-
Notifications
You must be signed in to change notification settings - Fork 834
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
Improve subjectAltName extension parsing and printing #6525
Conversation
177f881
to
8ed05f4
Compare
Please add adjustments to our python port test with this new support. |
wolfssl/wolfcrypt/asn.h
Outdated
@@ -2161,7 +2169,7 @@ WOLFSSL_LOCAL int GetInt(mp_int* mpi, const byte* input, word32* inOutIdx, | |||
word32 maxIdx); | |||
|
|||
#ifdef HAVE_OID_ENCODING | |||
WOLFSSL_LOCAL int EncodeObjectId(const word16* in, word32 inSz, | |||
WOLFSSL_API int EncodeObjectId(const word16* in, word32 inSz, |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
We may not need WOLFSSL_API here?
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Had to leverage it in wolfCLU
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Lets make a new facing API something like wolfSSL_EncodeObjectId (maybe not that exactly, but having either the wolfSSL_ or wc_ naming convention since public). Sanity checks on the input arguments needs reviewed once opening it up as a public facing API. This also reminds me that although in most cases people are updating wolfCLU and wolfSSL at the same time that is not always the case. Please check that wolfCLU will link to at lease a version older of wolfSSL after the changes.
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Added as a public api. Working on wolfCLU next
It looks like --enable-asn=original does not show the registered ID? For older versions of wolfSSL not defaulting to asn template we need the support in asn=original also. |
@JacobBarthelmeh the asn=original case should now be covered. Actively working on updating the python port test |
Retest this please Jenkins |
Retest this please |
Description
Printing and parsing unstructured name and registeredID attributes.
Parsii
Fixes zd16305
Testing
Customer provided test case with wolfCLU
Checklist