Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Improve subjectAltName extension parsing and printing #6525

Merged
merged 14 commits into from
Jul 22, 2023

Conversation

lealem47
Copy link
Contributor

Description

Printing and parsing unstructured name and registeredID attributes.

Parsii
Fixes zd16305

Testing

Customer provided test case with wolfCLU

Checklist

  • added tests
  • updated/added doxygen
  • updated appropriate READMEs
  • Updated manual and documentation

@JacobBarthelmeh
Copy link
Contributor

Please add adjustments to our python port test with this new support.

@@ -2161,7 +2169,7 @@ WOLFSSL_LOCAL int GetInt(mp_int* mpi, const byte* input, word32* inOutIdx,
word32 maxIdx);

#ifdef HAVE_OID_ENCODING
WOLFSSL_LOCAL int EncodeObjectId(const word16* in, word32 inSz,
WOLFSSL_API int EncodeObjectId(const word16* in, word32 inSz,
Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

We may not need WOLFSSL_API here?

Copy link
Contributor Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Had to leverage it in wolfCLU

Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Lets make a new facing API something like wolfSSL_EncodeObjectId (maybe not that exactly, but having either the wolfSSL_ or wc_ naming convention since public). Sanity checks on the input arguments needs reviewed once opening it up as a public facing API. This also reminds me that although in most cases people are updating wolfCLU and wolfSSL at the same time that is not always the case. Please check that wolfCLU will link to at lease a version older of wolfSSL after the changes.

Copy link
Contributor Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Added as a public api. Working on wolfCLU next

@JacobBarthelmeh
Copy link
Contributor

It looks like --enable-asn=original does not show the registered ID? For older versions of wolfSSL not defaulting to asn template we need the support in asn=original also.

@lealem47
Copy link
Contributor Author

@JacobBarthelmeh the asn=original case should now be covered. Actively working on updating the python port test

@lealem47 lealem47 removed their assignment Jun 30, 2023
src/ssl.c Outdated Show resolved Hide resolved
src/ssl.c Outdated Show resolved Hide resolved
wolfcrypt/src/asn.c Show resolved Hide resolved
wolfcrypt/src/asn.c Show resolved Hide resolved
@dgarske dgarske removed their request for review July 10, 2023 20:31
@lealem47 lealem47 assigned JacobBarthelmeh and unassigned lealem47 Jul 19, 2023
@JacobBarthelmeh
Copy link
Contributor

Retest this please Jenkins

@lealem47
Copy link
Contributor Author

Retest this please

@JacobBarthelmeh JacobBarthelmeh merged commit d320260 into wolfSSL:master Jul 22, 2023
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

2 participants