Mbed-TLS/mbedtls-framework
1
0
Fork 0
mirror of https://github.com/Mbed-TLS/mbedtls-framework.git synced 2026-09-26 11:57:22 +00:00
Code Issues Packages Projects Releases Wiki Activity
Files
framework_mergeback
mbedtls-framework/data_files/parse_input/server5.basic-constraints-integer-first.selfsigned.crt
T
Gilles Peskine 5b535a091b Add test certificate with basicConstraints containing only an INTEGER 
The basicConstraints extension contains only an INTEGER. According to
RFC 5280, this should be cA=FALSE and a pathLenConstraint value which is
effectively ignored. But Mbed TLS parses it as cA=TRUE if the integer value
is nonzero.

This certificate is syntactically valid, but RFC 5280 forbids CAs from
emitting it. Compliant X.509 parsers treat it as cA=FALSE.

Signed-off-by: Gilles Peskine <[email protected]>
2026-05-12 13:16:26 +02:00

347 B
Raw Permalink History

View Raw
Reference in New Issue View Git Blame Copy Permalink