Files
Gilles Peskine 5b535a091b Add test certificate with basicConstraints containing only an INTEGER
The basicConstraints extension contains only an INTEGER. According to
RFC 5280, this should be cA=FALSE and a pathLenConstraint value which is
effectively ignored. But Mbed TLS parses it as cA=TRUE if the integer value
is nonzero.

This certificate is syntactically valid, but RFC 5280 forbids CAs from
emitting it. Compliant X.509 parsers treat it as cA=FALSE.

Signed-off-by: Gilles Peskine <Gilles.Peskine@arm.com>
2026-05-12 13:16:26 +02:00
..