserial number \: DE\:AD\:BE\:EF\nissuer name \: ??=Test\nsubject name \: ??=Test\nissued on \: 2009-01-01 00\:00\:00\nexpires on \: 2009-12-31 23\:59\:59\nsigned using \: RSA with SHA-256\nRSA key size \: 128 bits\nsubject alt name \:\n dNSName \: foo.test\n dNSName \: bar.test\n":0
2176
2177# The ASN.1 module rejects non-octet-aligned bit strings.
2178X509 CRT ASN1 (inv Signature: not octet-aligned)
2179depends_on:MBEDTLS_RSA_C:MBEDTLS_SHA256_C
2180# signature = bit string "01100110011011110110111"
2181x509parse_crt:"3081bf3081a7a0030201028204deadbeef300d06092a864886f70d01010b0500300c310a30080600130454657374301c170c303930313031303030303030170c303931323331323335393539300c310a30080600130454657374302a300d06092A864886F70D010101050003190030160210ffffffffffffffffffffffffffffffff0202ffffa100a200a321301f301d0603551d11041630148208666f6f2e7465737482086261722e74657374300d06092a864886f70d01010b0500030401666f6e":"":MBEDTLS_ERR_X509_INVALID_SIGNATURE + MBEDTLS_ERR_ASN1_INVALID_DATA
Hanno Becker44199b62019-02-14 12:25:03 +0000[diff] [blame]2182
Hanno Becker2389d162019-02-14 12:52:47 +0000[diff] [blame]2183X509 CRT ASN1 (inv Signature, length mismatch)
Hanno Becker44199b62019-02-14 12:25:03 +0000[diff] [blame]2184depends_on:MBEDTLS_RSA_C:MBEDTLS_SHA256_C
2185x509parse_crt:"3081be3081a7a0030201028204deadbeef300d06092a864886f70d01010b0500300c310a30080600130454657374301c170c303930313031303030303030170c303931323331323335393539300c310a30080600130454657374302a300d06092A864886F70D010101050003190030160210ffffffffffffffffffffffffffffffff0202ffffa100a200a321301f301d0603551d11041630148208666f6f2e7465737482086261722e74657374300d06092a864886f70d01010b0500030200ff00":"":MBEDTLS_ERR_X509_INVALID_FORMAT + MBEDTLS_ERR_ASN1_LENGTH_MISMATCH
2186
Hanno Becker2389d162019-02-14 12:52:47 +0000[diff] [blame]2187X509 CRT ASN1 (well-formed)
Hanno Becker01346c62019-02-12 13:32:06 +0000[diff] [blame]2188depends_on:MBEDTLS_RSA_C:MBEDTLS_SHA256_C
Hanno Becker32b48ea2019-06-03 09:48:09 +0100[diff] [blame]2189x509parse_crt:"308196308180a0030201008204deadbeef300d06092a864886f70d01010b0500300c310a30080600130454657374301c170c303930313031303030303030170c303931323331323335393539300c310a30080600130454657374302a300d06092a864886f70d010101050003190030160210ffffffffffffffffffffffffffffffff0202ffff300d06092a864886f70d01010b0500030200ff":"cert. version \: 1\nserial number \: DE\:AD\:BE\:EF\nissuer name \: ?\?=Test\nsubject name \: ?\?=Test\nissued on \: 2009-01-01 00\:00\:00\nexpires on \: 2009-12-31 23\:59\:59\nsigned using \: RSA with SHA-256\nRSA key size \: 128 bits\n":0
Paul Bakker37940d9f2009-07-10 22:38:58 +0000[diff] [blame]2190
Hanno Becker8671e812019-03-14 08:22:51 +0000[diff] [blame]2191X509 CRT ASN1 (GeneralizedTime in notBefore, UTCTime in notAfter)
Hanno Becker01346c62019-02-12 13:32:06 +0000[diff] [blame]2192depends_on:MBEDTLS_RSA_C:MBEDTLS_SHA256_C
Hanno Becker32b48ea2019-06-03 09:48:09 +0100[diff] [blame]2193x509parse_crt:"308198308182a0030201008204deadbeef300d06092a864886f70d01010b0500300c310a30080600130454657374301e180e3230313030313031303030303030170c303931323331323335393539300c310a30080600130454657374302a300d06092a864886f70d010101050003190030160210ffffffffffffffffffffffffffffffff0202ffff300d06092a864886f70d01010b0500030200ff":"cert. version \: 1\nserial number \: DE\:AD\:BE\:EF\nissuer name \: ?\?=Test\nsubject name \: ?\?=Test\nissued on \: 2010-01-01 00\:00\:00\nexpires on \: 2009-12-31 23\:59\:59\nsigned using \: RSA with SHA-256\nRSA key size \: 128 bits\n":0
Paul Bakker91200182010-02-18 21:26:15 +0000[diff] [blame]2194
Hanno Becker7717c412019-03-14 08:28:42 +0000[diff] [blame]2195X509 CRT ASN1 (UTCTime in notBefore, GeneralizedTime in notAfter)
2196depends_on:MBEDTLS_RSA_C:MBEDTLS_SHA256_C
2197x509parse_crt:"308198308182a0030201008204deadbeef300d06092a864886f70d01010b0500300c310a30080600130454657374301e170c303931323331323335393539180e3230313030313031303030303030300c310a30080600130454657374302a300d06092A864886F70D010101050003190030160210ffffffffffffffffffffffffffffffff0202ffff300d06092a864886f70d01010b0500030200ff":"cert. version \: 1\nserial number \: DE\:AD\:BE\:EF\nissuer name \: ?\?=Test\nsubject name \: ?\?=Test\nissued on \: 2009-12-31 23\:59\:59\nexpires on \: 2010-01-01 00\:00\:00\nsigned using \: RSA with SHA-256\nRSA key size \: 128 bits\n":0
2198
Hanno Becker2389d162019-02-14 12:52:47 +0000[diff] [blame]2199X509 CRT ASN1 (Name with X520 CN)
Hanno Becker01346c62019-02-12 13:32:06 +0000[diff] [blame]2200depends_on:MBEDTLS_RSA_C:MBEDTLS_SHA256_C
Hanno Becker32b48ea2019-06-03 09:48:09 +0100[diff] [blame]2201x509parse_crt:"308199308183a0030201008204deadbeef300d06092a864886f70d01010b0500300f310d300b0603550403130454657374301c170c303930313031303030303030170c303931323331323335393539300c310a30080600130454657374302a300d06092a864886f70d010101050003190030160210ffffffffffffffffffffffffffffffff0202ffff300d06092a864886f70d01010b0500030200ff":"cert. version \: 1\nserial number \: DE\:AD\:BE\:EF\nissuer name \: CN=Test\nsubject name \: ?\?=Test\nissued on \: 2009-01-01 00\:00\:00\nexpires on \: 2009-12-31 23\:59\:59\nsigned using \: RSA with SHA-256\nRSA key size \: 128 bits\n":0
Paul Bakkerc26a1892009-07-19 20:30:14 +0000[diff] [blame]2202
Hanno Becker2389d162019-02-14 12:52:47 +0000[diff] [blame]2203X509 CRT ASN1 (Name with X520 C)
Hanno Becker01346c62019-02-12 13:32:06 +0000[diff] [blame]2204depends_on:MBEDTLS_RSA_C:MBEDTLS_SHA256_C
Hanno Becker32b48ea2019-06-03 09:48:09 +0100[diff] [blame]2205x509parse_crt:"308199308183a0030201008204deadbeef300d06092a864886f70d01010b0500300f310d300b0603550406130454657374301c170c303930313031303030303030170c303931323331323335393539300c310a30080600130454657374302a300d06092a864886f70d010101050003190030160210ffffffffffffffffffffffffffffffff0202ffff300d06092a864886f70d01010b0500030200ff":"cert. version \: 1\nserial number \: DE\:AD\:BE\:EF\nissuer name \: C=Test\nsubject name \: ?\?=Test\nissued on \: 2009-01-01 00\:00\:00\nexpires on \: 2009-12-31 23\:59\:59\nsigned using \: RSA with SHA-256\nRSA key size \: 128 bits\n":0
Paul Bakkerc26a1892009-07-19 20:30:14 +0000[diff] [blame]2206
Hanno Becker2389d162019-02-14 12:52:47 +0000[diff] [blame]2207X509 CRT ASN1 (Name with X520 L)
Hanno Becker01346c62019-02-12 13:32:06 +0000[diff] [blame]2208depends_on:MBEDTLS_RSA_C:MBEDTLS_SHA256_C
Hanno Becker32b48ea2019-06-03 09:48:09 +0100[diff] [blame]2209x509parse_crt:"308199308183a0030201008204deadbeef300d06092a864886f70d01010b0500300f310d300b0603550407130454657374301c170c303930313031303030303030170c303931323331323335393539300c310a30080600130454657374302a300d06092a864886f70d010101050003190030160210ffffffffffffffffffffffffffffffff0202ffff300d06092a864886f70d01010b0500030200ff":"cert. version \: 1\nserial number \: DE\:AD\:BE\:EF\nissuer name \: L=Test\nsubject name \: ?\?=Test\nissued on \: 2009-01-01 00\:00\:00\nexpires on \: 2009-12-31 23\:59\:59\nsigned using \: RSA with SHA-256\nRSA key size \: 128 bits\n":0
Paul Bakkerc26a1892009-07-19 20:30:14 +0000[diff] [blame]2210
Hanno Becker2389d162019-02-14 12:52:47 +0000[diff] [blame]2211X509 CRT ASN1 (Name with X520 ST)
Hanno Becker01346c62019-02-12 13:32:06 +0000[diff] [blame]2212depends_on:MBEDTLS_RSA_C:MBEDTLS_SHA256_C
Hanno Becker32b48ea2019-06-03 09:48:09 +0100[diff] [blame]2213x509parse_crt:"308199308183a0030201008204deadbeef300d06092a864886f70d01010b0500300f310d300b0603550408130454657374301c170c303930313031303030303030170c303931323331323335393539300c310a30080600130454657374302a300d06092a864886f70d010101050003190030160210ffffffffffffffffffffffffffffffff0202ffff300d06092a864886f70d01010b0500030200ff":"cert. version \: 1\nserial number \: DE\:AD\:BE\:EF\nissuer name \: ST=Test\nsubject name \: ?\?=Test\nissued on \: 2009-01-01 00\:00\:00\nexpires on \: 2009-12-31 23\:59\:59\nsigned using \: RSA with SHA-256\nRSA key size \: 128 bits\n":0
Paul Bakkerc26a1892009-07-19 20:30:14 +0000[diff] [blame]2214
Hanno Becker2389d162019-02-14 12:52:47 +0000[diff] [blame]2215X509 CRT ASN1 (Name with X520 O)
Hanno Becker01346c62019-02-12 13:32:06 +0000[diff] [blame]2216depends_on:MBEDTLS_RSA_C:MBEDTLS_SHA256_C
Hanno Becker32b48ea2019-06-03 09:48:09 +0100[diff] [blame]2217x509parse_crt:"308199308183a0030201008204deadbeef300d06092a864886f70d01010b0500300f310d300b060355040a130454657374301c170c303930313031303030303030170c303931323331323335393539300c310a30080600130454657374302a300d06092a864886f70d010101050003190030160210ffffffffffffffffffffffffffffffff0202ffff300d06092a864886f70d01010b0500030200ff":"cert. version \: 1\nserial number \: DE\:AD\:BE\:EF\nissuer name \: O=Test\nsubject name \: ?\?=Test\nissued on \: 2009-01-01 00\:00\:00\nexpires on \: 2009-12-31 23\:59\:59\nsigned using \: RSA with SHA-256\nRSA key size \: 128 bits\n":0
Paul Bakkerc26a1892009-07-19 20:30:14 +0000[diff] [blame]2218
Hanno Becker2389d162019-02-14 12:52:47 +0000[diff] [blame]2219X509 CRT ASN1 (Name with X520 OU)
Hanno Becker01346c62019-02-12 13:32:06 +0000[diff] [blame]2220depends_on:MBEDTLS_RSA_C:MBEDTLS_SHA256_C
Hanno Becker32b48ea2019-06-03 09:48:09 +0100[diff] [blame]2221x509parse_crt:"308199308183a0030201008204deadbeef300d06092a864886f70d01010b0500300f310d300b060355040b130454657374301c170c303930313031303030303030170c303931323331323335393539300c310a30080600130454657374302a300d06092a864886f70d010101050003190030160210ffffffffffffffffffffffffffffffff0202ffff300d06092a864886f70d01010b0500030200ff":"cert. version \: 1\nserial number \: DE\:AD\:BE\:EF\nissuer name \: OU=Test\nsubject name \: ?\?=Test\nissued on \: 2009-01-01 00\:00\:00\nexpires on \: 2009-12-31 23\:59\:59\nsigned using \: RSA with SHA-256\nRSA key size \: 128 bits\n":0
Paul Bakkerc26a1892009-07-19 20:30:14 +0000[diff] [blame]2222
Hanno Becker2389d162019-02-14 12:52:47 +0000[diff] [blame]2223X509 CRT ASN1 (Name with unknown X520 part)
Hanno Becker01346c62019-02-12 13:32:06 +0000[diff] [blame]2224depends_on:MBEDTLS_RSA_C:MBEDTLS_SHA256_C
Hanno Becker32b48ea2019-06-03 09:48:09 +0100[diff] [blame]2225x509parse_crt:"308199308183a0030201008204deadbeef300d06092a864886f70d01010b0500300f310d300b06035504de130454657374301c170c303930313031303030303030170c303931323331323335393539300c310a30080600130454657374302a300d06092a864886f70d010101050003190030160210ffffffffffffffffffffffffffffffff0202ffff300d06092a864886f70d01010b0500030200ff":"cert. version \: 1\nserial number \: DE\:AD\:BE\:EF\nissuer name \: ?\?=Test\nsubject name \: ?\?=Test\nissued on \: 2009-01-01 00\:00\:00\nexpires on \: 2009-12-31 23\:59\:59\nsigned using \: RSA with SHA-256\nRSA key size \: 128 bits\n":0
Paul Bakkerc26a1892009-07-19 20:30:14 +0000[diff] [blame]2226
Hanno Becker2389d162019-02-14 12:52:47 +0000[diff] [blame]2227X509 CRT ASN1 (Name with composite RDN)
palaviva07ecda2016-08-07 11:15:29 +0300[diff] [blame]2228depends_on:MBEDTLS_RSA_C:MBEDTLS_SHA1_C
Manuel Pégourié-Gonnard555fbf82015-02-04 17:11:55 +0000[diff] [blame]2229x509parse_crt:"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":"cert. version \: 3\nserial number \: 4C\:20\:E3\:BD\nissuer name \: C=US, ST=CA, O=Internet Widgits Pty Ltd, CN=Frankencert CA\nsubject name \: C=US, ST=Washington, ??=US, ??=Delaware, O=Authorize.Net LLC, ??=Private Organization, serialNumber=4369191 + CN=www.authorize.net, L=San Francisco\nissued on \: 2013-08-02 15\:14\:37\nexpires on \: 2015-08-17 05\:54\:31\nsigned using \: RSA with SHA1\nRSA key size \: 1024 bits\n":0
2230
Hanno Becker2389d162019-02-14 12:52:47 +0000[diff] [blame]2231X509 CRT ASN1 (Name with PKCS9 email)
Hanno Becker01346c62019-02-12 13:32:06 +0000[diff] [blame]2232depends_on:MBEDTLS_RSA_C:MBEDTLS_SHA256_C
Hanno Becker32b48ea2019-06-03 09:48:09 +0100[diff] [blame]2233x509parse_crt:"30819f308189a0030201008204deadbeef300d06092a864886f70d01010b050030153113301106092a864886f70d010901130454657374301c170c303930313031303030303030170c303931323331323335393539300c310a30080600130454657374302a300d06092a864886f70d010101050003190030160210ffffffffffffffffffffffffffffffff0202ffff300d06092a864886f70d01010b0500030200ff":"cert. version \: 1\nserial number \: DE\:AD\:BE\:EF\nissuer name \: emailAddress=Test\nsubject name \: ?\?=Test\nissued on \: 2009-01-01 00\:00\:00\nexpires on \: 2009-12-31 23\:59\:59\nsigned using \: RSA with SHA-256\nRSA key size \: 128 bits\n":0
Paul Bakkerc26a1892009-07-19 20:30:14 +0000[diff] [blame]2234
Hanno Becker2389d162019-02-14 12:52:47 +0000[diff] [blame]2235X509 CRT ASN1 (Name with unknown PKCS9 part)
Hanno Becker01346c62019-02-12 13:32:06 +0000[diff] [blame]2236depends_on:MBEDTLS_RSA_C:MBEDTLS_SHA256_C
Hanno Becker32b48ea2019-06-03 09:48:09 +0100[diff] [blame]2237x509parse_crt:"30819f308189a0030201008204deadbeef300d06092a864886f70d01010b050030153113301106092a864886f70d0109ab130454657374301c170c303930313031303030303030170c303931323331323335393539300c310a30080600130454657374302a300d06092a864886f70d010101050003190030160210ffffffffffffffffffffffffffffffff0202ffff300d06092a864886f70d01010b0500030200ff":"cert. version \: 1\nserial number \: DE\:AD\:BE\:EF\nissuer name \: ?\?=Test\nsubject name \: ?\?=Test\nissued on \: 2009-01-01 00\:00\:00\nexpires on \: 2009-12-31 23\:59\:59\nsigned using \: RSA with SHA-256\nRSA key size \: 128 bits\n":0
Paul Bakkerc26a1892009-07-19 20:30:14 +0000[diff] [blame]2238
Hanno Becker2389d162019-02-14 12:52:47 +0000[diff] [blame]2239X509 CRT ASN1 (ECDSA signature, RSA key)
palavivf180df92016-08-07 11:56:02 +0300[diff] [blame]2240depends_on:MBEDTLS_RSA_C:MBEDTLS_SHA1_C:MBEDTLS_ECDSA_C
Hanno Becker32b48ea2019-06-03 09:48:09 +0100[diff] [blame]2241x509parse_crt:"3081e630819e020103300906072a8648ce3d0401300f310d300b0603550403130454657374301e170d3133303731303039343631385a170d3233303730383039343631385a300f310d300b0603550403130454657374304c300d06092a864886f70d0101010500033b003038023100e8f546061d3b49bc2f6b7524b7ea4d73a8d5293ee8c64d9407b70b5d16baebc32b8205591eab4e1eb57e9241883701250203010001300906072a8648ce3d0401033800303502186e18209afbed14a0d9a796efcad68891e3ccd5f75815c833021900e92b4fd460b1994693243b9ffad54729de865381bda41d25":"cert. version \: 1\nserial number \: 03\nissuer name \: CN=Test\nsubject name \: CN=Test\nissued on \: 2013-07-10 09\:46\:18\nexpires on \: 2023-07-08 09\:46\:18\nsigned using \: ECDSA with SHA1\nRSA key size \: 384 bits\n":0
Manuel Pégourié-Gonnard72ef0b72013-07-10 12:20:54 +0200[diff] [blame]2242
Hanno Becker2389d162019-02-14 12:52:47 +0000[diff] [blame]2243X509 CRT ASN1 (ECDSA signature, EC key)
Manuel Pégourié-Gonnard43be6cd2017-06-20 09:53:42 +0200[diff] [blame]2244depends_on:MBEDTLS_ECDSA_C:MBEDTLS_ECP_DP_SECP192R1_ENABLED:MBEDTLS_SHA1_C
Hanno Becker32b48ea2019-06-03 09:48:09 +0100[diff] [blame]2245x509parse_crt:"3081eb3081a3020900f41534662ec7e912300906072a8648ce3d0401300f310d300b0603550403130454657374301e170d3133303731303039343031395a170d3233303730383039343031395a300f310d300b06035504031304546573743049301306072a8648ce3d020106082a8648ce3d030101033200042137969fabd4e370624a0e1a33e379cab950cce00ef8c3c3e2adaeb7271c8f07659d65d3d777dcf21614363ae4b6e617300906072a8648ce3d04010338003035021858cc0f957946fe6a303d92885a456aa74c743c7b708cbd37021900fe293cac21af352d16b82eb8ea54e9410b3abaadd9f05dd6":"cert. version \: 1\nserial number \: F4\:15\:34\:66\:2E\:C7\:E9\:12\nissuer name \: CN=Test\nsubject name \: CN=Test\nissued on \: 2013-07-10 09\:40\:19\nexpires on \: 2023-07-08 09\:40\:19\nsigned using \: ECDSA with SHA1\nEC key size \: 192 bits\n":0
Manuel Pégourié-Gonnarda3c86c32013-07-10 16:54:29 +0200[diff] [blame]2246
Hanno Becker2389d162019-02-14 12:52:47 +0000[diff] [blame]2247X509 CRT ASN1 (RSA signature, EC key)
Manuel Pégourié-Gonnard43be6cd2017-06-20 09:53:42 +0200[diff] [blame]2248depends_on:MBEDTLS_ECDSA_C:MBEDTLS_ECP_DP_SECP192R1_ENABLED:MBEDTLS_SHA1_C:MBEDTLS_RSA_C
Hanno Becker32b48ea2019-06-03 09:48:09 +0100[diff] [blame]2249x509parse_crt:"3081e430819f020104300d06092a864886f70d0101050500300f310d300b0603550403130454657374301e170d3133303731303135303233375a170d3233303730383135303233375a300f310d300b06035504031304546573743049301306072a8648ce3d020106082a8648ce3d03010103320004e962551a325b21b50cf6b990e33d4318fd16677130726357a196e3efe7107bcb6bdc6d9db2a4df7c964acfe81798433d300d06092a864886f70d01010505000331001a6c18cd1e457474b2d3912743f44b571341a7859a0122774a8e19a671680878936949f904c9255bdd6fffdb33a7e6d8":"cert. version \: 1\nserial number \: 04\nissuer name \: CN=Test\nsubject name \: CN=Test\nissued on \: 2013-07-10 15\:02\:37\nexpires on \: 2023-07-08 15\:02\:37\nsigned using \: RSA with SHA1\nEC key size \: 192 bits\n":0
Manuel Pégourié-Gonnarda3c86c32013-07-10 16:54:29 +0200[diff] [blame]2250
Nicola Di Lieto17bb60c2020-05-28 23:04:15 +0200[diff] [blame]2251X509 CRT ASN1 (Unsupported critical extension)
2252depends_on:MBEDTLS_RSA_C:MBEDTLS_SHA256_C:!MBEDTLS_X509_ALLOW_UNSUPPORTED_CRITICAL_EXTENSION
2253x509parse_crt:"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":"":MBEDTLS_ERR_X509_INVALID_EXTENSIONS + MBEDTLS_ERR_ASN1_UNEXPECTED_TAG
2254
Nicola Di Lietoe58b4632020-05-29 22:58:25 +0200[diff] [blame]2255X509 CRT ASN1 (Unsupported critical extension recognized by callback)
Nicola Di Lieto17bb60c2020-05-28 23:04:15 +0200[diff] [blame]2256depends_on:MBEDTLS_RSA_C:MBEDTLS_SHA256_C
2257x509parse_crt_cb:"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":"cert. version \: 3\nserial number \: 4D\:3E\:BB\:B8\:A8\:70\:F9\:C7\:8C\:55\:A8\:A7\:E1\:2F\:D5\:16\nissuer name \: CN=dummy\nsubject name \: CN=dummy\nissued on \: 2020-04-28 17\:42\:43\nexpires on \: 2020-06-27 17\:42\:43\nsigned using \: RSA with SHA-256\nRSA key size \: 2048 bits\nbasic constraints \: CA=true\nsubject alt name \:\n dNSName \: dummy\nkey usage \: Digital Signature, Key Cert Sign\n":0
2258
Nicola Di Lietoe58b4632020-05-29 22:58:25 +0200[diff] [blame]2259X509 CRT ASN1 (Unsupported critical extension not recognized by callback)
2260depends_on:MBEDTLS_RSA_C:MBEDTLS_SHA256_C
2261x509parse_crt_cb:"308203353082021da00302010202104d3ebbb8a870f9c78c55a8a7e12fd516300d06092a864886f70d01010b05003010310e300c06035504030c0564756d6d79301e170d3230303432383137343234335a170d3230303632373137343234335a3010310e300c06035504030c0564756d6d7930820122300d06092a864886f70d01010105000382010f003082010a0282010100a51b75b3f7da2d60ea1b0fc077f0dbb2bbb6fe1b474028368af8dc2664672896efff171033b0aede0b323a89d5c6db4d517404bc97b65264e41b9e9e86a6f40ace652498d4b3b859544d1bacfd7f86325503eed046f517406545c0ffb5560f83446dedce0fcafcc41ac8495488a6aa912ae45192ef7e3efa20d0f7403b0baa62c7e2e5404c620c5793623132aa20f624f08d88fbf0985af39433f5a24d0b908e5219d8ba6a404d3ee8418203b62a40c8eb18837354d50281a6a2bf5012e505c419482787b7a81e5935613ceea0c6d93e86f76282b6aa406fb3a1796c56b32e8a22afc3f7a3c9daa8f0e2846ff0d50abfc862a52f6cf0aaece6066c860376f3ed0203010001a3818a308187300c0603551d13040530030101ff30130603551d110101ff04093007820564756d6d79301206082b0601050507011e0101ff0403040100300e0603551d0f0101ff040403020184301d0603551d0e04160414e6e451ec8d19d9677b2d272a9d73b939fa2d915a301f0603551d23041830168014e6e451ec8d19d9677b2d272a9d73b939fa2d915a300d06092a864886f70d01010b0500038201010056d06047b7f48683e2347ca726997d9700b4f2cf1d8bc0ef17addac8445d38ffd7f8079055ead878b6a74c8384d0e30150c8990aa74f59cda6ebcb49465d8991ffa16a4c927a26e4639d1875a3ac396c7455c7eda40dbe66054a03d27f961c15e86bd5b06db6b26572977bcda93453b6b6a88ef96b31996a7bd17323525b33050d28deec9c33a3f9765a11fb99d0e222bd39a6db3a788474c9ca347377688f837d42f5841667bffcbe6b473e6f229f286a0829963e591a99aa7f67e9d20c36ccd2ac84cb85b7a8b3396a6cbe59a573ffff726f373197c230de5c92a52c5bc87e29c20bdf6e89609764a60c649022aabd768f3557661b083ae00e6afc8a5bf2ed":"":MBEDTLS_ERR_X509_INVALID_EXTENSIONS + MBEDTLS_ERR_ASN1_UNEXPECTED_TAG
2262
2263X509 CRT ASN1 (Unsupported non critical extension recognized by callback)
2264depends_on:MBEDTLS_RSA_C:MBEDTLS_SHA256_C
2265x509parse_crt_cb:"308203353082021da00302010202104d3ebbb8a870f9c78c55a8a7e12fd516300d06092a864886f70d01010b05003010310e300c06035504030c0564756d6d79301e170d3230303432383137343234335a170d3230303632373137343234335a3010310e300c06035504030c0564756d6d7930820122300d06092a864886f70d01010105000382010f003082010a0282010100a51b75b3f7da2d60ea1b0fc077f0dbb2bbb6fe1b474028368af8dc2664672896efff171033b0aede0b323a89d5c6db4d517404bc97b65264e41b9e9e86a6f40ace652498d4b3b859544d1bacfd7f86325503eed046f517406545c0ffb5560f83446dedce0fcafcc41ac8495488a6aa912ae45192ef7e3efa20d0f7403b0baa62c7e2e5404c620c5793623132aa20f624f08d88fbf0985af39433f5a24d0b908e5219d8ba6a404d3ee8418203b62a40c8eb18837354d50281a6a2bf5012e505c419482787b7a81e5935613ceea0c6d93e86f76282b6aa406fb3a1796c56b32e8a22afc3f7a3c9daa8f0e2846ff0d50abfc862a52f6cf0aaece6066c860376f3ed0203010001a3818a308187300c0603551d13040530030101ff30130603551d110101ff04093007820564756d6d79301206082b0601050507011f0101000403040100300e0603551d0f0101ff040403020184301d0603551d0e04160414e6e451ec8d19d9677b2d272a9d73b939fa2d915a301f0603551d23041830168014e6e451ec8d19d9677b2d272a9d73b939fa2d915a300d06092a864886f70d01010b0500038201010056d06047b7f48683e2347ca726997d9700b4f2cf1d8bc0ef17addac8445d38ffd7f8079055ead878b6a74c8384d0e30150c8990aa74f59cda6ebcb49465d8991ffa16a4c927a26e4639d1875a3ac396c7455c7eda40dbe66054a03d27f961c15e86bd5b06db6b26572977bcda93453b6b6a88ef96b31996a7bd17323525b33050d28deec9c33a3f9765a11fb99d0e222bd39a6db3a788474c9ca347377688f837d42f5841667bffcbe6b473e6f229f286a0829963e591a99aa7f67e9d20c36ccd2ac84cb85b7a8b3396a6cbe59a573ffff726f373197c230de5c92a52c5bc87e29c20bdf6e89609764a60c649022aabd768f3557661b083ae00e6afc8a5bf2ed":"cert. version \: 3\nserial number \: 4D\:3E\:BB\:B8\:A8\:70\:F9\:C7\:8C\:55\:A8\:A7\:E1\:2F\:D5\:16\nissuer name \: CN=dummy\nsubject name \: CN=dummy\nissued on \: 2020-04-28 17\:42\:43\nexpires on \: 2020-06-27 17\:42\:43\nsigned using \: RSA with SHA-256\nRSA key size \: 2048 bits\nbasic constraints \: CA=true\nsubject alt name \:\n dNSName \: dummy\nkey usage \: Digital Signature, Key Cert Sign\n":0
2266
2267X509 CRT ASN1 (Unsupported non critical extension not recognized by callback)
2268depends_on:MBEDTLS_RSA_C:MBEDTLS_SHA256_C
2269x509parse_crt_cb:"308203353082021da00302010202104d3ebbb8a870f9c78c55a8a7e12fd516300d06092a864886f70d01010b05003010310e300c06035504030c0564756d6d79301e170d3230303432383137343234335a170d3230303632373137343234335a3010310e300c06035504030c0564756d6d7930820122300d06092a864886f70d01010105000382010f003082010a0282010100a51b75b3f7da2d60ea1b0fc077f0dbb2bbb6fe1b474028368af8dc2664672896efff171033b0aede0b323a89d5c6db4d517404bc97b65264e41b9e9e86a6f40ace652498d4b3b859544d1bacfd7f86325503eed046f517406545c0ffb5560f83446dedce0fcafcc41ac8495488a6aa912ae45192ef7e3efa20d0f7403b0baa62c7e2e5404c620c5793623132aa20f624f08d88fbf0985af39433f5a24d0b908e5219d8ba6a404d3ee8418203b62a40c8eb18837354d50281a6a2bf5012e505c419482787b7a81e5935613ceea0c6d93e86f76282b6aa406fb3a1796c56b32e8a22afc3f7a3c9daa8f0e2846ff0d50abfc862a52f6cf0aaece6066c860376f3ed0203010001a3818a308187300c0603551d13040530030101ff30130603551d110101ff04093007820564756d6d79301206082b0601050507011e0101000403040100300e0603551d0f0101ff040403020184301d0603551d0e04160414e6e451ec8d19d9677b2d272a9d73b939fa2d915a301f0603551d23041830168014e6e451ec8d19d9677b2d272a9d73b939fa2d915a300d06092a864886f70d01010b0500038201010056d06047b7f48683e2347ca726997d9700b4f2cf1d8bc0ef17addac8445d38ffd7f8079055ead878b6a74c8384d0e30150c8990aa74f59cda6ebcb49465d8991ffa16a4c927a26e4639d1875a3ac396c7455c7eda40dbe66054a03d27f961c15e86bd5b06db6b26572977bcda93453b6b6a88ef96b31996a7bd17323525b33050d28deec9c33a3f9765a11fb99d0e222bd39a6db3a788474c9ca347377688f837d42f5841667bffcbe6b473e6f229f286a0829963e591a99aa7f67e9d20c36ccd2ac84cb85b7a8b3396a6cbe59a573ffff726f373197c230de5c92a52c5bc87e29c20bdf6e89609764a60c649022aabd768f3557661b083ae00e6afc8a5bf2ed":"cert. version \: 3\nserial number \: 4D\:3E\:BB\:B8\:A8\:70\:F9\:C7\:8C\:55\:A8\:A7\:E1\:2F\:D5\:16\nissuer name \: CN=dummy\nsubject name \: CN=dummy\nissued on \: 2020-04-28 17\:42\:43\nexpires on \: 2020-06-27 17\:42\:43\nsigned using \: RSA with SHA-256\nRSA key size \: 2048 bits\nbasic constraints \: CA=true\nsubject alt name \:\n dNSName \: dummy\nkey usage \: Digital Signature, Key Cert Sign\n":0
2270
Nicola Di Lietoc84b1e62020-06-13 11:08:16 +0200[diff] [blame]2271X509 CRT ASN1 (Unsupported critical policy recognized by callback)
2272depends_on:MBEDTLS_RSA_C:MBEDTLS_SHA256_C
2273x509parse_crt_cb:"3081b130819ba0030201028204deadbeef300d06092a864886f70d01010b0500300c310a30080600130454657374301c170c303930313031303030303030170c303931323331323335393539300c310a30080600130454657374302a300d06092a864886f70d010101050003190030160210ffffffffffffffffffffffffffffffff0202ffffa100a200a315301330110603551d20010101040730053003060101300d06092a864886f70d01010b0500030200ff":"cert. version \: 3\nserial number \: DE\:AD\:BE\:EF\nissuer name \: ??=Test\nsubject name \: ??=Test\nissued on \: 2009-01-01 00\:00\:00\nexpires on \: 2009-12-31 23\:59\:59\nsigned using \: RSA with SHA-256\nRSA key size \: 128 bits\ncertificate policies \: ???\n":0
2274
2275X509 CRT ASN1 (Unsupported critical policy not recognized by callback)
2276depends_on:MBEDTLS_RSA_C:MBEDTLS_SHA256_C
2277x509parse_crt_cb:"3081b130819ba0030201028204deadbeef300d06092a864886f70d01010b0500300c310a30080600130454657374301c170c303930313031303030303030170c303931323331323335393539300c310a30080600130454657374302a300d06092a864886f70d010101050003190030160210ffffffffffffffffffffffffffffffff0202ffffa100a200a315301330110603551d20010101040730053003060100300d06092a864886f70d01010b0500030200ff":"":MBEDTLS_ERR_X509_FEATURE_UNAVAILABLE
2278
2279X509 CRT ASN1 (Unsupported non critical policy recognized by callback)
2280depends_on:MBEDTLS_RSA_C:MBEDTLS_SHA256_C
2281x509parse_crt_cb:"3081b130819ba0030201028204deadbeef300d06092a864886f70d01010b0500300c310a30080600130454657374301c170c303930313031303030303030170c303931323331323335393539300c310a30080600130454657374302a300d06092a864886f70d010101050003190030160210ffffffffffffffffffffffffffffffff0202ffffa100a200a315301330110603551d20010100040730053003060101300d06092a864886f70d01010b0500030200ff":"cert. version \: 3\nserial number \: DE\:AD\:BE\:EF\nissuer name \: ??=Test\nsubject name \: ??=Test\nissued on \: 2009-01-01 00\:00\:00\nexpires on \: 2009-12-31 23\:59\:59\nsigned using \: RSA with SHA-256\nRSA key size \: 128 bits\ncertificate policies \: ???\n":0
2282
2283X509 CRT ASN1 (Unsupported non critical policy not recognized by callback)
2284depends_on:MBEDTLS_RSA_C:MBEDTLS_SHA256_C
2285x509parse_crt_cb:"3081b130819ba0030201028204deadbeef300d06092a864886f70d01010b0500300c310a30080600130454657374301c170c303930313031303030303030170c303931323331323335393539300c310a30080600130454657374302a300d06092a864886f70d010101050003190030160210ffffffffffffffffffffffffffffffff0202ffffa100a200a315301330110603551d20010100040730053003060100300d06092a864886f70d01010b0500030200ff":"cert. version \: 3\nserial number \: DE\:AD\:BE\:EF\nissuer name \: ??=Test\nsubject name \: ??=Test\nissued on \: 2009-01-01 00\:00\:00\nexpires on \: 2009-12-31 23\:59\:59\nsigned using \: RSA with SHA-256\nRSA key size \: 128 bits\ncertificate policies \: ???\n":0
2286
Paul Bakker6b0fa4f2009-07-20 20:35:41 +0000[diff] [blame]2287X509 CRL ASN1 (Incorrect first tag)
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200[diff] [blame]2288x509parse_crl:"":"":MBEDTLS_ERR_X509_INVALID_FORMAT
Paul Bakker6b0fa4f2009-07-20 20:35:41 +0000[diff] [blame]2289
2290X509 CRL ASN1 (Correct first tag, data length does not match)
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200[diff] [blame]2291x509parse_crl:"300000":"":MBEDTLS_ERR_X509_INVALID_FORMAT + MBEDTLS_ERR_ASN1_LENGTH_MISMATCH
Paul Bakker6b0fa4f2009-07-20 20:35:41 +0000[diff] [blame]2292
2293X509 CRL ASN1 (TBSCertList, tag missing)
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200[diff] [blame]2294x509parse_crl:"3000":"":MBEDTLS_ERR_X509_INVALID_FORMAT + MBEDTLS_ERR_ASN1_OUT_OF_DATA
Paul Bakker6b0fa4f2009-07-20 20:35:41 +0000[diff] [blame]2295
2296X509 CRL ASN1 (TBSCertList, version tag len missing)
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200[diff] [blame]2297x509parse_crl:"3003300102":"":MBEDTLS_ERR_X509_INVALID_VERSION + MBEDTLS_ERR_ASN1_OUT_OF_DATA
Paul Bakker6b0fa4f2009-07-20 20:35:41 +0000[diff] [blame]2298
2299X509 CRL ASN1 (TBSCertList, version correct, alg missing)
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200[diff] [blame]2300x509parse_crl:"30053003020100":"":MBEDTLS_ERR_X509_INVALID_ALG + MBEDTLS_ERR_ASN1_OUT_OF_DATA
Paul Bakker6b0fa4f2009-07-20 20:35:41 +0000[diff] [blame]2301
2302X509 CRL ASN1 (TBSCertList, alg correct, incorrect version)
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200[diff] [blame]2303x509parse_crl:"300b3009020102300406000500":"":MBEDTLS_ERR_X509_UNKNOWN_VERSION
Paul Bakker6b0fa4f2009-07-20 20:35:41 +0000[diff] [blame]2304
2305X509 CRL ASN1 (TBSCertList, correct version, sig_oid1 unknown)
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200[diff] [blame]2306x509parse_crl:"300b3009020100300406000500":"":MBEDTLS_ERR_X509_UNKNOWN_SIG_ALG
Paul Bakker6b0fa4f2009-07-20 20:35:41 +0000[diff] [blame]2307
2308X509 CRL ASN1 (TBSCertList, sig_oid1 id unknown)
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200[diff] [blame]2309x509parse_crl:"30143012020100300d06092a864886f70d01010f0500":"":MBEDTLS_ERR_X509_UNKNOWN_SIG_ALG
Paul Bakker6b0fa4f2009-07-20 20:35:41 +0000[diff] [blame]2310
2311X509 CRL ASN1 (TBSCertList, sig_oid1 correct, issuer missing)
palaviva07ecda2016-08-07 11:15:29 +0300[diff] [blame]2312depends_on:MBEDTLS_RSA_C:MBEDTLS_SHA256_C
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200[diff] [blame]2313x509parse_crl:"30143012020100300d06092a864886f70d01010e0500":"":MBEDTLS_ERR_X509_INVALID_FORMAT + MBEDTLS_ERR_ASN1_OUT_OF_DATA
Paul Bakker6b0fa4f2009-07-20 20:35:41 +0000[diff] [blame]2314
2315X509 CRL ASN1 (TBSCertList, issuer set missing)
palaviva07ecda2016-08-07 11:15:29 +0300[diff] [blame]2316depends_on:MBEDTLS_RSA_C:MBEDTLS_SHA256_C
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200[diff] [blame]2317x509parse_crl:"30163014020100300d06092a864886f70d01010e05003000":"":MBEDTLS_ERR_X509_INVALID_NAME + MBEDTLS_ERR_ASN1_OUT_OF_DATA
Paul Bakker6b0fa4f2009-07-20 20:35:41 +0000[diff] [blame]2318
2319X509 CRL ASN1 (TBSCertList, correct issuer, thisUpdate missing)
palaviva07ecda2016-08-07 11:15:29 +0300[diff] [blame]2320depends_on:MBEDTLS_RSA_C:MBEDTLS_SHA256_C
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200[diff] [blame]2321x509parse_crl:"30253023020100300d06092a864886f70d01010e0500300f310d300b0603550403130441424344":"":MBEDTLS_ERR_X509_INVALID_DATE + MBEDTLS_ERR_ASN1_OUT_OF_DATA
Paul Bakker6b0fa4f2009-07-20 20:35:41 +0000[diff] [blame]2322
2323X509 CRL ASN1 (TBSCertList, correct thisUpdate, nextUpdate missing, entries length missing)
palaviva07ecda2016-08-07 11:15:29 +0300[diff] [blame]2324depends_on:MBEDTLS_RSA_C:MBEDTLS_SHA256_C
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200[diff] [blame]2325x509parse_crl:"30343032020100300d06092a864886f70d01010e0500300f310d300b0603550403130441424344170c30393031303130303030303030":"":MBEDTLS_ERR_ASN1_OUT_OF_DATA
Paul Bakkere4ff4132009-07-27 20:22:10 +0000[diff] [blame]2326
Paul Bakker6b0fa4f2009-07-20 20:35:41 +0000[diff] [blame]2327X509 CRL ASN1 (TBSCertList, entries present, invalid sig_alg)
palaviva07ecda2016-08-07 11:15:29 +0300[diff] [blame]2328depends_on:MBEDTLS_RSA_C:MBEDTLS_SHA256_C
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200[diff] [blame]2329x509parse_crl:"304a3047020100300d06092a864886f70d01010e0500300f310d300b0603550403130441424344170c303930313031303030303030301430128202abcd170c30383132333132333539353900":"":MBEDTLS_ERR_X509_INVALID_ALG + MBEDTLS_ERR_ASN1_UNEXPECTED_TAG
Paul Bakker6b0fa4f2009-07-20 20:35:41 +0000[diff] [blame]2330
2331X509 CRL ASN1 (TBSCertList, entries present, date in entry invalid)
palaviva07ecda2016-08-07 11:15:29 +0300[diff] [blame]2332depends_on:MBEDTLS_RSA_C:MBEDTLS_SHA256_C
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200[diff] [blame]2333x509parse_crl:"304a3047020100300d06092a864886f70d01010e0500300f310d300b0603550403130441424344170c303930313031303030303030301430128202abcd190c30383132333132333539353900":"":MBEDTLS_ERR_X509_INVALID_DATE + MBEDTLS_ERR_ASN1_UNEXPECTED_TAG
Paul Bakker6b0fa4f2009-07-20 20:35:41 +0000[diff] [blame]2334
2335X509 CRL ASN1 (TBSCertList, sig_alg present, sig_alg does not match)
palaviva07ecda2016-08-07 11:15:29 +0300[diff] [blame]2336depends_on:MBEDTLS_RSA_C:MBEDTLS_SHA256_C
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200[diff] [blame]2337x509parse_crl:"30583047020100300d06092a864886f70d01010e0500300f310d300b0603550403130441424344170c303930313031303030303030301430128202abcd170c303831323331323335393539300d06092a864886f70d01010d0500":"":MBEDTLS_ERR_X509_SIG_MISMATCH
Paul Bakker6b0fa4f2009-07-20 20:35:41 +0000[diff] [blame]2338
Paul Bakkere4ff4132009-07-27 20:22:10 +0000[diff] [blame]2339X509 CRL ASN1 (TBSCertList, sig present, len mismatch)
palaviva07ecda2016-08-07 11:15:29 +0300[diff] [blame]2340depends_on:MBEDTLS_RSA_C:MBEDTLS_SHA256_C
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200[diff] [blame]2341x509parse_crl:"305d3047020100300d06092a864886f70d01010e0500300f310d300b0603550403130441424344170c303930313031303030303030301430128202abcd170c303831323331323335393539300d06092a864886f70d01010e05000302000100":"":MBEDTLS_ERR_X509_INVALID_FORMAT + MBEDTLS_ERR_ASN1_LENGTH_MISMATCH
Paul Bakker6b0fa4f2009-07-20 20:35:41 +0000[diff] [blame]2342
Gilles Peskine210bea32020-08-06 16:05:35 +0200[diff] [blame]2343# 305c
2344# 3047 tbsCertList TBSCertList
2345# 020100 version INTEGER OPTIONAL
2346# 300d signatureAlgorithm AlgorithmIdentifi
2347# 06092a864886f70d01010e
2348# 0500
2349# 300f issuer Name
2350# 310d300b0603550403130441424344
2351# 170c303930313031303030303030 thisUpdate Time
2352# 3014 revokedCertificates
2353# 3012 entry 1
2354# 8202abcd userCertificate CertificateSerialNum
2355# 170c303831323331323335393539 revocationDate Time
2356# 300d signatureAlgorithm AlgorithmIdentifi
2357# 06092a864886f70d01010e
2358# 0500
2359# 03020001 signatureValue BIT STRING
2360# The subsequent TBSCertList negative tests remove or modify some elements.
Paul Bakker6b0fa4f2009-07-20 20:35:41 +0000[diff] [blame]2361X509 CRL ASN1 (TBSCertList, sig present)
palaviva07ecda2016-08-07 11:15:29 +0300[diff] [blame]2362depends_on:MBEDTLS_RSA_C:MBEDTLS_SHA256_C
Paul Bakkerc70b9822013-04-07 22:00:46 +0200[diff] [blame]2363x509parse_crl:"305c3047020100300d06092a864886f70d01010e0500300f310d300b0603550403130441424344170c303930313031303030303030301430128202abcd170c303831323331323335393539300d06092a864886f70d01010e050003020001":"CRL version \: 1\nissuer name \: CN=ABCD\nthis update \: 2009-01-01 00\:00\:00\nnext update \: 0000-00-00 00\:00\:00\nRevoked certificates\:\nserial number\: AB\:CD revocation date\: 2008-12-31 23\:59\:59\nsigned using \: RSA with SHA-224\n":0
Paul Bakker6b0fa4f2009-07-20 20:35:41 +0000[diff] [blame]2364
Gilles Peskineb2281e12020-07-16 18:18:22 +0200[diff] [blame]2365X509 CRL ASN1 (TBSCertList, signatureValue missing)
2366depends_on:MBEDTLS_RSA_C:MBEDTLS_SHA256_C
2367x509parse_crl:"30583047020100300d06092a864886f70d01010e0500300f310d300b0603550403130441424344170c303930313031303030303030301430128202abcd170c303831323331323335393539300d06092a864886f70d01010e0500":"":MBEDTLS_ERR_X509_INVALID_SIGNATURE + MBEDTLS_ERR_ASN1_OUT_OF_DATA
2368
2369X509 CRL ASN1 (TBSCertList, signatureAlgorithm missing)
2370depends_on:MBEDTLS_RSA_C:MBEDTLS_SHA256_C
2371x509parse_crl:"30493047020100300d06092a864886f70d01010e0500300f310d300b0603550403130441424344170c303930313031303030303030301430128202abcd170c303831323331323335393539":"":MBEDTLS_ERR_X509_INVALID_ALG + MBEDTLS_ERR_ASN1_OUT_OF_DATA
2372
2373X509 CRL ASN1 (TBSCertList, single empty entry at end)
2374depends_on:MBEDTLS_RSA_C:MBEDTLS_SHA256_C
2375x509parse_crl:"30373035020100300d06092a864886f70d01010e0500300f310d300b0603550403130441424344170c30393031303130303030303030023000":"":MBEDTLS_ERR_X509_INVALID_SERIAL + MBEDTLS_ERR_ASN1_OUT_OF_DATA
2376
2377X509 CRL ASN1 (TBSCertList, good entry then empty entry at end)
2378depends_on:MBEDTLS_RSA_C:MBEDTLS_SHA256_C
2379x509parse_crl:"304b3049020100300d06092a864886f70d01010e0500300f310d300b0603550403130441424344170c303930313031303030303030301630128202abcd170c3038313233313233353935393000":"":MBEDTLS_ERR_X509_INVALID_SERIAL + MBEDTLS_ERR_ASN1_OUT_OF_DATA
2380
2381X509 CRL ASN1 (TBSCertList, missing time in entry)
2382depends_on:MBEDTLS_RSA_C:MBEDTLS_SHA256_C
2383x509parse_crl:"304e3039020100300d06092a864886f70d01010e0500300f310d300b0603550403130441424344170c303930313031303030303030300630048202abcd300d06092a864886f70d01010e050003020001":"":MBEDTLS_ERR_X509_INVALID_DATE + MBEDTLS_ERR_ASN1_OUT_OF_DATA
2384
2385X509 CRL ASN1 (TBSCertList, missing time in entry at end)
2386depends_on:MBEDTLS_RSA_C:MBEDTLS_SHA256_C
2387x509parse_crl:"303b3039020100300d06092a864886f70d01010e0500300f310d300b0603550403130441424344170c303930313031303030303030300630048202abcd":"":MBEDTLS_ERR_X509_INVALID_DATE + MBEDTLS_ERR_ASN1_OUT_OF_DATA
2388
2389X509 CRL ASN1 (TBSCertList, invalid tag for time in entry)
2390depends_on:MBEDTLS_RSA_C:MBEDTLS_SHA256_C
2391x509parse_crl:"305c3047020100300d06092a864886f70d01010e0500300f310d300b0603550403130441424344170c303930313031303030303030301430128202abcd190c303831323331323335393539300d06092a864886f70d01010e050003020001":"":MBEDTLS_ERR_X509_INVALID_DATE + MBEDTLS_ERR_ASN1_UNEXPECTED_TAG
2392
2393X509 CRL ASN1 (TBSCertList, invalid tag for serial)
2394depends_on:MBEDTLS_RSA_C:MBEDTLS_SHA256_C
2395x509parse_crl:"305c3047020100300d06092a864886f70d01010e0500300f310d300b0603550403130441424344170c303930313031303030303030301430128402abcd170c303831323331323335393539300d06092a864886f70d01010e050003020001":"":MBEDTLS_ERR_X509_INVALID_SERIAL + MBEDTLS_ERR_ASN1_UNEXPECTED_TAG
2396
Paul Bakkere4ff4132009-07-27 20:22:10 +0000[diff] [blame]2397X509 CRL ASN1 (TBSCertList, no entries)
palaviva07ecda2016-08-07 11:15:29 +0300[diff] [blame]2398depends_on:MBEDTLS_RSA_C:MBEDTLS_SHA256_C
Paul Bakkerc70b9822013-04-07 22:00:46 +0200[diff] [blame]2399x509parse_crl:"30463031020100300d06092a864886f70d01010e0500300f310d300b0603550403130441424344170c303930313031303030303030300d06092a864886f70d01010e050003020001":"CRL version \: 1\nissuer name \: CN=ABCD\nthis update \: 2009-01-01 00\:00\:00\nnext update \: 0000-00-00 00\:00\:00\nRevoked certificates\:\nsigned using \: RSA with SHA-224\n":0
Manuel Pégourié-Gonnardfbae2a12013-11-26 16:43:39 +0100[diff] [blame]2400
Andres AGfff826c2017-03-07 11:11:12 +0000[diff] [blame]2401X509 CRL ASN1 (invalid version 2)
2402x509parse_crl:"30463031020102300d06092a864886f70d01010e0500300f310d300b0603550403130441424344170c303930313031303030303030300d06092a864886f70d01010e050003020001":"":MBEDTLS_ERR_X509_UNKNOWN_VERSION
2403
2404X509 CRL ASN1 (invalid version overflow)
Hanno Becker32b48ea2019-06-03 09:48:09 +0100[diff] [blame]2405x509parse_crl:"3049303102047fffffff300d06092a864886f70d01010e0500300f310d300b0603550403130441424344170c303930313031303030303030300d06092a864886f70d01010e050003020001":"":MBEDTLS_ERR_X509_UNKNOWN_VERSION
Andres AGfff826c2017-03-07 11:11:12 +0000[diff] [blame]2406
Manuel Pégourié-Gonnard0bdb0502018-03-14 11:34:29 +0100[diff] [blame]2407X509 CRL ASN1 (extension seq too long, crl-idp.pem byte 121)
Gilles Peskine1cfa2d02018-03-23 00:55:57 +0100[diff] [blame]2408depends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_RSA_C:MBEDTLS_SHA256_C
Manuel Pégourié-Gonnard0bdb0502018-03-14 11:34:29 +0100[diff] [blame]2409x509parse_crl:"308201b330819c020101300d06092a864886f70d01010b0500303b310b3009060355040613024e4c3111300f060355040a1308506f6c617253534c3119301706035504031310506f6c617253534c2054657374204341170d3138303331343037333134385a170d3238303331343037333134385aa02d302b30300603551d1c0101ff041f301da01ba0198617687474703a2f2f706b692e6578616d706c652e636f6d2f300d06092a864886f70d01010b05000382010100b3fbe9d586eaf4b8ff60cf8edae06a85135db78f78198498719725b5b403c0b803c2c150f52faae7306d6a7871885dc2e9dc83a164bac7263776474ef642b660040b35a1410ac291ac8f6f18ab85e7fd6e22bd1af1c41ca95cf2448f6e2b42a018493dfc03c6b6aa1b9e3fe7b76af2182fb2121db4166bf0167d6f379c5a58adee5082423434d97be2909f5e7488053f996646db10dd49782626da53ad8eada01813c031b2bacdb0203bc017aac1735951a11d013ee4d1d5f7143ccbebf2371e66a1bec6e1febe69148f50784eef8adbb66664c96196d7e0c0bcdc807f447b54e058f37642a3337995bfbcd332208bd6016936705c82263eabd7affdba92fae3":"":MBEDTLS_ERR_X509_INVALID_EXTENSIONS + MBEDTLS_ERR_ASN1_OUT_OF_DATA
2410
2411X509 CRL ASN1 (extension oid too long, crl-idp.pem byte 123)
Gilles Peskine1cfa2d02018-03-23 00:55:57 +0100[diff] [blame]2412depends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_RSA_C:MBEDTLS_SHA256_C
Manuel Pégourié-Gonnard0bdb0502018-03-14 11:34:29 +0100[diff] [blame]2413x509parse_crl:"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":"":MBEDTLS_ERR_X509_INVALID_EXTENSIONS + MBEDTLS_ERR_ASN1_OUT_OF_DATA
2414
2415X509 CRL ASN1 (extension critical invalid length, crl-idp.pem byte 128)
Gilles Peskine1cfa2d02018-03-23 00:55:57 +0100[diff] [blame]2416depends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_RSA_C:MBEDTLS_SHA256_C
Manuel Pégourié-Gonnard0bdb0502018-03-14 11:34:29 +0100[diff] [blame]2417x509parse_crl:"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":"":MBEDTLS_ERR_X509_INVALID_EXTENSIONS + MBEDTLS_ERR_ASN1_INVALID_LENGTH
2418
2419X509 CRL ASN1 (extension data too long, crl-idp.pem byte 131)
Gilles Peskine1cfa2d02018-03-23 00:55:57 +0100[diff] [blame]2420depends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_RSA_C:MBEDTLS_SHA256_C
Manuel Pégourié-Gonnard0bdb0502018-03-14 11:34:29 +0100[diff] [blame]2421x509parse_crl:"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":"":MBEDTLS_ERR_X509_INVALID_EXTENSIONS + MBEDTLS_ERR_ASN1_OUT_OF_DATA
2422
2423X509 CRL ASN1 (extension data too short, crl-idp.pem byte 131)
Gilles Peskine1cfa2d02018-03-23 00:55:57 +0100[diff] [blame]2424depends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_RSA_C:MBEDTLS_SHA256_C
Manuel Pégourié-Gonnard0bdb0502018-03-14 11:34:29 +0100[diff] [blame]2425x509parse_crl:"308201b330819c020101300d06092a864886f70d01010b0500303b310b3009060355040613024e4c3111300f060355040a1308506f6c617253534c3119301706035504031310506f6c617253534c2054657374204341170d3138303331343037333134385a170d3238303331343037333134385aa02d302b30290603551d1c0101ff041e301da01ba0198617687474703a2f2f706b692e6578616d706c652e636f6d2f300d06092a864886f70d01010b05000382010100b3fbe9d586eaf4b8ff60cf8edae06a85135db78f78198498719725b5b403c0b803c2c150f52faae7306d6a7871885dc2e9dc83a164bac7263776474ef642b660040b35a1410ac291ac8f6f18ab85e7fd6e22bd1af1c41ca95cf2448f6e2b42a018493dfc03c6b6aa1b9e3fe7b76af2182fb2121db4166bf0167d6f379c5a58adee5082423434d97be2909f5e7488053f996646db10dd49782626da53ad8eada01813c031b2bacdb0203bc017aac1735951a11d013ee4d1d5f7143ccbebf2371e66a1bec6e1febe69148f50784eef8adbb66664c96196d7e0c0bcdc807f447b54e058f37642a3337995bfbcd332208bd6016936705c82263eabd7affdba92fae3":"":MBEDTLS_ERR_X509_INVALID_EXTENSIONS + MBEDTLS_ERR_ASN1_LENGTH_MISMATCH
2426
Manuel Pégourié-Gonnarda63305d2018-03-14 12:23:56 +0100[diff] [blame]2427X509 CRL ASN1 (extension not critical explicit, crl-idp.pem byte 129)
Gilles Peskine1cfa2d02018-03-23 00:55:57 +0100[diff] [blame]2428depends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_RSA_C:MBEDTLS_SHA256_C
Manuel Pégourié-Gonnarda63305d2018-03-14 12:23:56 +0100[diff] [blame]2429x509parse_crl:"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":"CRL version \: 2\nissuer name \: C=NL, O=PolarSSL, CN=PolarSSL Test CA\nthis update \: 2018-03-14 07\:31\:48\nnext update \: 2028-03-14 07\:31\:48\nRevoked certificates\:\nsigned using \: RSA with SHA-256\n":0
2430
Manuel Pégourié-Gonnardfbae2a12013-11-26 16:43:39 +0100[diff] [blame]2431X509 CRT parse path #2 (one cert)
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200[diff] [blame]2432depends_on:MBEDTLS_SHA1_C:MBEDTLS_RSA_C
2433mbedtls_x509_crt_parse_path:"data_files/dir1":0:1
Manuel Pégourié-Gonnardfbae2a12013-11-26 16:43:39 +0100[diff] [blame]2434
2435X509 CRT parse path #3 (two certs)
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200[diff] [blame]2436depends_on:MBEDTLS_SHA1_C:MBEDTLS_RSA_C:MBEDTLS_SHA256_C:MBEDTLS_ECDSA_C:MBEDTLS_ECP_DP_SECP384R1_ENABLED
2437mbedtls_x509_crt_parse_path:"data_files/dir2":0:2
Manuel Pégourié-Gonnardfbae2a12013-11-26 16:43:39 +0100[diff] [blame]2438
2439X509 CRT parse path #4 (two certs, one non-cert)
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200[diff] [blame]2440depends_on:MBEDTLS_SHA1_C:MBEDTLS_RSA_C:MBEDTLS_SHA256_C:MBEDTLS_ECDSA_C:MBEDTLS_ECP_DP_SECP384R1_ENABLED
2441mbedtls_x509_crt_parse_path:"data_files/dir3":1:2
Manuel Pégourié-Gonnard7afdb882014-03-28 16:06:35 +0100[diff] [blame]2442
Manuel Pégourié-Gonnard1beb0482017-06-05 13:49:44 +0200[diff] [blame]2443X509 CRT verify long chain (max intermediate CA, trusted)
2444depends_on:MBEDTLS_SHA256_C:MBEDTLS_ECDSA_C:MBEDTLS_ECP_DP_SECP256R1_ENABLED
2445mbedtls_x509_crt_verify_max:"data_files/dir-maxpath/00.crt":"data_files/dir-maxpath":MBEDTLS_X509_MAX_INTERMEDIATE_CA:0:0
2446
2447X509 CRT verify long chain (max intermediate CA, untrusted)
2448depends_on:MBEDTLS_SHA256_C:MBEDTLS_ECDSA_C:MBEDTLS_ECP_DP_SECP256R1_ENABLED:MBEDTLS_ECP_DP_SECP384R1_ENABLED
2449mbedtls_x509_crt_verify_max:"data_files/test-ca2.crt":"data_files/dir-maxpath":MBEDTLS_X509_MAX_INTERMEDIATE_CA-1:MBEDTLS_ERR_X509_CERT_VERIFY_FAILED:MBEDTLS_X509_BADCERT_NOT_TRUSTED
2450
2451X509 CRT verify long chain (max intermediate CA + 1)
2452depends_on:MBEDTLS_SHA256_C:MBEDTLS_ECDSA_C:MBEDTLS_ECP_DP_SECP256R1_ENABLED
Manuel Pégourié-Gonnard31458a12017-06-26 10:11:49 +0200[diff] [blame]2453mbedtls_x509_crt_verify_max:"data_files/dir-maxpath/00.crt":"data_files/dir-maxpath":MBEDTLS_X509_MAX_INTERMEDIATE_CA+1:MBEDTLS_ERR_X509_FATAL_ERROR:-1
Manuel Pégourié-Gonnard1beb0482017-06-05 13:49:44 +0200[diff] [blame]2454
Janos Follathef4f2582015-10-11 16:17:27 +0200[diff] [blame]2455X509 CRT verify chain #1 (zero pathlen intermediate)
Janos Follath822b2c32015-10-11 10:25:22 +0200[diff] [blame]2456depends_on:MBEDTLS_SHA256_C:MBEDTLS_RSA_C
Manuel Pégourié-Gonnard6b9d53f2017-05-23 12:26:58 +0200[diff] [blame]2457mbedtls_x509_crt_verify_chain:"data_files/dir4/cert14.crt data_files/dir4/cert13.crt data_files/dir4/cert12.crt":"data_files/dir4/cert11.crt":MBEDTLS_X509_BADCERT_NOT_TRUSTED:MBEDTLS_ERR_X509_CERT_VERIFY_FAILED:"":0
Janos Follath822b2c32015-10-11 10:25:22 +0200[diff] [blame]2458
Janos Follathef4f2582015-10-11 16:17:27 +0200[diff] [blame]2459X509 CRT verify chain #2 (zero pathlen root)
2460depends_on:MBEDTLS_SHA256_C:MBEDTLS_RSA_C
Manuel Pégourié-Gonnard6b9d53f2017-05-23 12:26:58 +0200[diff] [blame]2461mbedtls_x509_crt_verify_chain:"data_files/dir4/cert23.crt data_files/dir4/cert22.crt":"data_files/dir4/cert21.crt":MBEDTLS_X509_BADCERT_NOT_TRUSTED:MBEDTLS_ERR_X509_CERT_VERIFY_FAILED:"":0
Janos Follathef4f2582015-10-11 16:17:27 +0200[diff] [blame]2462
2463X509 CRT verify chain #3 (nonzero pathlen root)
2464depends_on:MBEDTLS_SHA256_C:MBEDTLS_RSA_C
Manuel Pégourié-Gonnard6b9d53f2017-05-23 12:26:58 +0200[diff] [blame]2465mbedtls_x509_crt_verify_chain:"data_files/dir4/cert34.crt data_files/dir4/cert33.crt data_files/dir4/cert32.crt":"data_files/dir4/cert31.crt":MBEDTLS_X509_BADCERT_NOT_TRUSTED:MBEDTLS_ERR_X509_CERT_VERIFY_FAILED:"":0
Janos Follathef4f2582015-10-11 16:17:27 +0200[diff] [blame]2466
2467X509 CRT verify chain #4 (nonzero pathlen intermediate)
2468depends_on:MBEDTLS_SHA256_C:MBEDTLS_RSA_C
Manuel Pégourié-Gonnard6b9d53f2017-05-23 12:26:58 +0200[diff] [blame]2469mbedtls_x509_crt_verify_chain:"data_files/dir4/cert45.crt data_files/dir4/cert44.crt data_files/dir4/cert43.crt data_files/dir4/cert42.crt":"data_files/dir4/cert41.crt":MBEDTLS_X509_BADCERT_NOT_TRUSTED:MBEDTLS_ERR_X509_CERT_VERIFY_FAILED:"":0
Janos Follathef4f2582015-10-11 16:17:27 +0200[diff] [blame]2470
2471X509 CRT verify chain #5 (nonzero maxpathlen intermediate)
Manuel Pégourié-Gonnard43be6cd2017-06-20 09:53:42 +0200[diff] [blame]2472depends_on:MBEDTLS_SHA256_C:MBEDTLS_RSA_C:MBEDTLS_PKCS1_V15
Manuel Pégourié-Gonnard6b9d53f2017-05-23 12:26:58 +0200[diff] [blame]2473mbedtls_x509_crt_verify_chain:"data_files/dir4/cert54.crt data_files/dir4/cert53.crt data_files/dir4/cert52.crt":"data_files/dir4/cert51.crt":0:0:"":0
Janos Follathef4f2582015-10-11 16:17:27 +0200[diff] [blame]2474
2475X509 CRT verify chain #6 (nonzero maxpathlen root)
Manuel Pégourié-Gonnard43be6cd2017-06-20 09:53:42 +0200[diff] [blame]2476depends_on:MBEDTLS_SHA256_C:MBEDTLS_RSA_C:MBEDTLS_PKCS1_V15
Manuel Pégourié-Gonnard6b9d53f2017-05-23 12:26:58 +0200[diff] [blame]2477mbedtls_x509_crt_verify_chain:"data_files/dir4/cert63.crt data_files/dir4/cert62.crt":"data_files/dir4/cert61.crt":0:0:"":0
Janos Follathef4f2582015-10-11 16:17:27 +0200[diff] [blame]2478
2479X509 CRT verify chain #7 (maxpathlen root, self signed in path)
Manuel Pégourié-Gonnard43be6cd2017-06-20 09:53:42 +0200[diff] [blame]2480depends_on:MBEDTLS_SHA256_C:MBEDTLS_RSA_C:MBEDTLS_PKCS1_V15
Manuel Pégourié-Gonnard6b9d53f2017-05-23 12:26:58 +0200[diff] [blame]2481mbedtls_x509_crt_verify_chain:"data_files/dir4/cert74.crt data_files/dir4/cert73.crt data_files/dir4/cert72.crt":"data_files/dir4/cert71.crt":0:0:"":0
Janos Follathef4f2582015-10-11 16:17:27 +0200[diff] [blame]2482
2483X509 CRT verify chain #8 (self signed maxpathlen root)
Manuel Pégourié-Gonnard43be6cd2017-06-20 09:53:42 +0200[diff] [blame]2484depends_on:MBEDTLS_SHA256_C:MBEDTLS_RSA_C:MBEDTLS_PKCS1_V15
Manuel Pégourié-Gonnard6b9d53f2017-05-23 12:26:58 +0200[diff] [blame]2485mbedtls_x509_crt_verify_chain:"data_files/dir4/cert61.crt data_files/dir4/cert63.crt data_files/dir4/cert62.crt":"data_files/dir4/cert61.crt":0:0:"":0
Janos Follathef4f2582015-10-11 16:17:27 +0200[diff] [blame]2486
Manuel Pégourié-Gonnard8b4331a2015-11-19 10:52:12 +0100[diff] [blame]2487X509 CRT verify chain #9 (zero pathlen first intermediate, valid)
Manuel Pégourié-Gonnarda3aa43d2015-11-19 10:46:07 +0100[diff] [blame]2488depends_on:MBEDTLS_SHA256_C:MBEDTLS_ECDSA_C:MBEDTLS_ECP_DP_SECP256R1_ENABLED
Manuel Pégourié-Gonnard6b9d53f2017-05-23 12:26:58 +0200[diff] [blame]2489mbedtls_x509_crt_verify_chain:"data_files/dir4/cert83.crt data_files/dir4/cert82.crt":"data_files/dir4/cert81.crt":0:0:"":0
Manuel Pégourié-Gonnarda3aa43d2015-11-19 10:46:07 +0100[diff] [blame]2490
Manuel Pégourié-Gonnard8b4331a2015-11-19 10:52:12 +0100[diff] [blame]2491X509 CRT verify chain #10 (zero pathlen root, valid)
2492depends_on:MBEDTLS_SHA256_C:MBEDTLS_ECDSA_C:MBEDTLS_ECP_DP_SECP256R1_ENABLED
Manuel Pégourié-Gonnard6b9d53f2017-05-23 12:26:58 +0200[diff] [blame]2493mbedtls_x509_crt_verify_chain:"data_files/dir4/cert92.crt":"data_files/dir4/cert91.crt":0:0:"":0
Manuel Pégourié-Gonnard8b4331a2015-11-19 10:52:12 +0100[diff] [blame]2494
Manuel Pégourié-Gonnard9832cea2017-05-23 10:13:40 +0200[diff] [blame]2495X509 CRT verify chain #11 (valid chain, missing profile)
2496depends_on:MBEDTLS_SHA256_C:MBEDTLS_ECDSA_C:MBEDTLS_ECP_DP_SECP256R1_ENABLED
Manuel Pégourié-Gonnard6b9d53f2017-05-23 12:26:58 +0200[diff] [blame]2497mbedtls_x509_crt_verify_chain:"data_files/dir4/cert92.crt":"data_files/dir4/cert91.crt":-1:MBEDTLS_ERR_X509_BAD_INPUT_DATA:"nonesuch":0
Manuel Pégourié-Gonnard9832cea2017-05-23 10:13:40 +0200[diff] [blame]2498
Manuel Pégourié-Gonnard6622fed2017-05-23 11:29:29 +0200[diff] [blame]2499X509 CRT verify chain #12 (suiteb profile, RSA root)
Manuel Pégourié-Gonnard43be6cd2017-06-20 09:53:42 +0200[diff] [blame]2500depends_on:MBEDTLS_SHA256_C:MBEDTLS_RSA_C:MBEDTLS_PKCS1_V15:MBEDTLS_ECDSA_C:MBEDTLS_ECP_DP_SECP192R1_ENABLED:MBEDTLS_SHA1_C
Manuel Pégourié-Gonnard6b9d53f2017-05-23 12:26:58 +0200[diff] [blame]2501mbedtls_x509_crt_verify_chain:"data_files/server3.crt":"data_files/test-ca.crt":MBEDTLS_X509_BADCERT_BAD_MD|MBEDTLS_X509_BADCERT_BAD_PK|MBEDTLS_X509_BADCERT_BAD_KEY:MBEDTLS_ERR_X509_CERT_VERIFY_FAILED:"suiteb":0
Manuel Pégourié-Gonnard6622fed2017-05-23 11:29:29 +0200[diff] [blame]2502
2503X509 CRT verify chain #13 (RSA only profile, EC root)
2504depends_on:MBEDTLS_SHA256_C:MBEDTLS_RSA_C:MBEDTLS_ECDSA_C:MBEDTLS_ECP_DP_SECP384R1_ENABLED
Manuel Pégourié-Gonnard6b9d53f2017-05-23 12:26:58 +0200[diff] [blame]2505mbedtls_x509_crt_verify_chain:"data_files/server4.crt":"data_files/test-ca2.crt":MBEDTLS_X509_BADCERT_BAD_PK|MBEDTLS_X509_BADCERT_BAD_KEY:MBEDTLS_ERR_X509_CERT_VERIFY_FAILED:"rsa3072":0
Manuel Pégourié-Gonnard6622fed2017-05-23 11:29:29 +0200[diff] [blame]2506
Manuel Pégourié-Gonnardd0922772017-06-27 13:26:43 +0200[diff] [blame]2507X509 CRT verify chain #13 (RSA only profile, EC trusted EE)
2508depends_on:MBEDTLS_SHA256_C:MBEDTLS_RSA_C:MBEDTLS_ECDSA_C:MBEDTLS_ECP_DP_SECP256R1_ENABLED
2509mbedtls_x509_crt_verify_chain:"data_files/server5-selfsigned.crt":"data_files/server5-selfsigned.crt":MBEDTLS_X509_BADCERT_BAD_PK|MBEDTLS_X509_BADCERT_BAD_KEY:MBEDTLS_ERR_X509_CERT_VERIFY_FAILED:"rsa3072":0
2510
Manuel Pégourié-Gonnard6622fed2017-05-23 11:29:29 +0200[diff] [blame]2511X509 CRT verify chain #14 (RSA-3072 profile, root key too small)
Manuel Pégourié-Gonnard43be6cd2017-06-20 09:53:42 +0200[diff] [blame]2512depends_on:MBEDTLS_SHA256_C:MBEDTLS_RSA_C:MBEDTLS_PKCS1_V15:MBEDTLS_SHA1_C
Manuel Pégourié-Gonnard6b9d53f2017-05-23 12:26:58 +0200[diff] [blame]2513mbedtls_x509_crt_verify_chain:"data_files/server1.crt":"data_files/test-ca.crt":MBEDTLS_X509_BADCERT_BAD_MD|MBEDTLS_X509_BADCERT_BAD_KEY:MBEDTLS_ERR_X509_CERT_VERIFY_FAILED:"rsa3072":0
Manuel Pégourié-Gonnard6622fed2017-05-23 11:29:29 +0200[diff] [blame]2514
2515X509 CRT verify chain #15 (suiteb profile, rsa intermediate)
Manuel Pégourié-Gonnard43be6cd2017-06-20 09:53:42 +0200[diff] [blame]2516depends_on:MBEDTLS_SHA256_C:MBEDTLS_RSA_C:MBEDTLS_PKCS1_V15:MBEDTLS_ECDSA_C:MBEDTLS_ECP_DP_SECP384R1_ENABLED:MBEDTLS_ECP_DP_SECP256R1_ENABLED
Manuel Pégourié-Gonnard6b9d53f2017-05-23 12:26:58 +0200[diff] [blame]2517mbedtls_x509_crt_verify_chain:"data_files/server7.crt data_files/test-int-ca.crt":"data_files/test-ca2.crt":MBEDTLS_X509_BADCERT_BAD_PK:MBEDTLS_ERR_X509_CERT_VERIFY_FAILED:"suiteb":0
Manuel Pégourié-Gonnard6622fed2017-05-23 11:29:29 +0200[diff] [blame]2518
2519X509 CRT verify chain #16 (RSA-only profile, EC intermediate)
Manuel Pégourié-Gonnard43be6cd2017-06-20 09:53:42 +0200[diff] [blame]2520depends_on:MBEDTLS_SHA256_C:MBEDTLS_RSA_C:MBEDTLS_PKCS1_V15:MBEDTLS_ECDSA_C:MBEDTLS_ECP_DP_SECP384R1_ENABLED:MBEDTLS_ECP_DP_SECP256R1_ENABLED:MBEDTLS_SHA1_C
Manuel Pégourié-Gonnard6b9d53f2017-05-23 12:26:58 +0200[diff] [blame]2521mbedtls_x509_crt_verify_chain:"data_files/server8.crt data_files/test-int-ca2.crt":"data_files/test-ca.crt":MBEDTLS_X509_BADCERT_BAD_PK|MBEDTLS_X509_BADCERT_BAD_KEY:MBEDTLS_ERR_X509_CERT_VERIFY_FAILED:"rsa3072":0
Manuel Pégourié-Gonnard6622fed2017-05-23 11:29:29 +0200[diff] [blame]2522
2523X509 CRT verify chain #17 (SHA-512 profile)
Manuel Pégourié-Gonnard43be6cd2017-06-20 09:53:42 +0200[diff] [blame]2524depends_on:MBEDTLS_SHA256_C:MBEDTLS_RSA_C:MBEDTLS_PKCS1_V15:MBEDTLS_ECDSA_C:MBEDTLS_ECP_DP_SECP256R1_ENABLED:MBEDTLS_ECP_DP_SECP384R1_ENABLED
Manuel Pégourié-Gonnard6b9d53f2017-05-23 12:26:58 +0200[diff] [blame]2525mbedtls_x509_crt_verify_chain:"data_files/server7.crt data_files/test-int-ca.crt":"data_files/test-ca2.crt":MBEDTLS_X509_BADCERT_BAD_MD:MBEDTLS_ERR_X509_CERT_VERIFY_FAILED:"sha512":0
Manuel Pégourié-Gonnard6622fed2017-05-23 11:29:29 +0200[diff] [blame]2526
Manuel Pégourié-Gonnard41859782017-05-23 12:58:53 +0200[diff] [blame]2527X509 CRT verify chain #18 (len=1, vrfy fatal on depth 1)
2528depends_on:MBEDTLS_SHA256_C:MBEDTLS_ECDSA_C:MBEDTLS_ECP_DP_SECP256R1_ENABLED:MBEDTLS_ECP_DP_SECP384R1_ENABLED:MBEDTLS_SHA512_C
2529mbedtls_x509_crt_verify_chain:"data_files/server5.crt":"data_files/test-ca2.crt":-1:-2:"":2
2530
2531X509 CRT verify chain #19 (len=0, vrfy fatal on depth 0)
2532depends_on:MBEDTLS_SHA256_C:MBEDTLS_ECDSA_C:MBEDTLS_ECP_DP_SECP256R1_ENABLED:MBEDTLS_ECP_DP_SECP384R1_ENABLED:MBEDTLS_SHA512_C
2533mbedtls_x509_crt_verify_chain:"data_files/server5.crt":"data_files/test-ca2.crt":-1:-1:"":1
2534
2535X509 CRT verify chain #20 (len=1, vrfy fatal on depth 0)
2536depends_on:MBEDTLS_SHA256_C:MBEDTLS_ECDSA_C:MBEDTLS_ECP_DP_SECP256R1_ENABLED:MBEDTLS_ECP_DP_SECP384R1_ENABLED:MBEDTLS_SHA512_C:MBEDTLS_SHA1_C:MBEDTLS_RSA_C
2537mbedtls_x509_crt_verify_chain:"data_files/server5.crt":"data_files/test-ca.crt":-1:-1:"":1
2538
2539X509 CRT verify chain #21 (len=3, vrfy fatal on depth 3)
2540depends_on:MBEDTLS_SHA256_C:MBEDTLS_ECDSA_C:MBEDTLS_ECP_DP_SECP256R1_ENABLED:MBEDTLS_RSA_C:MBEDTLS_PKCS1_V15:MBEDTLS_SHA1_C:MBEDTLS_ECP_DP_SECP384R1_ENABLED
2541mbedtls_x509_crt_verify_chain:"data_files/server10_int3_int-ca2_ca.crt":"data_files/test-ca.crt":-1:-4:"":8
2542
2543X509 CRT verify chain #22 (len=3, vrfy fatal on depth 2)
2544depends_on:MBEDTLS_SHA256_C:MBEDTLS_ECDSA_C:MBEDTLS_ECP_DP_SECP256R1_ENABLED:MBEDTLS_RSA_C:MBEDTLS_SHA1_C:MBEDTLS_ECP_DP_SECP384R1_ENABLED
2545mbedtls_x509_crt_verify_chain:"data_files/server10_int3_int-ca2_ca.crt":"data_files/test-ca.crt":-1:-3:"":4
2546
2547X509 CRT verify chain #23 (len=3, vrfy fatal on depth 1)
2548depends_on:MBEDTLS_SHA256_C:MBEDTLS_ECDSA_C:MBEDTLS_ECP_DP_SECP256R1_ENABLED:MBEDTLS_RSA_C:MBEDTLS_SHA1_C:MBEDTLS_ECP_DP_SECP384R1_ENABLED
2549mbedtls_x509_crt_verify_chain:"data_files/server10_int3_int-ca2_ca.crt":"data_files/test-ca.crt":-1:-2:"":2
2550
2551X509 CRT verify chain #24 (len=3, vrfy fatal on depth 0)
2552depends_on:MBEDTLS_SHA256_C:MBEDTLS_ECDSA_C:MBEDTLS_ECP_DP_SECP256R1_ENABLED:MBEDTLS_RSA_C:MBEDTLS_SHA1_C:MBEDTLS_ECP_DP_SECP384R1_ENABLED
2553mbedtls_x509_crt_verify_chain:"data_files/server10_int3_int-ca2_ca.crt":"data_files/test-ca.crt":-1:-1:"":1
2554
2555X509 CRT verify chain #25 (len=3, vrfy fatal on depth 3, untrusted)
2556depends_on:MBEDTLS_SHA256_C:MBEDTLS_ECDSA_C:MBEDTLS_ECP_DP_SECP256R1_ENABLED:MBEDTLS_RSA_C:MBEDTLS_SHA1_C:MBEDTLS_ECP_DP_SECP384R1_ENABLED
2557mbedtls_x509_crt_verify_chain:"data_files/server10_int3_int-ca2_ca.crt":"data_files/test-ca2.crt":-1:-4:"":8
2558
Manuel Pégourié-Gonnard7afdb882014-03-28 16:06:35 +0100[diff] [blame]2559X509 OID description #1
Hanno Becker32b48ea2019-06-03 09:48:09 +0100[diff] [blame]2560x509_oid_desc:"2b06010505070301":"TLS Web Server Authentication"
Manuel Pégourié-Gonnard7afdb882014-03-28 16:06:35 +0100[diff] [blame]2561
2562X509 OID description #2
Hanno Becker32b48ea2019-06-03 09:48:09 +0100[diff] [blame]2563x509_oid_desc:"2b0601050507030f":"notfound"
Manuel Pégourié-Gonnard7afdb882014-03-28 16:06:35 +0100[diff] [blame]2564
2565X509 OID description #3
Hanno Becker32b48ea2019-06-03 09:48:09 +0100[diff] [blame]2566x509_oid_desc:"2b0601050507030100":"notfound"
Manuel Pégourié-Gonnard7afdb882014-03-28 16:06:35 +0100[diff] [blame]2567
2568X509 OID numstring #1 (wide buffer)
Hanno Becker32b48ea2019-06-03 09:48:09 +0100[diff] [blame]2569x509_oid_numstr:"2b06010505070301":"1.3.6.1.5.5.7.3.1":20:17
Manuel Pégourié-Gonnard7afdb882014-03-28 16:06:35 +0100[diff] [blame]2570
2571X509 OID numstring #2 (buffer just fits)
Hanno Becker32b48ea2019-06-03 09:48:09 +0100[diff] [blame]2572x509_oid_numstr:"2b06010505070301":"1.3.6.1.5.5.7.3.1":18:17
Manuel Pégourié-Gonnard7afdb882014-03-28 16:06:35 +0100[diff] [blame]2573
2574X509 OID numstring #3 (buffer too small)
Hanno Becker32b48ea2019-06-03 09:48:09 +0100[diff] [blame]2575x509_oid_numstr:"2b06010505070301":"1.3.6.1.5.5.7.3.1":17:MBEDTLS_ERR_OID_BUF_TOO_SMALL
Manuel Pégourié-Gonnard7afdb882014-03-28 16:06:35 +0100[diff] [blame]2576
2577X509 OID numstring #4 (larger number)
Hanno Becker32b48ea2019-06-03 09:48:09 +0100[diff] [blame]2578x509_oid_numstr:"2a864886f70d":"1.2.840.113549":15:14
Manuel Pégourié-Gonnard7afdb882014-03-28 16:06:35 +0100[diff] [blame]2579
2580X509 OID numstring #5 (arithmetic overflow)
David Horstmanne8ef6ad2023-02-20 14:57:47 +0000[diff] [blame]2581x509_oid_numstr:"2a8648f9f8f7f6f5f4f3f2f1f001":"":100:MBEDTLS_ERR_ASN1_INVALID_DATA
Manuel Pégourié-Gonnard603116c2014-04-09 09:50:03 +0200[diff] [blame]2582
Hanno Becker2389d162019-02-14 12:52:47 +0000[diff] [blame]2583X509 CRT keyUsage #1 (no extension, expected KU)
palaviva07ecda2016-08-07 11:15:29 +0300[diff] [blame]2584depends_on:MBEDTLS_RSA_C:MBEDTLS_SHA1_C
Manuel Pégourié-Gonnarde6028c92015-04-20 12:19:02 +0100[diff] [blame]2585x509_check_key_usage:"data_files/server1.crt":MBEDTLS_X509_KU_DIGITAL_SIGNATURE|MBEDTLS_X509_KU_KEY_ENCIPHERMENT:0
Manuel Pégourié-Gonnard603116c2014-04-09 09:50:03 +0200[diff] [blame]2586
Hanno Becker2389d162019-02-14 12:52:47 +0000[diff] [blame]2587X509 CRT keyUsage #2 (no extension, surprising KU)
palaviva07ecda2016-08-07 11:15:29 +0300[diff] [blame]2588depends_on:MBEDTLS_RSA_C:MBEDTLS_SHA1_C
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200[diff] [blame]2589x509_check_key_usage:"data_files/server1.crt":MBEDTLS_X509_KU_KEY_CERT_SIGN:0
Manuel Pégourié-Gonnard603116c2014-04-09 09:50:03 +0200[diff] [blame]2590
Hanno Becker2389d162019-02-14 12:52:47 +0000[diff] [blame]2591X509 CRT keyUsage #3 (extension present, no KU)
palaviva07ecda2016-08-07 11:15:29 +0300[diff] [blame]2592depends_on:MBEDTLS_RSA_C:MBEDTLS_SHA1_C
Manuel Pégourié-Gonnard603116c2014-04-09 09:50:03 +0200[diff] [blame]2593x509_check_key_usage:"data_files/server1.key_usage.crt":0:0
2594
Hanno Becker2389d162019-02-14 12:52:47 +0000[diff] [blame]2595X509 CRT keyUsage #4 (extension present, single KU present)
palaviva07ecda2016-08-07 11:15:29 +0300[diff] [blame]2596depends_on:MBEDTLS_RSA_C:MBEDTLS_SHA1_C
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200[diff] [blame]2597x509_check_key_usage:"data_files/server1.key_usage.crt":MBEDTLS_X509_KU_DIGITAL_SIGNATURE:0
Manuel Pégourié-Gonnard603116c2014-04-09 09:50:03 +0200[diff] [blame]2598
Hanno Becker2389d162019-02-14 12:52:47 +0000[diff] [blame]2599X509 CRT keyUsage #5 (extension present, single KU absent)
palaviva07ecda2016-08-07 11:15:29 +0300[diff] [blame]2600depends_on:MBEDTLS_RSA_C:MBEDTLS_SHA1_C
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200[diff] [blame]2601x509_check_key_usage:"data_files/server1.key_usage.crt":MBEDTLS_X509_KU_KEY_CERT_SIGN:MBEDTLS_ERR_X509_BAD_INPUT_DATA
Manuel Pégourié-Gonnard603116c2014-04-09 09:50:03 +0200[diff] [blame]2602
Hanno Becker2389d162019-02-14 12:52:47 +0000[diff] [blame]2603X509 CRT keyUsage #6 (extension present, combined KU present)
palaviva07ecda2016-08-07 11:15:29 +0300[diff] [blame]2604depends_on:MBEDTLS_RSA_C:MBEDTLS_SHA1_C
Manuel Pégourié-Gonnarde6028c92015-04-20 12:19:02 +0100[diff] [blame]2605x509_check_key_usage:"data_files/server1.key_usage.crt":MBEDTLS_X509_KU_DIGITAL_SIGNATURE|MBEDTLS_X509_KU_KEY_ENCIPHERMENT:0
Manuel Pégourié-Gonnard603116c2014-04-09 09:50:03 +0200[diff] [blame]2606
Hanno Becker2389d162019-02-14 12:52:47 +0000[diff] [blame]2607X509 CRT keyUsage #7 (extension present, combined KU both absent)
palaviva07ecda2016-08-07 11:15:29 +0300[diff] [blame]2608depends_on:MBEDTLS_RSA_C:MBEDTLS_SHA1_C
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200[diff] [blame]2609x509_check_key_usage:"data_files/server1.key_usage.crt":MBEDTLS_X509_KU_KEY_CERT_SIGN|MBEDTLS_X509_KU_CRL_SIGN:MBEDTLS_ERR_X509_BAD_INPUT_DATA
Manuel Pégourié-Gonnard603116c2014-04-09 09:50:03 +0200[diff] [blame]2610
Hanno Becker2389d162019-02-14 12:52:47 +0000[diff] [blame]2611X509 CRT keyUsage #8 (extension present, combined KU one absent)
palaviva07ecda2016-08-07 11:15:29 +0300[diff] [blame]2612depends_on:MBEDTLS_RSA_C:MBEDTLS_SHA1_C
Manuel Pégourié-Gonnarde6028c92015-04-20 12:19:02 +0100[diff] [blame]2613x509_check_key_usage:"data_files/server1.key_usage.crt":MBEDTLS_X509_KU_KEY_ENCIPHERMENT|MBEDTLS_X509_KU_KEY_AGREEMENT:MBEDTLS_ERR_X509_BAD_INPUT_DATA
Manuel Pégourié-Gonnard603116c2014-04-09 09:50:03 +0200[diff] [blame]2614
Hanno Becker2389d162019-02-14 12:52:47 +0000[diff] [blame]2615X509 CRT keyUsage #9 (extension present, decOnly allowed absent)
palaviva07ecda2016-08-07 11:15:29 +0300[diff] [blame]2616depends_on:MBEDTLS_RSA_C:MBEDTLS_SHA1_C
Manuel Pégourié-Gonnard655a9642015-06-23 10:48:44 +0200[diff] [blame]2617x509_check_key_usage:"data_files/server1.key_usage.crt":MBEDTLS_X509_KU_DIGITAL_SIGNATURE|MBEDTLS_X509_KU_KEY_ENCIPHERMENT|MBEDTLS_X509_KU_DECIPHER_ONLY:0
2618
Hanno Becker2389d162019-02-14 12:52:47 +0000[diff] [blame]2619X509 CRT keyUsage #10 (extension present, decOnly non-allowed present)
palaviva07ecda2016-08-07 11:15:29 +0300[diff] [blame]2620depends_on:MBEDTLS_RSA_C:MBEDTLS_SHA1_C
Manuel Pégourié-Gonnard655a9642015-06-23 10:48:44 +0200[diff] [blame]2621x509_check_key_usage:"data_files/keyUsage.decipherOnly.crt":MBEDTLS_X509_KU_DIGITAL_SIGNATURE|MBEDTLS_X509_KU_KEY_ENCIPHERMENT:MBEDTLS_ERR_X509_BAD_INPUT_DATA
2622
Hanno Becker2389d162019-02-14 12:52:47 +0000[diff] [blame]2623X509 CRT keyUsage #11 (extension present, decOnly allowed present)
palaviva07ecda2016-08-07 11:15:29 +0300[diff] [blame]2624depends_on:MBEDTLS_RSA_C:MBEDTLS_SHA1_C
Manuel Pégourié-Gonnard655a9642015-06-23 10:48:44 +0200[diff] [blame]2625x509_check_key_usage:"data_files/keyUsage.decipherOnly.crt":MBEDTLS_X509_KU_DIGITAL_SIGNATURE|MBEDTLS_X509_KU_KEY_ENCIPHERMENT|MBEDTLS_X509_KU_DECIPHER_ONLY:0
2626
Hanno Becker2389d162019-02-14 12:52:47 +0000[diff] [blame]2627X509 CRT extendedKeyUsage #1 (no extension, serverAuth)
Manuel Pégourié-Gonnard43be6cd2017-06-20 09:53:42 +0200[diff] [blame]2628depends_on:MBEDTLS_ECDSA_C:MBEDTLS_ECP_DP_SECP256R1_ENABLED:MBEDTLS_SHA256_C
Hanno Becker32b48ea2019-06-03 09:48:09 +0100[diff] [blame]2629x509_check_extended_key_usage:"data_files/server5.crt":"2b06010505070301":0
Manuel Pégourié-Gonnard7afb8a02014-04-10 17:53:56 +0200[diff] [blame]2630
Hanno Becker2389d162019-02-14 12:52:47 +0000[diff] [blame]2631X509 CRT extendedKeyUsage #2 (single value, present)
Manuel Pégourié-Gonnard43be6cd2017-06-20 09:53:42 +0200[diff] [blame]2632depends_on:MBEDTLS_ECDSA_C:MBEDTLS_ECP_DP_SECP256R1_ENABLED:MBEDTLS_SHA256_C
Hanno Becker32b48ea2019-06-03 09:48:09 +0100[diff] [blame]2633x509_check_extended_key_usage:"data_files/server5.eku-srv.crt":"2b06010505070301":0
Manuel Pégourié-Gonnard7afb8a02014-04-10 17:53:56 +0200[diff] [blame]2634
Hanno Becker2389d162019-02-14 12:52:47 +0000[diff] [blame]2635X509 CRT extendedKeyUsage #3 (single value, absent)
Manuel Pégourié-Gonnard43be6cd2017-06-20 09:53:42 +0200[diff] [blame]2636depends_on:MBEDTLS_ECDSA_C:MBEDTLS_ECP_DP_SECP256R1_ENABLED:MBEDTLS_SHA256_C
Hanno Becker32b48ea2019-06-03 09:48:09 +0100[diff] [blame]2637x509_check_extended_key_usage:"data_files/server5.eku-cli.crt":"2b06010505070301":MBEDTLS_ERR_X509_BAD_INPUT_DATA
Manuel Pégourié-Gonnard7afb8a02014-04-10 17:53:56 +0200[diff] [blame]2638
Hanno Becker2389d162019-02-14 12:52:47 +0000[diff] [blame]2639X509 CRT extendedKeyUsage #4 (two values, first)
Manuel Pégourié-Gonnard43be6cd2017-06-20 09:53:42 +0200[diff] [blame]2640depends_on:MBEDTLS_ECDSA_C:MBEDTLS_ECP_DP_SECP256R1_ENABLED:MBEDTLS_SHA256_C
Hanno Becker32b48ea2019-06-03 09:48:09 +0100[diff] [blame]2641x509_check_extended_key_usage:"data_files/server5.eku-srv_cli.crt":"2b06010505070301":0
Manuel Pégourié-Gonnard7afb8a02014-04-10 17:53:56 +0200[diff] [blame]2642
Hanno Becker2389d162019-02-14 12:52:47 +0000[diff] [blame]2643X509 CRT extendedKeyUsage #5 (two values, second)
Manuel Pégourié-Gonnard43be6cd2017-06-20 09:53:42 +0200[diff] [blame]2644depends_on:MBEDTLS_ECDSA_C:MBEDTLS_ECP_DP_SECP256R1_ENABLED:MBEDTLS_SHA256_C
Hanno Becker32b48ea2019-06-03 09:48:09 +0100[diff] [blame]2645x509_check_extended_key_usage:"data_files/server5.eku-srv_cli.crt":"2b06010505070302":0
Manuel Pégourié-Gonnard7afb8a02014-04-10 17:53:56 +0200[diff] [blame]2646
Hanno Becker2389d162019-02-14 12:52:47 +0000[diff] [blame]2647X509 CRT extendedKeyUsage #6 (two values, other)
Manuel Pégourié-Gonnard43be6cd2017-06-20 09:53:42 +0200[diff] [blame]2648depends_on:MBEDTLS_ECDSA_C:MBEDTLS_ECP_DP_SECP256R1_ENABLED:MBEDTLS_SHA256_C
Hanno Becker32b48ea2019-06-03 09:48:09 +0100[diff] [blame]2649x509_check_extended_key_usage:"data_files/server5.eku-srv_cli.crt":"2b06010505070303":MBEDTLS_ERR_X509_BAD_INPUT_DATA
Manuel Pégourié-Gonnard7afb8a02014-04-10 17:53:56 +0200[diff] [blame]2650
Hanno Becker2389d162019-02-14 12:52:47 +0000[diff] [blame]2651X509 CRT extendedKeyUsage #7 (any, random)
Manuel Pégourié-Gonnard43be6cd2017-06-20 09:53:42 +0200[diff] [blame]2652depends_on:MBEDTLS_ECDSA_C:MBEDTLS_ECP_DP_SECP256R1_ENABLED:MBEDTLS_SHA256_C
Hanno Becker32b48ea2019-06-03 09:48:09 +0100[diff] [blame]2653x509_check_extended_key_usage:"data_files/server5.eku-cs_any.crt":"2b060105050703ff":0
Manuel Pégourié-Gonnard7afb8a02014-04-10 17:53:56 +0200[diff] [blame]2654
Manuel Pégourié-Gonnard85403692014-06-06 14:48:38 +0200[diff] [blame]2655X509 RSASSA-PSS parameters ASN1 (good, all defaults)
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200[diff] [blame]2656x509_parse_rsassa_pss_params:"":MBEDTLS_ASN1_CONSTRUCTED | MBEDTLS_ASN1_SEQUENCE:MBEDTLS_MD_SHA1:MBEDTLS_MD_SHA1:20:0
Manuel Pégourié-Gonnard85403692014-06-06 14:48:38 +0200[diff] [blame]2657
2658X509 RSASSA-PSS parameters ASN1 (wrong initial tag)
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200[diff] [blame]2659x509_parse_rsassa_pss_params:"":MBEDTLS_ASN1_SEQUENCE:MBEDTLS_MD_SHA1:MBEDTLS_MD_SHA1:20:MBEDTLS_ERR_X509_INVALID_ALG + MBEDTLS_ERR_ASN1_UNEXPECTED_TAG
Manuel Pégourié-Gonnard85403692014-06-06 14:48:38 +0200[diff] [blame]2660
2661X509 RSASSA-PSS parameters ASN1 (unknown tag in top-level sequence)
Hanno Becker32b48ea2019-06-03 09:48:09 +0100[diff] [blame]2662x509_parse_rsassa_pss_params:"a400":MBEDTLS_ASN1_CONSTRUCTED | MBEDTLS_ASN1_SEQUENCE:MBEDTLS_MD_SHA1:MBEDTLS_MD_SHA1:20:MBEDTLS_ERR_X509_INVALID_ALG + MBEDTLS_ERR_ASN1_LENGTH_MISMATCH
Manuel Pégourié-Gonnard85403692014-06-06 14:48:38 +0200[diff] [blame]2663
2664X509 RSASSA-PSS parameters ASN1 (good, HashAlg SHA256)
palaviva07ecda2016-08-07 11:15:29 +0300[diff] [blame]2665depends_on:MBEDTLS_RSA_C:MBEDTLS_SHA256_C
Hanno Becker32b48ea2019-06-03 09:48:09 +0100[diff] [blame]2666x509_parse_rsassa_pss_params:"a00d300b0609608648016503040201":MBEDTLS_ASN1_CONSTRUCTED | MBEDTLS_ASN1_SEQUENCE:MBEDTLS_MD_SHA256:MBEDTLS_MD_SHA1:20:0
Manuel Pégourié-Gonnard85403692014-06-06 14:48:38 +0200[diff] [blame]2667
2668X509 RSASSA-PSS parameters ASN1 (good, explicit HashAlg = default)
palaviva07ecda2016-08-07 11:15:29 +0300[diff] [blame]2669depends_on:MBEDTLS_RSA_C:MBEDTLS_SHA1_C
Hanno Becker32b48ea2019-06-03 09:48:09 +0100[diff] [blame]2670x509_parse_rsassa_pss_params:"a009300706052b0e03021a":MBEDTLS_ASN1_CONSTRUCTED | MBEDTLS_ASN1_SEQUENCE:MBEDTLS_MD_SHA1:MBEDTLS_MD_SHA1:20:0
Manuel Pégourié-Gonnard85403692014-06-06 14:48:38 +0200[diff] [blame]2671
2672X509 RSASSA-PSS parameters ASN1 (HashAlg wrong len #1)
Hanno Becker32b48ea2019-06-03 09:48:09 +0100[diff] [blame]2673x509_parse_rsassa_pss_params:"a00a300706052b0e03021a":MBEDTLS_ASN1_CONSTRUCTED | MBEDTLS_ASN1_SEQUENCE:MBEDTLS_MD_SHA1:MBEDTLS_MD_SHA1:20:MBEDTLS_ERR_X509_INVALID_ALG + MBEDTLS_ERR_ASN1_OUT_OF_DATA
Manuel Pégourié-Gonnard85403692014-06-06 14:48:38 +0200[diff] [blame]2674
2675X509 RSASSA-PSS parameters ASN1 (HashAlg wrong len #2)
palaviva07ecda2016-08-07 11:15:29 +0300[diff] [blame]2676depends_on:MBEDTLS_RSA_C:MBEDTLS_SHA1_C
Hanno Becker32b48ea2019-06-03 09:48:09 +0100[diff] [blame]2677x509_parse_rsassa_pss_params:"a00a300706052b0e03021a00":MBEDTLS_ASN1_CONSTRUCTED | MBEDTLS_ASN1_SEQUENCE:MBEDTLS_MD_SHA1:MBEDTLS_MD_SHA1:20:MBEDTLS_ERR_X509_INVALID_ALG + MBEDTLS_ERR_ASN1_LENGTH_MISMATCH
Manuel Pégourié-Gonnard85403692014-06-06 14:48:38 +0200[diff] [blame]2678
2679X509 RSASSA-PSS parameters ASN1 (HashAlg with parameters)
Hanno Becker32b48ea2019-06-03 09:48:09 +0100[diff] [blame]2680x509_parse_rsassa_pss_params:"a00f300d06096086480165030402013000":MBEDTLS_ASN1_CONSTRUCTED | MBEDTLS_ASN1_SEQUENCE:MBEDTLS_MD_SHA256:MBEDTLS_MD_SHA1:20:MBEDTLS_ERR_X509_INVALID_ALG + MBEDTLS_ERR_ASN1_INVALID_DATA
Manuel Pégourié-Gonnard85403692014-06-06 14:48:38 +0200[diff] [blame]2681
Paul Bakker237a8472014-06-25 14:45:24 +0200[diff] [blame]2682X509 RSASSA-PSS parameters ASN1 (HashAlg unknown OID)
Hanno Becker32b48ea2019-06-03 09:48:09 +0100[diff] [blame]2683x509_parse_rsassa_pss_params:"a00d300b06096086480165030402ff":MBEDTLS_ASN1_CONSTRUCTED | MBEDTLS_ASN1_SEQUENCE:MBEDTLS_MD_SHA256:MBEDTLS_MD_SHA1:20:MBEDTLS_ERR_X509_INVALID_ALG + MBEDTLS_ERR_OID_NOT_FOUND
Manuel Pégourié-Gonnard85403692014-06-06 14:48:38 +0200[diff] [blame]2684
2685X509 RSASSA-PSS parameters ASN1 (good, MGAlg = MGF1-SHA256)
palaviva07ecda2016-08-07 11:15:29 +0300[diff] [blame]2686depends_on:MBEDTLS_RSA_C:MBEDTLS_SHA256_C
Hanno Becker32b48ea2019-06-03 09:48:09 +0100[diff] [blame]2687x509_parse_rsassa_pss_params:"a11a301806092a864886f70d010108300b0609608648016503040201":MBEDTLS_ASN1_CONSTRUCTED | MBEDTLS_ASN1_SEQUENCE:MBEDTLS_MD_SHA1:MBEDTLS_MD_SHA256:20:0
Manuel Pégourié-Gonnard85403692014-06-06 14:48:38 +0200[diff] [blame]2688
2689X509 RSASSA-PSS parameters ASN1 (good, explicit MGAlg = default)
palaviva07ecda2016-08-07 11:15:29 +0300[diff] [blame]2690depends_on:MBEDTLS_RSA_C:MBEDTLS_SHA1_C
Hanno Becker32b48ea2019-06-03 09:48:09 +0100[diff] [blame]2691x509_parse_rsassa_pss_params:"a116301406092a864886f70d010108300706052b0e03021a":MBEDTLS_ASN1_CONSTRUCTED | MBEDTLS_ASN1_SEQUENCE:MBEDTLS_MD_SHA1:MBEDTLS_MD_SHA1:20:0
Manuel Pégourié-Gonnard85403692014-06-06 14:48:38 +0200[diff] [blame]2692
2693X509 RSASSA-PSS parameters ASN1 (MGAlg wrong len #1)
Hanno Becker32b48ea2019-06-03 09:48:09 +0100[diff] [blame]2694x509_parse_rsassa_pss_params:"a11b301806092a864886f70d010108300b0609608648016503040201":MBEDTLS_ASN1_CONSTRUCTED | MBEDTLS_ASN1_SEQUENCE:MBEDTLS_MD_SHA1:MBEDTLS_MD_SHA256:20:MBEDTLS_ERR_X509_INVALID_ALG + MBEDTLS_ERR_ASN1_OUT_OF_DATA
Manuel Pégourié-Gonnard85403692014-06-06 14:48:38 +0200[diff] [blame]2695
2696X509 RSASSA-PSS parameters ASN1 (MGAlg wrong len #2)
palaviva07ecda2016-08-07 11:15:29 +0300[diff] [blame]2697depends_on:MBEDTLS_RSA_C:MBEDTLS_SHA256_C
Hanno Becker32b48ea2019-06-03 09:48:09 +0100[diff] [blame]2698x509_parse_rsassa_pss_params:"a11b301806092a864886f70d010108300b060960864801650304020100":MBEDTLS_ASN1_CONSTRUCTED | MBEDTLS_ASN1_SEQUENCE:MBEDTLS_MD_SHA1:MBEDTLS_MD_SHA256:20:MBEDTLS_ERR_X509_INVALID_ALG + MBEDTLS_ERR_ASN1_LENGTH_MISMATCH
Manuel Pégourié-Gonnard85403692014-06-06 14:48:38 +0200[diff] [blame]2699
2700X509 RSASSA-PSS parameters ASN1 (MGAlg AlgId wrong len #1)
Hanno Becker32b48ea2019-06-03 09:48:09 +0100[diff] [blame]2701x509_parse_rsassa_pss_params:"a11a301906092a864886f70d010108300b0609608648016503040201":MBEDTLS_ASN1_CONSTRUCTED | MBEDTLS_ASN1_SEQUENCE:MBEDTLS_MD_SHA1:MBEDTLS_MD_SHA256:20:MBEDTLS_ERR_X509_INVALID_ALG + MBEDTLS_ERR_ASN1_OUT_OF_DATA
Manuel Pégourié-Gonnard85403692014-06-06 14:48:38 +0200[diff] [blame]2702
2703X509 RSASSA-PSS parameters ASN1 (MGAlg OID != MGF1)
Hanno Becker32b48ea2019-06-03 09:48:09 +0100[diff] [blame]2704x509_parse_rsassa_pss_params:"a11a301806092a864886f70d010109300b0609608648016503040201":MBEDTLS_ASN1_CONSTRUCTED | MBEDTLS_ASN1_SEQUENCE:MBEDTLS_MD_SHA1:MBEDTLS_MD_SHA256:20:MBEDTLS_ERR_X509_FEATURE_UNAVAILABLE + MBEDTLS_ERR_OID_NOT_FOUND
Manuel Pégourié-Gonnard85403692014-06-06 14:48:38 +0200[diff] [blame]2705
2706X509 RSASSA-PSS parameters ASN1 (MGAlg.params wrong tag)
Hanno Becker32b48ea2019-06-03 09:48:09 +0100[diff] [blame]2707x509_parse_rsassa_pss_params:"a11a301806092a864886f70d010108310b0609608648016503040201":MBEDTLS_ASN1_CONSTRUCTED | MBEDTLS_ASN1_SEQUENCE:MBEDTLS_MD_SHA1:MBEDTLS_MD_SHA256:20:MBEDTLS_ERR_X509_INVALID_ALG + MBEDTLS_ERR_ASN1_UNEXPECTED_TAG
Manuel Pégourié-Gonnard85403692014-06-06 14:48:38 +0200[diff] [blame]2708
2709X509 RSASSA-PSS parameters ASN1 (MGAlg.params wrong len #1a)
Hanno Becker32b48ea2019-06-03 09:48:09 +0100[diff] [blame]2710x509_parse_rsassa_pss_params:"a10f300d06092a864886f70d0101083000":MBEDTLS_ASN1_CONSTRUCTED | MBEDTLS_ASN1_SEQUENCE:MBEDTLS_MD_SHA1:MBEDTLS_MD_SHA256:20:MBEDTLS_ERR_X509_INVALID_ALG + MBEDTLS_ERR_ASN1_OUT_OF_DATA
Manuel Pégourié-Gonnard85403692014-06-06 14:48:38 +0200[diff] [blame]2711
2712X509 RSASSA-PSS parameters ASN1 (MGAlg.params wrong len #1b)
Hanno Becker32b48ea2019-06-03 09:48:09 +0100[diff] [blame]2713x509_parse_rsassa_pss_params:"a11b301906092a864886f70d010108300c0609608648016503040201":MBEDTLS_ASN1_CONSTRUCTED | MBEDTLS_ASN1_SEQUENCE:MBEDTLS_MD_SHA1:MBEDTLS_MD_SHA256:20:MBEDTLS_ERR_X509_INVALID_ALG + MBEDTLS_ERR_ASN1_OUT_OF_DATA
Manuel Pégourié-Gonnard85403692014-06-06 14:48:38 +0200[diff] [blame]2714
2715X509 RSASSA-PSS parameters ASN1 (MGAlg.params.alg not an OID)
Hanno Becker32b48ea2019-06-03 09:48:09 +0100[diff] [blame]2716x509_parse_rsassa_pss_params:"a11a301806092a864886f70d010108300b0709608648016503040201":MBEDTLS_ASN1_CONSTRUCTED | MBEDTLS_ASN1_SEQUENCE:MBEDTLS_MD_SHA1:MBEDTLS_MD_SHA256:20:MBEDTLS_ERR_X509_INVALID_ALG + MBEDTLS_ERR_ASN1_UNEXPECTED_TAG
Manuel Pégourié-Gonnard85403692014-06-06 14:48:38 +0200[diff] [blame]2717
2718X509 RSASSA-PSS parameters ASN1 (MGAlg.params.alg unknown OID)
Hanno Becker32b48ea2019-06-03 09:48:09 +0100[diff] [blame]2719x509_parse_rsassa_pss_params:"a11a301806092a864886f70d010108300b06096086480165030402ff":MBEDTLS_ASN1_CONSTRUCTED | MBEDTLS_ASN1_SEQUENCE:MBEDTLS_MD_SHA1:MBEDTLS_MD_SHA256:20:MBEDTLS_ERR_X509_INVALID_ALG + MBEDTLS_ERR_OID_NOT_FOUND
Manuel Pégourié-Gonnard85403692014-06-06 14:48:38 +0200[diff] [blame]2720
2721X509 RSASSA-PSS parameters ASN1 (MGAlg.params.params NULL)
palaviva07ecda2016-08-07 11:15:29 +0300[diff] [blame]2722depends_on:MBEDTLS_RSA_C:MBEDTLS_SHA256_C
Hanno Becker32b48ea2019-06-03 09:48:09 +0100[diff] [blame]2723x509_parse_rsassa_pss_params:"a11c301a06092a864886f70d010108300d06096086480165030402010500":MBEDTLS_ASN1_CONSTRUCTED | MBEDTLS_ASN1_SEQUENCE:MBEDTLS_MD_SHA1:MBEDTLS_MD_SHA256:20:0
Manuel Pégourié-Gonnard85403692014-06-06 14:48:38 +0200[diff] [blame]2724
2725X509 RSASSA-PSS parameters ASN1 (MGAlg.params.params wrong tag)
palaviva07ecda2016-08-07 11:15:29 +0300[diff] [blame]2726depends_on:MBEDTLS_RSA_C:MBEDTLS_SHA256_C
Hanno Becker32b48ea2019-06-03 09:48:09 +0100[diff] [blame]2727x509_parse_rsassa_pss_params:"a11c301a06092a864886f70d010108300d06096086480165030402013000":MBEDTLS_ASN1_CONSTRUCTED | MBEDTLS_ASN1_SEQUENCE:MBEDTLS_MD_SHA1:MBEDTLS_MD_SHA256:20:MBEDTLS_ERR_X509_INVALID_ALG + MBEDTLS_ERR_ASN1_UNEXPECTED_TAG
Manuel Pégourié-Gonnard85403692014-06-06 14:48:38 +0200[diff] [blame]2728
2729X509 RSASSA-PSS parameters ASN1 (MGAlg.params wrong len #1c)
Hanno Becker32b48ea2019-06-03 09:48:09 +0100[diff] [blame]2730x509_parse_rsassa_pss_params:"a11d301b06092a864886f70d010108300e06096086480165030402010500":MBEDTLS_ASN1_CONSTRUCTED | MBEDTLS_ASN1_SEQUENCE:MBEDTLS_MD_SHA1:MBEDTLS_MD_SHA256:20:MBEDTLS_ERR_X509_INVALID_ALG + MBEDTLS_ERR_ASN1_OUT_OF_DATA
Manuel Pégourié-Gonnard85403692014-06-06 14:48:38 +0200[diff] [blame]2731
2732X509 RSASSA-PSS parameters ASN1 (MGAlg.params wrong len #2)
palaviva07ecda2016-08-07 11:15:29 +0300[diff] [blame]2733depends_on:MBEDTLS_RSA_C:MBEDTLS_SHA256_C
Hanno Becker32b48ea2019-06-03 09:48:09 +0100[diff] [blame]2734x509_parse_rsassa_pss_params:"a11d301b06092a864886f70d010108300e0609608648016503040201050000":MBEDTLS_ASN1_CONSTRUCTED | MBEDTLS_ASN1_SEQUENCE:MBEDTLS_MD_SHA1:MBEDTLS_MD_SHA256:20:MBEDTLS_ERR_X509_INVALID_ALG + MBEDTLS_ERR_ASN1_LENGTH_MISMATCH
Manuel Pégourié-Gonnard85403692014-06-06 14:48:38 +0200[diff] [blame]2735
2736X509 RSASSA-PSS parameters ASN1 (good, saltLen = 94)
Hanno Becker32b48ea2019-06-03 09:48:09 +0100[diff] [blame]2737x509_parse_rsassa_pss_params:"a20302015e":MBEDTLS_ASN1_CONSTRUCTED | MBEDTLS_ASN1_SEQUENCE:MBEDTLS_MD_SHA1:MBEDTLS_MD_SHA1:94:0
Manuel Pégourié-Gonnard85403692014-06-06 14:48:38 +0200[diff] [blame]2738
2739X509 RSASSA-PSS parameters ASN1 (good, explicit saltLen = default)
Hanno Becker32b48ea2019-06-03 09:48:09 +0100[diff] [blame]2740x509_parse_rsassa_pss_params:"a203020114":MBEDTLS_ASN1_CONSTRUCTED | MBEDTLS_ASN1_SEQUENCE:MBEDTLS_MD_SHA1:MBEDTLS_MD_SHA1:20:0
Manuel Pégourié-Gonnard85403692014-06-06 14:48:38 +0200[diff] [blame]2741
2742X509 RSASSA-PSS parameters ASN1 (saltLen wrong len #1)
Hanno Becker32b48ea2019-06-03 09:48:09 +0100[diff] [blame]2743x509_parse_rsassa_pss_params:"a20402015e":MBEDTLS_ASN1_CONSTRUCTED | MBEDTLS_ASN1_SEQUENCE:MBEDTLS_MD_SHA1:MBEDTLS_MD_SHA1:94:MBEDTLS_ERR_X509_INVALID_ALG + MBEDTLS_ERR_ASN1_OUT_OF_DATA
Manuel Pégourié-Gonnard85403692014-06-06 14:48:38 +0200[diff] [blame]2744
2745X509 RSASSA-PSS parameters ASN1 (saltLen wrong len #2)
Hanno Becker32b48ea2019-06-03 09:48:09 +0100[diff] [blame]2746x509_parse_rsassa_pss_params:"a20402015e00":MBEDTLS_ASN1_CONSTRUCTED | MBEDTLS_ASN1_SEQUENCE:MBEDTLS_MD_SHA1:MBEDTLS_MD_SHA1:94:MBEDTLS_ERR_X509_INVALID_ALG + MBEDTLS_ERR_ASN1_LENGTH_MISMATCH
Manuel Pégourié-Gonnard85403692014-06-06 14:48:38 +0200[diff] [blame]2747
2748X509 RSASSA-PSS parameters ASN1 (saltLen not an int)
Hanno Becker32b48ea2019-06-03 09:48:09 +0100[diff] [blame]2749x509_parse_rsassa_pss_params:"a2023000":MBEDTLS_ASN1_CONSTRUCTED | MBEDTLS_ASN1_SEQUENCE:MBEDTLS_MD_SHA1:MBEDTLS_MD_SHA1:94:MBEDTLS_ERR_X509_INVALID_ALG + MBEDTLS_ERR_ASN1_UNEXPECTED_TAG
Manuel Pégourié-Gonnard85403692014-06-06 14:48:38 +0200[diff] [blame]2750
2751X509 RSASSA-PSS parameters ASN1 (good, explicit trailerField = default)
Hanno Becker32b48ea2019-06-03 09:48:09 +0100[diff] [blame]2752x509_parse_rsassa_pss_params:"a303020101":MBEDTLS_ASN1_CONSTRUCTED | MBEDTLS_ASN1_SEQUENCE:MBEDTLS_MD_SHA1:MBEDTLS_MD_SHA1:20:0
Manuel Pégourié-Gonnard85403692014-06-06 14:48:38 +0200[diff] [blame]2753
2754X509 RSASSA-PSS parameters ASN1 (trailerField wrong len #1)
Hanno Becker32b48ea2019-06-03 09:48:09 +0100[diff] [blame]2755x509_parse_rsassa_pss_params:"a304020101":MBEDTLS_ASN1_CONSTRUCTED | MBEDTLS_ASN1_SEQUENCE:MBEDTLS_MD_SHA1:MBEDTLS_MD_SHA1:20:MBEDTLS_ERR_X509_INVALID_ALG + MBEDTLS_ERR_ASN1_OUT_OF_DATA
Manuel Pégourié-Gonnard85403692014-06-06 14:48:38 +0200[diff] [blame]2756
2757X509 RSASSA-PSS parameters ASN1 (trailerField wrong len #2)
Hanno Becker32b48ea2019-06-03 09:48:09 +0100[diff] [blame]2758x509_parse_rsassa_pss_params:"a30402010100":MBEDTLS_ASN1_CONSTRUCTED | MBEDTLS_ASN1_SEQUENCE:MBEDTLS_MD_SHA1:MBEDTLS_MD_SHA1:20:MBEDTLS_ERR_X509_INVALID_ALG + MBEDTLS_ERR_ASN1_LENGTH_MISMATCH
Manuel Pégourié-Gonnard85403692014-06-06 14:48:38 +0200[diff] [blame]2759
2760X509 RSASSA-PSS parameters ASN1 (trailerField not an int)
Hanno Becker32b48ea2019-06-03 09:48:09 +0100[diff] [blame]2761x509_parse_rsassa_pss_params:"a3023000":MBEDTLS_ASN1_CONSTRUCTED | MBEDTLS_ASN1_SEQUENCE:MBEDTLS_MD_SHA1:MBEDTLS_MD_SHA1:20:MBEDTLS_ERR_X509_INVALID_ALG + MBEDTLS_ERR_ASN1_UNEXPECTED_TAG
Manuel Pégourié-Gonnard85403692014-06-06 14:48:38 +0200[diff] [blame]2762
2763X509 RSASSA-PSS parameters ASN1 (trailerField not 1)
Hanno Becker32b48ea2019-06-03 09:48:09 +0100[diff] [blame]2764x509_parse_rsassa_pss_params:"a303020102":MBEDTLS_ASN1_CONSTRUCTED | MBEDTLS_ASN1_SEQUENCE:MBEDTLS_MD_SHA1:MBEDTLS_MD_SHA1:20:MBEDTLS_ERR_X509_INVALID_ALG
Manuel Pégourié-Gonnard85403692014-06-06 14:48:38 +0200[diff] [blame]2765
Manuel Pégourié-Gonnardd77cd5d2014-06-13 11:13:15 +0200[diff] [blame]2766X509 CSR ASN.1 (OK)
Manuel Pégourié-Gonnard43be6cd2017-06-20 09:53:42 +0200[diff] [blame]2767depends_on:MBEDTLS_ECDSA_C:MBEDTLS_ECP_DP_SECP256R1_ENABLED:MBEDTLS_SHA1_C
Hanno Beckerd0d78d72019-02-12 10:20:42 +0000[diff] [blame]2768mbedtls_x509_csr_parse:"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":"CSR version \: 1\nsubject name \: C=NL, O=PolarSSL, CN=localhost\nsigned using \: ECDSA with SHA1\nEC key size \: 256 bits\n":0
Manuel Pégourié-Gonnardd77cd5d2014-06-13 11:13:15 +0200[diff] [blame]2769
2770X509 CSR ASN.1 (bad first tag)
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200[diff] [blame]2771mbedtls_x509_csr_parse:"3100":"":MBEDTLS_ERR_X509_INVALID_FORMAT
Manuel Pégourié-Gonnardd77cd5d2014-06-13 11:13:15 +0200[diff] [blame]2772
2773X509 CSR ASN.1 (bad sequence: overlong)
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200[diff] [blame]2774mbedtls_x509_csr_parse:"3001":"":MBEDTLS_ERR_X509_INVALID_FORMAT
Manuel Pégourié-Gonnardd77cd5d2014-06-13 11:13:15 +0200[diff] [blame]2775
2776X509 CSR ASN.1 (total length mistmatch)
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200[diff] [blame]2777mbedtls_x509_csr_parse:"30010000":"":MBEDTLS_ERR_X509_INVALID_FORMAT + MBEDTLS_ERR_ASN1_LENGTH_MISMATCH
Manuel Pégourié-Gonnardd77cd5d2014-06-13 11:13:15 +0200[diff] [blame]2778
2779X509 CSR ASN.1 (bad CRI: not a sequence)
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200[diff] [blame]2780mbedtls_x509_csr_parse:"30023100":"":MBEDTLS_ERR_X509_INVALID_FORMAT + MBEDTLS_ERR_ASN1_UNEXPECTED_TAG
Manuel Pégourié-Gonnardd77cd5d2014-06-13 11:13:15 +0200[diff] [blame]2781
2782X509 CSR ASN.1 (bad CRI: overlong)
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200[diff] [blame]2783mbedtls_x509_csr_parse:"30023001":"":MBEDTLS_ERR_X509_INVALID_FORMAT + MBEDTLS_ERR_ASN1_OUT_OF_DATA
Manuel Pégourié-Gonnardd77cd5d2014-06-13 11:13:15 +0200[diff] [blame]2784
2785X509 CSR ASN.1 (bad CRI.Version: overlong)
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200[diff] [blame]2786mbedtls_x509_csr_parse:"30053002020100":"":MBEDTLS_ERR_X509_INVALID_VERSION + MBEDTLS_ERR_ASN1_OUT_OF_DATA
Manuel Pégourié-Gonnardd77cd5d2014-06-13 11:13:15 +0200[diff] [blame]2787
2788X509 CSR ASN.1 (bad CRI.Version: not v1)
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200[diff] [blame]2789mbedtls_x509_csr_parse:"30053003020101":"":MBEDTLS_ERR_X509_UNKNOWN_VERSION
Manuel Pégourié-Gonnardd77cd5d2014-06-13 11:13:15 +0200[diff] [blame]2790
2791X509 CSR ASN.1 (bad CRI.Name: not a sequence)
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200[diff] [blame]2792mbedtls_x509_csr_parse:"300730050201003100":"":MBEDTLS_ERR_X509_INVALID_FORMAT + MBEDTLS_ERR_ASN1_UNEXPECTED_TAG
Manuel Pégourié-Gonnardd77cd5d2014-06-13 11:13:15 +0200[diff] [blame]2793
2794X509 CSR ASN.1 (bad CRI.Name: overlong)
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200[diff] [blame]2795mbedtls_x509_csr_parse:"30083005020100300100":"":MBEDTLS_ERR_X509_INVALID_FORMAT + MBEDTLS_ERR_ASN1_OUT_OF_DATA
Manuel Pégourié-Gonnardd77cd5d2014-06-13 11:13:15 +0200[diff] [blame]2796
2797X509 CSR ASN.1 (bad CRI.Name payload: not a set)
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200[diff] [blame]2798mbedtls_x509_csr_parse:"3009300702010030023000":"":MBEDTLS_ERR_X509_INVALID_NAME + MBEDTLS_ERR_ASN1_UNEXPECTED_TAG
Manuel Pégourié-Gonnardd77cd5d2014-06-13 11:13:15 +0200[diff] [blame]2799
2800X509 CSR ASN.1 (bad CRI.Name payload: overlong)
Hanno Becker32b48ea2019-06-03 09:48:09 +0100[diff] [blame]2801mbedtls_x509_csr_parse:"300a30080201003002310100":"":MBEDTLS_ERR_X509_INVALID_NAME + MBEDTLS_ERR_ASN1_OUT_OF_DATA
Manuel Pégourié-Gonnardd77cd5d2014-06-13 11:13:15 +0200[diff] [blame]2802
2803X509 CSR ASN.1 (bad SubjectPublicKeyInfo: missing)
Hanno Becker32b48ea2019-06-03 09:48:09 +0100[diff] [blame]2804mbedtls_x509_csr_parse:"30143012020100300d310b3009060355040613024e4c":"":MBEDTLS_ERR_PK_KEY_INVALID_FORMAT + MBEDTLS_ERR_ASN1_OUT_OF_DATA
Manuel Pégourié-Gonnardd77cd5d2014-06-13 11:13:15 +0200[diff] [blame]2805
2806X509 CSR ASN.1 (bad SubjectPublicKeyInfo: not a sequence)
Hanno Becker32b48ea2019-06-03 09:48:09 +0100[diff] [blame]2807mbedtls_x509_csr_parse:"30163014020100300d310b3009060355040613024e4c3100":"":MBEDTLS_ERR_PK_KEY_INVALID_FORMAT + MBEDTLS_ERR_ASN1_UNEXPECTED_TAG
Manuel Pégourié-Gonnardd77cd5d2014-06-13 11:13:15 +0200[diff] [blame]2808
2809X509 CSR ASN.1 (bad SubjectPublicKeyInfo: overlong)
Hanno Becker32b48ea2019-06-03 09:48:09 +0100[diff] [blame]2810mbedtls_x509_csr_parse:"30173014020100300d310b3009060355040613024e4c300100":"":MBEDTLS_ERR_PK_KEY_INVALID_FORMAT + MBEDTLS_ERR_ASN1_OUT_OF_DATA
Manuel Pégourié-Gonnardd77cd5d2014-06-13 11:13:15 +0200[diff] [blame]2811
2812X509 CSR ASN.1 (bad attributes: missing)
Manuel Pégourié-Gonnard43be6cd2017-06-20 09:53:42 +0200[diff] [blame]2813depends_on:MBEDTLS_ECDSA_C:MBEDTLS_ECP_DP_SECP256R1_ENABLED
Hanno Beckerd0d78d72019-02-12 10:20:42 +0000[diff] [blame]2814mbedtls_x509_csr_parse:"3081973081940201003034310b3009060355040613024e4c3111300f060355040a1308506f6c617253534c31123010060355040313096c6f63616c686f73743059301306072a8648ce3d020106082a8648ce3d0301070342000437cc56d976091e5a723ec7592dff206eee7cf9069174d0ad14b5f768225962924ee500d82311ffea2fd2345d5d16bd8a88c26b770d55cd8a2a0efa01c8b4edff":"":MBEDTLS_ERR_X509_INVALID_FORMAT + MBEDTLS_ERR_ASN1_OUT_OF_DATA
Manuel Pégourié-Gonnardd77cd5d2014-06-13 11:13:15 +0200[diff] [blame]2815
2816X509 CSR ASN.1 (bad attributes: bad tag)
Manuel Pégourié-Gonnard43be6cd2017-06-20 09:53:42 +0200[diff] [blame]2817depends_on:MBEDTLS_ECDSA_C:MBEDTLS_ECP_DP_SECP256R1_ENABLED
Hanno Beckerd0d78d72019-02-12 10:20:42 +0000[diff] [blame]2818mbedtls_x509_csr_parse:"3081993081960201003034310b3009060355040613024e4c3111300f060355040a1308506f6c617253534c31123010060355040313096c6f63616c686f73743059301306072a8648ce3d020106082a8648ce3d0301070342000437cc56d976091e5a723ec7592dff206eee7cf9069174d0ad14b5f768225962924ee500d82311ffea2fd2345d5d16bd8a88c26b770d55cd8a2a0efa01c8b4edff0500":"":MBEDTLS_ERR_X509_INVALID_FORMAT + MBEDTLS_ERR_ASN1_UNEXPECTED_TAG
Manuel Pégourié-Gonnardd77cd5d2014-06-13 11:13:15 +0200[diff] [blame]2819
2820X509 CSR ASN.1 (bad attributes: overlong)
Manuel Pégourié-Gonnard43be6cd2017-06-20 09:53:42 +0200[diff] [blame]2821depends_on:MBEDTLS_ECDSA_C:MBEDTLS_ECP_DP_SECP256R1_ENABLED
Hanno Beckerd0d78d72019-02-12 10:20:42 +0000[diff] [blame]2822mbedtls_x509_csr_parse:"30819a3081960201003034310b3009060355040613024e4c3111300f060355040a1308506f6c617253534c31123010060355040313096c6f63616c686f73743059301306072a8648ce3d020106082a8648ce3d0301070342000437cc56d976091e5a723ec7592dff206eee7cf9069174d0ad14b5f768225962924ee500d82311ffea2fd2345d5d16bd8a88c26b770d55cd8a2a0efa01c8b4edffa00100":"":MBEDTLS_ERR_X509_INVALID_FORMAT + MBEDTLS_ERR_ASN1_OUT_OF_DATA
Manuel Pégourié-Gonnardd77cd5d2014-06-13 11:13:15 +0200[diff] [blame]2823
2824X509 CSR ASN.1 (bad sigAlg: missing)
Manuel Pégourié-Gonnard43be6cd2017-06-20 09:53:42 +0200[diff] [blame]2825depends_on:MBEDTLS_ECDSA_C:MBEDTLS_ECP_DP_SECP256R1_ENABLED
Hanno Beckerd0d78d72019-02-12 10:20:42 +0000[diff] [blame]2826mbedtls_x509_csr_parse:"3081c23081bf0201003034310b3009060355040613024e4c3111300f060355040a1308506f6c617253534c31123010060355040313096c6f63616c686f73743059301306072a8648ce3d020106082a8648ce3d0301070342000437cc56d976091e5a723ec7592dff206eee7cf9069174d0ad14b5f768225962924ee500d82311ffea2fd2345d5d16bd8a88c26b770d55cd8a2a0efa01c8b4edffa029302706092a864886f70d01090e311a301830090603551d1304023000300b0603551d0f0404030205e0":"":MBEDTLS_ERR_X509_INVALID_ALG + MBEDTLS_ERR_ASN1_OUT_OF_DATA
Manuel Pégourié-Gonnardd77cd5d2014-06-13 11:13:15 +0200[diff] [blame]2827
2828X509 CSR ASN.1 (bad sigAlg: not a sequence)
Manuel Pégourié-Gonnard43be6cd2017-06-20 09:53:42 +0200[diff] [blame]2829depends_on:MBEDTLS_ECDSA_C:MBEDTLS_ECP_DP_SECP256R1_ENABLED
Hanno Beckerd0d78d72019-02-12 10:20:42 +0000[diff] [blame]2830mbedtls_x509_csr_parse:"3081c43081bf0201003034310b3009060355040613024e4c3111300f060355040a1308506f6c617253534c31123010060355040313096c6f63616c686f73743059301306072a8648ce3d020106082a8648ce3d0301070342000437cc56d976091e5a723ec7592dff206eee7cf9069174d0ad14b5f768225962924ee500d82311ffea2fd2345d5d16bd8a88c26b770d55cd8a2a0efa01c8b4edffa029302706092a864886f70d01090e311a301830090603551d1304023000300b0603551d0f0404030205e03100":"":MBEDTLS_ERR_X509_INVALID_ALG + MBEDTLS_ERR_ASN1_UNEXPECTED_TAG
Manuel Pégourié-Gonnardd77cd5d2014-06-13 11:13:15 +0200[diff] [blame]2831
2832X509 CSR ASN.1 (bad sigAlg: overlong)
Manuel Pégourié-Gonnard43be6cd2017-06-20 09:53:42 +0200[diff] [blame]2833depends_on:MBEDTLS_ECDSA_C:MBEDTLS_ECP_DP_SECP256R1_ENABLED
Hanno Beckerd0d78d72019-02-12 10:20:42 +0000[diff] [blame]2834mbedtls_x509_csr_parse:"3081c43081bf0201003034310b3009060355040613024e4c3111300f060355040a1308506f6c617253534c31123010060355040313096c6f63616c686f73743059301306072a8648ce3d020106082a8648ce3d0301070342000437cc56d976091e5a723ec7592dff206eee7cf9069174d0ad14b5f768225962924ee500d82311ffea2fd2345d5d16bd8a88c26b770d55cd8a2a0efa01c8b4edffa029302706092a864886f70d01090e311a301830090603551d1304023000300b0603551d0f0404030205e03001":"":MBEDTLS_ERR_X509_INVALID_ALG + MBEDTLS_ERR_ASN1_OUT_OF_DATA
Manuel Pégourié-Gonnardd77cd5d2014-06-13 11:13:15 +0200[diff] [blame]2835
2836X509 CSR ASN.1 (bad sigAlg: unknown)
Manuel Pégourié-Gonnard43be6cd2017-06-20 09:53:42 +0200[diff] [blame]2837depends_on:MBEDTLS_ECDSA_C:MBEDTLS_ECP_DP_SECP256R1_ENABLED
Hanno Beckerd0d78d72019-02-12 10:20:42 +0000[diff] [blame]2838mbedtls_x509_csr_parse:"3081cd3081bf0201003034310b3009060355040613024e4c3111300f060355040a1308506f6c617253534c31123010060355040313096c6f63616c686f73743059301306072a8648ce3d020106082a8648ce3d0301070342000437cc56d976091e5a723ec7592dff206eee7cf9069174d0ad14b5f768225962924ee500d82311ffea2fd2345d5d16bd8a88c26b770d55cd8a2a0efa01c8b4edffa029302706092a864886f70d01090e311a301830090603551d1304023000300b0603551d0f0404030205e0300906072a8648ce3d04ff":"":MBEDTLS_ERR_X509_UNKNOWN_SIG_ALG
Manuel Pégourié-Gonnardd77cd5d2014-06-13 11:13:15 +0200[diff] [blame]2839
2840X509 CSR ASN.1 (bad sig: missing)
Manuel Pégourié-Gonnard43be6cd2017-06-20 09:53:42 +0200[diff] [blame]2841depends_on:MBEDTLS_ECDSA_C:MBEDTLS_ECP_DP_SECP256R1_ENABLED:MBEDTLS_SHA1_C
Hanno Beckerd0d78d72019-02-12 10:20:42 +0000[diff] [blame]2842mbedtls_x509_csr_parse:"3081cd3081bf0201003034310b3009060355040613024e4c3111300f060355040a1308506f6c617253534c31123010060355040313096c6f63616c686f73743059301306072a8648ce3d020106082a8648ce3d0301070342000437cc56d976091e5a723ec7592dff206eee7cf9069174d0ad14b5f768225962924ee500d82311ffea2fd2345d5d16bd8a88c26b770d55cd8a2a0efa01c8b4edffa029302706092a864886f70d01090e311a301830090603551d1304023000300b0603551d0f0404030205e0300906072a8648ce3d0401":"":MBEDTLS_ERR_X509_INVALID_SIGNATURE + MBEDTLS_ERR_ASN1_OUT_OF_DATA
Manuel Pégourié-Gonnardd77cd5d2014-06-13 11:13:15 +0200[diff] [blame]2843
2844X509 CSR ASN.1 (bad sig: not a bit string)
Manuel Pégourié-Gonnard43be6cd2017-06-20 09:53:42 +0200[diff] [blame]2845depends_on:MBEDTLS_ECDSA_C:MBEDTLS_ECP_DP_SECP256R1_ENABLED:MBEDTLS_SHA1_C
Hanno Beckerd0d78d72019-02-12 10:20:42 +0000[diff] [blame]2846mbedtls_x509_csr_parse:"3081cf3081bf0201003034310b3009060355040613024e4c3111300f060355040a1308506f6c617253534c31123010060355040313096c6f63616c686f73743059301306072a8648ce3d020106082a8648ce3d0301070342000437cc56d976091e5a723ec7592dff206eee7cf9069174d0ad14b5f768225962924ee500d82311ffea2fd2345d5d16bd8a88c26b770d55cd8a2a0efa01c8b4edffa029302706092a864886f70d01090e311a301830090603551d1304023000300b0603551d0f0404030205e0300906072a8648ce3d04010400":"":MBEDTLS_ERR_X509_INVALID_SIGNATURE + MBEDTLS_ERR_ASN1_UNEXPECTED_TAG
Manuel Pégourié-Gonnardd77cd5d2014-06-13 11:13:15 +0200[diff] [blame]2847
2848X509 CSR ASN.1 (bad sig: overlong)
Manuel Pégourié-Gonnard43be6cd2017-06-20 09:53:42 +0200[diff] [blame]2849depends_on:MBEDTLS_ECDSA_C:MBEDTLS_ECP_DP_SECP256R1_ENABLED:MBEDTLS_SHA1_C
Hanno Beckerd0d78d72019-02-12 10:20:42 +0000[diff] [blame]2850mbedtls_x509_csr_parse:"3081cf3081bf0201003034310b3009060355040613024e4c3111300f060355040a1308506f6c617253534c31123010060355040313096c6f63616c686f73743059301306072a8648ce3d020106082a8648ce3d0301070342000437cc56d976091e5a723ec7592dff206eee7cf9069174d0ad14b5f768225962924ee500d82311ffea2fd2345d5d16bd8a88c26b770d55cd8a2a0efa01c8b4edffa029302706092a864886f70d01090e311a301830090603551d1304023000300b0603551d0f0404030205e0300906072a8648ce3d04010301":"":MBEDTLS_ERR_X509_INVALID_SIGNATURE + MBEDTLS_ERR_ASN1_OUT_OF_DATA
Manuel Pégourié-Gonnardd77cd5d2014-06-13 11:13:15 +0200[diff] [blame]2851
2852X509 CSR ASN.1 (extra data after signature)
Manuel Pégourié-Gonnard43be6cd2017-06-20 09:53:42 +0200[diff] [blame]2853depends_on:MBEDTLS_ECDSA_C:MBEDTLS_ECP_DP_SECP256R1_ENABLED:MBEDTLS_SHA1_C
Hanno Beckerd0d78d72019-02-12 10:20:42 +0000[diff] [blame]2854mbedtls_x509_csr_parse:"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":"":MBEDTLS_ERR_X509_INVALID_FORMAT + MBEDTLS_ERR_ASN1_LENGTH_MISMATCH
Paul Bakker5a5fa922014-09-26 14:53:04 +0200[diff] [blame]2855
Andres AGf00baff2017-03-07 10:57:34 +0000[diff] [blame]2856X509 CSR ASN.1 (invalid version overflow)
Hanno Becker32b48ea2019-06-03 09:48:09 +0100[diff] [blame]2857mbedtls_x509_csr_parse:"3008300602047fffffff":"":MBEDTLS_ERR_X509_UNKNOWN_VERSION
Andres AGf00baff2017-03-07 10:57:34 +0000[diff] [blame]2858
Paul Bakker5a5fa922014-09-26 14:53:04 +0200[diff] [blame]2859X509 File parse (no issues)
Manuel Pégourié-Gonnard43be6cd2017-06-20 09:53:42 +0200[diff] [blame]2860depends_on:MBEDTLS_ECDSA_C:MBEDTLS_ECP_DP_SECP256R1_ENABLED:MBEDTLS_SHA256_C:MBEDTLS_RSA_C
Jerry Yu19c04782023-06-01 13:30:06 +0800[diff] [blame]2861x509parse_crt_file:"data_files/parse_input/server7_int-ca.crt":0
Paul Bakker5a5fa922014-09-26 14:53:04 +0200[diff] [blame]2862
2863X509 File parse (extra space in one certificate)
Manuel Pégourié-Gonnard43be6cd2017-06-20 09:53:42 +0200[diff] [blame]2864depends_on:MBEDTLS_ECDSA_C:MBEDTLS_SHA256_C:MBEDTLS_RSA_C
Jerry Yu19c04782023-06-01 13:30:06 +0800[diff] [blame]2865x509parse_crt_file:"data_files/parse_input/server7_pem_space.crt":1
Paul Bakker5a5fa922014-09-26 14:53:04 +0200[diff] [blame]2866
2867X509 File parse (all certificates fail)
Manuel Pégourié-Gonnard43be6cd2017-06-20 09:53:42 +0200[diff] [blame]2868depends_on:MBEDTLS_ECDSA_C:MBEDTLS_RSA_C
Jerry Yu19c04782023-06-01 13:30:06 +0800[diff] [blame]2869x509parse_crt_file:"data_files/parse_input/server7_all_space.crt":MBEDTLS_ERR_PEM_INVALID_DATA + MBEDTLS_ERR_BASE64_INVALID_CHARACTER
Manuel Pégourié-Gonnard052d10c2015-07-31 11:09:59 +0200[diff] [blame]2870
2871X509 File parse (trailing spaces, OK)
Manuel Pégourié-Gonnard43be6cd2017-06-20 09:53:42 +0200[diff] [blame]2872depends_on:MBEDTLS_ECDSA_C:MBEDTLS_ECP_DP_SECP256R1_ENABLED:MBEDTLS_SHA256_C:MBEDTLS_RSA_C
Jerry Yu19c04782023-06-01 13:30:06 +0800[diff] [blame]2873x509parse_crt_file:"data_files/parse_input/server7_trailing_space.crt":0
Andres AG4b76aec2016-09-23 13:16:02 +0100[diff] [blame]2874
Paul Elliottca17ebf2020-11-24 17:30:18 +0000[diff] [blame]2875X509 File parse (Algorithm Params Tag mismatch)
2876depends_on:MBEDTLS_SHA256_C:MBEDTLS_RSA_C
Jerry Yu19c04782023-06-01 13:30:06 +0800[diff] [blame]2877x509parse_crt_file:"data_files/parse_input/cli-rsa-sha256-badalg.crt.der":MBEDTLS_ERR_X509_SIG_MISMATCH
Paul Elliottca17ebf2020-11-24 17:30:18 +0000[diff] [blame]2878
Andres AG4b76aec2016-09-23 13:16:02 +0100[diff] [blame]2879X509 Get time (UTC no issues)
2880depends_on:MBEDTLS_X509_USE_C
2881x509_get_time:MBEDTLS_ASN1_UTC_TIME:"500101000000Z":0:1950:1:1:0:0:0
2882
2883X509 Get time (Generalized Time no issues)
2884depends_on:MBEDTLS_X509_USE_C
2885x509_get_time:MBEDTLS_ASN1_GENERALIZED_TIME:"99991231235959Z":0:9999:12:31:23:59:59
2886
2887X509 Get time (UTC year without leap day)
2888depends_on:MBEDTLS_X509_USE_C
2889x509_get_time:MBEDTLS_ASN1_UTC_TIME:"490229121212Z":MBEDTLS_ERR_X509_INVALID_DATE:0:0:0:0:0:0
2890
2891X509 Get time (UTC year with leap day)
2892depends_on:MBEDTLS_X509_USE_C
2893x509_get_time:MBEDTLS_ASN1_UTC_TIME:"000229121212Z":0:2000:2:29:12:12:12
2894
2895X509 Get time (UTC invalid day of month #1)
2896depends_on:MBEDTLS_X509_USE_C
2897x509_get_time:MBEDTLS_ASN1_UTC_TIME:"000132121212Z":MBEDTLS_ERR_X509_INVALID_DATE:0:0:0:0:0:0
2898
2899X509 Get time (UTC invalid day of month #2)
2900depends_on:MBEDTLS_X509_USE_C
2901x509_get_time:MBEDTLS_ASN1_UTC_TIME:"001131121212Z":MBEDTLS_ERR_X509_INVALID_DATE:0:0:0:0:0:0
2902
2903X509 Get time (UTC invalid hour)
2904depends_on:MBEDTLS_X509_USE_C
2905x509_get_time:MBEDTLS_ASN1_UTC_TIME:"001130241212Z":MBEDTLS_ERR_X509_INVALID_DATE:0:0:0:0:0:0
2906
2907X509 Get time (UTC invalid min)
2908depends_on:MBEDTLS_X509_USE_C
2909x509_get_time:MBEDTLS_ASN1_UTC_TIME:"001130236012Z":MBEDTLS_ERR_X509_INVALID_DATE:0:0:0:0:0:0
2910
2911X509 Get time (UTC invalid sec)
2912depends_on:MBEDTLS_X509_USE_C
2913x509_get_time:MBEDTLS_ASN1_UTC_TIME:"001130235960Z":MBEDTLS_ERR_X509_INVALID_DATE:0:0:0:0:0:0
Janos Follathea7054a2017-02-08 14:13:02 +0000[diff] [blame]2914
2915X509 Get time (UTC without time zone)
2916depends_on:MBEDTLS_X509_USE_C
2917x509_get_time:MBEDTLS_ASN1_UTC_TIME:"000229121212":0:2000:2:29:12:12:12
2918
2919X509 Get time (UTC with invalid time zone #1)
2920depends_on:MBEDTLS_X509_USE_C
2921x509_get_time:MBEDTLS_ASN1_UTC_TIME:"000229121212J":MBEDTLS_ERR_X509_INVALID_DATE:0:0:0:0:0:0
2922
2923X509 Get time (UTC with invalid time zone #2)
2924depends_on:MBEDTLS_X509_USE_C
2925x509_get_time:MBEDTLS_ASN1_UTC_TIME:"000229121212+0300":MBEDTLS_ERR_X509_INVALID_DATE:0:0:0:0:0:0
2926
2927X509 Get time (Date with invalid tag)
2928depends_on:MBEDTLS_X509_USE_C
2929x509_get_time:MBEDTLS_ASN1_CONTEXT_SPECIFIC:"000229121212":MBEDTLS_ERR_X509_INVALID_DATE+MBEDTLS_ERR_ASN1_UNEXPECTED_TAG:0:0:0:0:0:0
2930
2931X509 Get time (UTC, truncated)
2932depends_on:MBEDTLS_X509_USE_C
2933x509_get_time:MBEDTLS_ASN1_UTC_TIME:"000229121":MBEDTLS_ERR_X509_INVALID_DATE:0:0:0:0:0:0
2934
2935X509 Get time (Generalized Time, truncated)
2936depends_on:MBEDTLS_X509_USE_C
2937x509_get_time:MBEDTLS_ASN1_GENERALIZED_TIME:"20000229121":MBEDTLS_ERR_X509_INVALID_DATE:0:0:0:0:0:0
2938
2939X509 Get time (UTC without seconds)
2940depends_on:MBEDTLS_X509_USE_C
2941x509_get_time:MBEDTLS_ASN1_UTC_TIME:"0002291212":MBEDTLS_ERR_X509_INVALID_DATE:2000:2:29:12:12:0
2942
2943X509 Get time (UTC without seconds and with invalid time zone #1)
2944depends_on:MBEDTLS_X509_USE_C
2945x509_get_time:MBEDTLS_ASN1_UTC_TIME:"0002291212J":MBEDTLS_ERR_X509_INVALID_DATE:0:0:0:0:0:0
2946
2947X509 Get time (UTC without second and with invalid time zone #2)
2948depends_on:MBEDTLS_X509_USE_C
2949x509_get_time:MBEDTLS_ASN1_UTC_TIME:"0002291212+0300":MBEDTLS_ERR_X509_INVALID_DATE:0:0:0:0:0:0
2950
2951X509 Get time (UTC invalid character in year)
2952depends_on:MBEDTLS_X509_USE_C
Gilles Peskine17808752022-12-03 23:48:25 +0100[diff] [blame]2953x509_get_time:MBEDTLS_ASN1_UTC_TIME:"0\\1130231212Z":MBEDTLS_ERR_X509_INVALID_DATE:0:0:0:0:0:0
Janos Follathea7054a2017-02-08 14:13:02 +0000[diff] [blame]2954
2955X509 Get time (UTC invalid character in month)
2956depends_on:MBEDTLS_X509_USE_C
2957x509_get_time:MBEDTLS_ASN1_UTC_TIME:"001%30231212Z":MBEDTLS_ERR_X509_INVALID_DATE:0:0:0:0:0:0
2958
2959X509 Get time (UTC invalid character in day)
2960depends_on:MBEDTLS_X509_USE_C
2961x509_get_time:MBEDTLS_ASN1_UTC_TIME:"0011`0231212Z":MBEDTLS_ERR_X509_INVALID_DATE:0:0:0:0:0:0
2962
2963X509 Get time (UTC invalid character in hour)
2964depends_on:MBEDTLS_X509_USE_C
2965x509_get_time:MBEDTLS_ASN1_UTC_TIME:"0011302h1212Z":MBEDTLS_ERR_X509_INVALID_DATE:0:0:0:0:0:0
2966
2967X509 Get time (UTC invalid character in min)
2968depends_on:MBEDTLS_X509_USE_C
2969x509_get_time:MBEDTLS_ASN1_UTC_TIME:"00113023u012Z":MBEDTLS_ERR_X509_INVALID_DATE:0:0:0:0:0:0
2970
2971X509 Get time (UTC invalid character in sec)
2972depends_on:MBEDTLS_X509_USE_C
2973x509_get_time:MBEDTLS_ASN1_UTC_TIME:"0011302359n0Z":MBEDTLS_ERR_X509_INVALID_DATE:0:0:0:0:0:0
2974
Andres Amaya Garcia60100d02017-10-06 17:05:24 +0100[diff] [blame]2975X509 Get time (Generalized Time, year multiple of 100 but not 400 is not a leap year)
Andres Amaya Garcia735b37e2016-11-21 15:38:02 +0000[diff] [blame]2976depends_on:MBEDTLS_X509_USE_C
2977x509_get_time:MBEDTLS_ASN1_GENERALIZED_TIME:"19000229000000Z":MBEDTLS_ERR_X509_INVALID_DATE:0:0:0:0:0:0
2978
Andres Amaya Garcia60100d02017-10-06 17:05:24 +0100[diff] [blame]2979X509 Get time (Generalized Time, year multiple of 4 but not 100 is a leap year)
Andres Amaya Garcia735b37e2016-11-21 15:38:02 +0000[diff] [blame]2980depends_on:MBEDTLS_X509_USE_C
2981x509_get_time:MBEDTLS_ASN1_GENERALIZED_TIME:"19920229000000Z":0:1992:2:29:0:0:0
2982
Andres Amaya Garcia60100d02017-10-06 17:05:24 +0100[diff] [blame]2983X509 Get time (Generalized Time, year multiple of 400 is a leap year)
Andres Amaya Garcia735b37e2016-11-21 15:38:02 +0000[diff] [blame]2984depends_on:MBEDTLS_X509_USE_C
2985x509_get_time:MBEDTLS_ASN1_GENERALIZED_TIME:"20000229000000Z":0:2000:2:29:0:0:0
2986
2987X509 Get time (Generalized Time invalid leap year not multiple of 4, 100 or 400)
2988depends_on:MBEDTLS_X509_USE_C
2989x509_get_time:MBEDTLS_ASN1_GENERALIZED_TIME:"19910229000000Z":MBEDTLS_ERR_X509_INVALID_DATE:0:0:0:0:0:0
Manuel Pégourié-Gonnardda19f4c2018-06-12 12:40:54 +0200[diff] [blame]2990
Hanno Becker2389d162019-02-14 12:52:47 +0000[diff] [blame]2991X509 CRT verify restart: trusted EE, max_ops=0 (disabled)
Manuel Pégourié-Gonnardd19a41d2017-07-14 11:05:59 +0200[diff] [blame]2992depends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_ECDSA_C:MBEDTLS_SHA256_C:MBEDTLS_ECP_DP_SECP256R1_ENABLED
2993x509_verify_restart:"data_files/server5-selfsigned.crt":"data_files/server5-selfsigned.crt":0:0:0:0:0
2994
Hanno Becker2389d162019-02-14 12:52:47 +0000[diff] [blame]2995X509 CRT verify restart: trusted EE, max_ops=1
Manuel Pégourié-Gonnard8b590492017-08-14 18:04:19 +0200[diff] [blame]2996depends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_ECDSA_C:MBEDTLS_SHA256_C:MBEDTLS_ECP_DP_SECP256R1_ENABLED
2997x509_verify_restart:"data_files/server5-selfsigned.crt":"data_files/server5-selfsigned.crt":0:0:1:0:0
2998
Hanno Becker2389d162019-02-14 12:52:47 +0000[diff] [blame]2999X509 CRT verify restart: no intermediate, max_ops=0 (disabled)
Manuel Pégourié-Gonnardd19a41d2017-07-14 11:05:59 +0200[diff] [blame]3000depends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_ECDSA_C:MBEDTLS_SHA256_C:MBEDTLS_ECP_DP_SECP256R1_ENABLED:MBEDTLS_ECP_DP_SECP384R1_ENABLED
3001x509_verify_restart:"data_files/server5.crt":"data_files/test-ca2.crt":0:0:0:0:0
3002
Hanno Becker2389d162019-02-14 12:52:47 +0000[diff] [blame]3003X509 CRT verify restart: no intermediate, max_ops=1
Manuel Pégourié-Gonnard8b590492017-08-14 18:04:19 +0200[diff] [blame]3004depends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_ECDSA_C:MBEDTLS_SHA256_C:MBEDTLS_ECP_DP_SECP256R1_ENABLED:MBEDTLS_ECP_DP_SECP384R1_ENABLED
3005x509_verify_restart:"data_files/server5.crt":"data_files/test-ca2.crt":0:0:1:100:10000
3006
Hanno Becker2389d162019-02-14 12:52:47 +0000[diff] [blame]3007X509 CRT verify restart: no intermediate, max_ops=40000
Manuel Pégourié-Gonnard8b590492017-08-14 18:04:19 +0200[diff] [blame]3008depends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_ECDSA_C:MBEDTLS_SHA256_C:MBEDTLS_ECP_DP_SECP256R1_ENABLED:MBEDTLS_ECP_DP_SECP384R1_ENABLED
3009x509_verify_restart:"data_files/server5.crt":"data_files/test-ca2.crt":0:0:40000:0:0
3010
Hanno Becker2389d162019-02-14 12:52:47 +0000[diff] [blame]3011X509 CRT verify restart: no intermediate, max_ops=500
Manuel Pégourié-Gonnard8b590492017-08-14 18:04:19 +0200[diff] [blame]3012depends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_ECDSA_C:MBEDTLS_SHA256_C:MBEDTLS_ECP_DP_SECP256R1_ENABLED:MBEDTLS_ECP_DP_SECP384R1_ENABLED
3013x509_verify_restart:"data_files/server5.crt":"data_files/test-ca2.crt":0:0:500:20:80
3014
Hanno Becker2389d162019-02-14 12:52:47 +0000[diff] [blame]3015X509 CRT verify restart: no intermediate, badsign, max_ops=0 (disabled)
Manuel Pégourié-Gonnardd19a41d2017-07-14 11:05:59 +0200[diff] [blame]3016depends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_ECDSA_C:MBEDTLS_SHA256_C:MBEDTLS_ECP_DP_SECP256R1_ENABLED:MBEDTLS_ECP_DP_SECP384R1_ENABLED
3017x509_verify_restart:"data_files/server5-badsign.crt":"data_files/test-ca2.crt":MBEDTLS_ERR_X509_CERT_VERIFY_FAILED:MBEDTLS_X509_BADCERT_NOT_TRUSTED:0:0:0
3018
Hanno Becker2389d162019-02-14 12:52:47 +0000[diff] [blame]3019X509 CRT verify restart: no intermediate, badsign, max_ops=1
Manuel Pégourié-Gonnard8b590492017-08-14 18:04:19 +0200[diff] [blame]3020depends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_ECDSA_C:MBEDTLS_SHA256_C:MBEDTLS_ECP_DP_SECP256R1_ENABLED:MBEDTLS_ECP_DP_SECP384R1_ENABLED
3021x509_verify_restart:"data_files/server5-badsign.crt":"data_files/test-ca2.crt":MBEDTLS_ERR_X509_CERT_VERIFY_FAILED:MBEDTLS_X509_BADCERT_NOT_TRUSTED:1:100:10000
3022
Hanno Becker2389d162019-02-14 12:52:47 +0000[diff] [blame]3023X509 CRT verify restart: no intermediate, badsign, max_ops=40000
Manuel Pégourié-Gonnard8b590492017-08-14 18:04:19 +0200[diff] [blame]3024depends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_ECDSA_C:MBEDTLS_SHA256_C:MBEDTLS_ECP_DP_SECP256R1_ENABLED:MBEDTLS_ECP_DP_SECP384R1_ENABLED
3025x509_verify_restart:"data_files/server5-badsign.crt":"data_files/test-ca2.crt":MBEDTLS_ERR_X509_CERT_VERIFY_FAILED:MBEDTLS_X509_BADCERT_NOT_TRUSTED:40000:0:0
3026
Hanno Becker2389d162019-02-14 12:52:47 +0000[diff] [blame]3027X509 CRT verify restart: no intermediate, badsign, max_ops=500
Manuel Pégourié-Gonnard8b590492017-08-14 18:04:19 +0200[diff] [blame]3028depends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_ECDSA_C:MBEDTLS_SHA256_C:MBEDTLS_ECP_DP_SECP256R1_ENABLED:MBEDTLS_ECP_DP_SECP384R1_ENABLED
3029x509_verify_restart:"data_files/server5-badsign.crt":"data_files/test-ca2.crt":MBEDTLS_ERR_X509_CERT_VERIFY_FAILED:MBEDTLS_X509_BADCERT_NOT_TRUSTED:500:20:80
3030
Hanno Becker2389d162019-02-14 12:52:47 +0000[diff] [blame]3031X509 CRT verify restart: one int, max_ops=0 (disabled)
Manuel Pégourié-Gonnardd19a41d2017-07-14 11:05:59 +0200[diff] [blame]3032depends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_ECDSA_C:MBEDTLS_SHA256_C:MBEDTLS_ECP_DP_SECP256R1_ENABLED:MBEDTLS_ECP_DP_SECP384R1_ENABLED:MBEDTLS_RSA_C
3033x509_verify_restart:"data_files/server10_int3_int-ca2.crt":"data_files/test-int-ca2.crt":0:0:0:0:0
3034
Hanno Becker2389d162019-02-14 12:52:47 +0000[diff] [blame]3035X509 CRT verify restart: one int, max_ops=1
Manuel Pégourié-Gonnard8b590492017-08-14 18:04:19 +0200[diff] [blame]3036depends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_ECDSA_C:MBEDTLS_SHA256_C:MBEDTLS_ECP_DP_SECP256R1_ENABLED:MBEDTLS_ECP_DP_SECP384R1_ENABLED:MBEDTLS_RSA_C
3037x509_verify_restart:"data_files/server10_int3_int-ca2.crt":"data_files/test-int-ca2.crt":0:0:1:100:10000
3038
Hanno Becker2389d162019-02-14 12:52:47 +0000[diff] [blame]3039X509 CRT verify restart: one int, max_ops=30000
Manuel Pégourié-Gonnard8b590492017-08-14 18:04:19 +0200[diff] [blame]3040depends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_ECDSA_C:MBEDTLS_SHA256_C:MBEDTLS_ECP_DP_SECP256R1_ENABLED:MBEDTLS_ECP_DP_SECP384R1_ENABLED:MBEDTLS_RSA_C
3041x509_verify_restart:"data_files/server10_int3_int-ca2.crt":"data_files/test-int-ca2.crt":0:0:30000:0:0
3042
Hanno Becker2389d162019-02-14 12:52:47 +0000[diff] [blame]3043X509 CRT verify restart: one int, max_ops=500
Manuel Pégourié-Gonnard8b590492017-08-14 18:04:19 +0200[diff] [blame]3044depends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_ECDSA_C:MBEDTLS_SHA256_C:MBEDTLS_ECP_DP_SECP256R1_ENABLED:MBEDTLS_ECP_DP_SECP384R1_ENABLED:MBEDTLS_RSA_C
3045x509_verify_restart:"data_files/server10_int3_int-ca2.crt":"data_files/test-int-ca2.crt":0:0:500:25:100
3046
Hanno Becker2389d162019-02-14 12:52:47 +0000[diff] [blame]3047X509 CRT verify restart: one int, EE badsign, max_ops=0 (disabled)
Manuel Pégourié-Gonnardd19a41d2017-07-14 11:05:59 +0200[diff] [blame]3048depends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_ECDSA_C:MBEDTLS_SHA256_C:MBEDTLS_ECP_DP_SECP256R1_ENABLED:MBEDTLS_ECP_DP_SECP384R1_ENABLED:MBEDTLS_RSA_C
3049x509_verify_restart:"data_files/server10-bs_int3.pem":"data_files/test-int-ca2.crt":MBEDTLS_ERR_X509_CERT_VERIFY_FAILED:MBEDTLS_X509_BADCERT_NOT_TRUSTED:0:0:0
3050
Hanno Becker2389d162019-02-14 12:52:47 +0000[diff] [blame]3051X509 CRT verify restart: one int, EE badsign, max_ops=1
Manuel Pégourié-Gonnard8b590492017-08-14 18:04:19 +0200[diff] [blame]3052depends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_ECDSA_C:MBEDTLS_SHA256_C:MBEDTLS_ECP_DP_SECP256R1_ENABLED:MBEDTLS_ECP_DP_SECP384R1_ENABLED:MBEDTLS_RSA_C
3053x509_verify_restart:"data_files/server10-bs_int3.pem":"data_files/test-int-ca2.crt":MBEDTLS_ERR_X509_CERT_VERIFY_FAILED:MBEDTLS_X509_BADCERT_NOT_TRUSTED:1:100:10000
3054
Hanno Becker2389d162019-02-14 12:52:47 +0000[diff] [blame]3055X509 CRT verify restart: one int, EE badsign, max_ops=30000
Manuel Pégourié-Gonnard8b590492017-08-14 18:04:19 +0200[diff] [blame]3056depends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_ECDSA_C:MBEDTLS_SHA256_C:MBEDTLS_ECP_DP_SECP256R1_ENABLED:MBEDTLS_ECP_DP_SECP384R1_ENABLED:MBEDTLS_RSA_C
3057x509_verify_restart:"data_files/server10-bs_int3.pem":"data_files/test-int-ca2.crt":MBEDTLS_ERR_X509_CERT_VERIFY_FAILED:MBEDTLS_X509_BADCERT_NOT_TRUSTED:30000:0:0
3058
Hanno Becker2389d162019-02-14 12:52:47 +0000[diff] [blame]3059X509 CRT verify restart: one int, EE badsign, max_ops=500
Manuel Pégourié-Gonnard8b590492017-08-14 18:04:19 +0200[diff] [blame]3060depends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_ECDSA_C:MBEDTLS_SHA256_C:MBEDTLS_ECP_DP_SECP256R1_ENABLED:MBEDTLS_ECP_DP_SECP384R1_ENABLED:MBEDTLS_RSA_C
3061x509_verify_restart:"data_files/server10-bs_int3.pem":"data_files/test-int-ca2.crt":MBEDTLS_ERR_X509_CERT_VERIFY_FAILED:MBEDTLS_X509_BADCERT_NOT_TRUSTED:500:25:100
3062
Hanno Becker2389d162019-02-14 12:52:47 +0000[diff] [blame]3063X509 CRT verify restart: one int, int badsign, max_ops=0 (disabled)
Manuel Pégourié-Gonnardd19a41d2017-07-14 11:05:59 +0200[diff] [blame]3064depends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_ECDSA_C:MBEDTLS_SHA256_C:MBEDTLS_ECP_DP_SECP256R1_ENABLED:MBEDTLS_ECP_DP_SECP384R1_ENABLED:MBEDTLS_RSA_C
3065x509_verify_restart:"data_files/server10_int3-bs.pem":"data_files/test-int-ca2.crt":MBEDTLS_ERR_X509_CERT_VERIFY_FAILED:MBEDTLS_X509_BADCERT_NOT_TRUSTED:0:0:0
Manuel Pégourié-Gonnard8b590492017-08-14 18:04:19 +0200[diff] [blame]3066
Hanno Becker2389d162019-02-14 12:52:47 +0000[diff] [blame]3067X509 CRT verify restart: one int, int badsign, max_ops=1
Manuel Pégourié-Gonnard8b590492017-08-14 18:04:19 +0200[diff] [blame]3068depends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_ECDSA_C:MBEDTLS_SHA256_C:MBEDTLS_ECP_DP_SECP256R1_ENABLED:MBEDTLS_ECP_DP_SECP384R1_ENABLED:MBEDTLS_RSA_C
3069x509_verify_restart:"data_files/server10_int3-bs.pem":"data_files/test-int-ca2.crt":MBEDTLS_ERR_X509_CERT_VERIFY_FAILED:MBEDTLS_X509_BADCERT_NOT_TRUSTED:1:100:10000
3070
Hanno Becker2389d162019-02-14 12:52:47 +0000[diff] [blame]3071X509 CRT verify restart: one int, int badsign, max_ops=30000
Manuel Pégourié-Gonnard8b590492017-08-14 18:04:19 +0200[diff] [blame]3072depends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_ECDSA_C:MBEDTLS_SHA256_C:MBEDTLS_ECP_DP_SECP256R1_ENABLED:MBEDTLS_ECP_DP_SECP384R1_ENABLED:MBEDTLS_RSA_C
3073x509_verify_restart:"data_files/server10_int3-bs.pem":"data_files/test-int-ca2.crt":MBEDTLS_ERR_X509_CERT_VERIFY_FAILED:MBEDTLS_X509_BADCERT_NOT_TRUSTED:30000:0:0
3074
Hanno Becker2389d162019-02-14 12:52:47 +0000[diff] [blame]3075X509 CRT verify restart: one int, int badsign, max_ops=500
Manuel Pégourié-Gonnard8b590492017-08-14 18:04:19 +0200[diff] [blame]3076depends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_ECDSA_C:MBEDTLS_SHA256_C:MBEDTLS_ECP_DP_SECP256R1_ENABLED:MBEDTLS_ECP_DP_SECP384R1_ENABLED:MBEDTLS_RSA_C
3077x509_verify_restart:"data_files/server10_int3-bs.pem":"data_files/test-int-ca2.crt":MBEDTLS_ERR_X509_CERT_VERIFY_FAILED:MBEDTLS_X509_BADCERT_NOT_TRUSTED:500:25:100