xref: /aosp_15_r20/external/mbedtls/tests/suites/test_suite_x509parse.data (revision 62c56f9862f102b96d72393aff6076c951fb8148) 
1*62c56f98SSadaf EbrahimiX509 CRT information #1
2*62c56f98SSadaf Ebrahimidepends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_RSA_C:MBEDTLS_MD_CAN_SHA1
3*62c56f98SSadaf Ebrahimix509_cert_info:"data_files/parse_input/server1.crt":"cert. version     \: 3\nserial number     \: 01\nissuer name       \: C=NL, O=PolarSSL, CN=PolarSSL Test CA\nsubject name      \: C=NL, O=PolarSSL, CN=PolarSSL Server 1\nissued  on        \: 2019-02-10 14\:44\:06\nexpires on        \: 2029-02-10 14\:44\:06\nsigned using      \: RSA with SHA1\nRSA key size      \: 2048 bits\nbasic constraints \: CA=false\n"
4*62c56f98SSadaf Ebrahimi
5*62c56f98SSadaf EbrahimiX509 CRT information #1 (DER)
6*62c56f98SSadaf Ebrahimidepends_on:MBEDTLS_RSA_C:MBEDTLS_MD_CAN_SHA1
7*62c56f98SSadaf Ebrahimix509_cert_info:"data_files/parse_input/server1.crt.der":"cert. version     \: 3\nserial number     \: 01\nissuer name       \: C=NL, O=PolarSSL, CN=PolarSSL Test CA\nsubject name      \: C=NL, O=PolarSSL, CN=PolarSSL Server 1\nissued  on        \: 2019-02-10 14\:44\:06\nexpires on        \: 2029-02-10 14\:44\:06\nsigned using      \: RSA with SHA1\nRSA key size      \: 2048 bits\nbasic constraints \: CA=false\n"
8*62c56f98SSadaf Ebrahimi
9*62c56f98SSadaf EbrahimiX509 CRT information #2
10*62c56f98SSadaf Ebrahimidepends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_RSA_C:MBEDTLS_MD_CAN_SHA1
11*62c56f98SSadaf Ebrahimix509_cert_info:"data_files/parse_input/server2.crt":"cert. version     \: 3\nserial number     \: 02\nissuer name       \: C=NL, O=PolarSSL, CN=PolarSSL Test CA\nsubject name      \: C=NL, O=PolarSSL, CN=localhost\nissued  on        \: 2019-02-10 14\:44\:06\nexpires on        \: 2029-02-10 14\:44\:06\nsigned using      \: RSA with SHA1\nRSA key size      \: 2048 bits\nbasic constraints \: CA=false\n"
12*62c56f98SSadaf Ebrahimi
13*62c56f98SSadaf EbrahimiX509 CRT information #2 (DER)
14*62c56f98SSadaf Ebrahimidepends_on:MBEDTLS_RSA_C:MBEDTLS_MD_CAN_SHA1
15*62c56f98SSadaf Ebrahimix509_cert_info:"data_files/parse_input/server2.crt.der":"cert. version     \: 3\nserial number     \: 02\nissuer name       \: C=NL, O=PolarSSL, CN=PolarSSL Test CA\nsubject name      \: C=NL, O=PolarSSL, CN=localhost\nissued  on        \: 2019-02-10 14\:44\:06\nexpires on        \: 2029-02-10 14\:44\:06\nsigned using      \: RSA with SHA1\nRSA key size      \: 2048 bits\nbasic constraints \: CA=false\n"
16*62c56f98SSadaf Ebrahimi
17*62c56f98SSadaf EbrahimiX509 CRT information #3
18*62c56f98SSadaf Ebrahimidepends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_RSA_C:MBEDTLS_MD_CAN_SHA1
19*62c56f98SSadaf Ebrahimix509_cert_info:"data_files/parse_input/test-ca.crt":"cert. version     \: 3\nserial number     \: 03\nissuer name       \: C=NL, O=PolarSSL, CN=PolarSSL Test CA\nsubject name      \: C=NL, O=PolarSSL, CN=PolarSSL Test CA\nissued  on        \: 2019-02-10 14\:44\:00\nexpires on        \: 2029-02-10 14\:44\:00\nsigned using      \: RSA with SHA1\nRSA key size      \: 2048 bits\nbasic constraints \: CA=true\n"
20*62c56f98SSadaf Ebrahimi
21*62c56f98SSadaf EbrahimiX509 CRT information #3 (DER)
22*62c56f98SSadaf Ebrahimidepends_on:MBEDTLS_RSA_C:MBEDTLS_MD_CAN_SHA1
23*62c56f98SSadaf Ebrahimix509_cert_info:"data_files/parse_input/test-ca.crt.der":"cert. version     \: 3\nserial number     \: 03\nissuer name       \: C=NL, O=PolarSSL, CN=PolarSSL Test CA\nsubject name      \: C=NL, O=PolarSSL, CN=PolarSSL Test CA\nissued  on        \: 2019-02-10 14\:44\:00\nexpires on        \: 2029-02-10 14\:44\:00\nsigned using      \: RSA with SHA1\nRSA key size      \: 2048 bits\nbasic constraints \: CA=true\n"
24*62c56f98SSadaf Ebrahimi
25*62c56f98SSadaf EbrahimiX509 CRT information MD5 Digest
26*62c56f98SSadaf Ebrahimidepends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_RSA_C:MBEDTLS_MD_CAN_MD5
27*62c56f98SSadaf Ebrahimix509_cert_info:"data_files/parse_input/cert_md5.crt":"cert. version     \: 3\nserial number     \: 06\nissuer name       \: C=NL, O=PolarSSL, CN=PolarSSL Test CA\nsubject name      \: C=NL, O=PolarSSL, CN=PolarSSL Cert MD5\nissued  on        \: 2000-01-01 12\:12\:12\nexpires on        \: 2030-01-01 12\:12\:12\nsigned using      \: RSA with MD5\nRSA key size      \: 2048 bits\nbasic constraints \: CA=false\n"
28*62c56f98SSadaf Ebrahimi
29*62c56f98SSadaf EbrahimiX509 CRT information SHA1 Digest
30*62c56f98SSadaf Ebrahimidepends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_RSA_C:MBEDTLS_MD_CAN_SHA1
31*62c56f98SSadaf Ebrahimix509_cert_info:"data_files/parse_input/cert_sha1.crt":"cert. version     \: 3\nserial number     \: 07\nissuer name       \: C=NL, O=PolarSSL, CN=PolarSSL Test CA\nsubject name      \: C=NL, O=PolarSSL, CN=PolarSSL Cert SHA1\nissued  on        \: 2019-02-10 14\:44\:06\nexpires on        \: 2029-02-10 14\:44\:06\nsigned using      \: RSA with SHA1\nRSA key size      \: 2048 bits\nbasic constraints \: CA=false\n"
32*62c56f98SSadaf Ebrahimi
33*62c56f98SSadaf EbrahimiX509 CRT information SHA224 Digest
34*62c56f98SSadaf Ebrahimidepends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_RSA_C:MBEDTLS_MD_CAN_SHA224
35*62c56f98SSadaf Ebrahimix509_cert_info:"data_files/parse_input/cert_sha224.crt":"cert. version     \: 3\nserial number     \: 08\nissuer name       \: C=NL, O=PolarSSL, CN=PolarSSL Test CA\nsubject name      \: C=NL, O=PolarSSL, CN=PolarSSL Cert SHA224\nissued  on        \: 2019-02-10 14\:44\:06\nexpires on        \: 2029-02-10 14\:44\:06\nsigned using      \: RSA with SHA-224\nRSA key size      \: 2048 bits\nbasic constraints \: CA=false\n"
36*62c56f98SSadaf Ebrahimi
37*62c56f98SSadaf EbrahimiX509 CRT information SHA256 Digest
38*62c56f98SSadaf Ebrahimidepends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_RSA_C:MBEDTLS_MD_CAN_SHA256
39*62c56f98SSadaf Ebrahimix509_cert_info:"data_files/parse_input/cert_sha256.crt":"cert. version     \: 3\nserial number     \: 09\nissuer name       \: C=NL, O=PolarSSL, CN=PolarSSL Test CA\nsubject name      \: C=NL, O=PolarSSL, CN=PolarSSL Cert SHA256\nissued  on        \: 2019-02-10 14\:44\:06\nexpires on        \: 2029-02-10 14\:44\:06\nsigned using      \: RSA with SHA-256\nRSA key size      \: 2048 bits\nbasic constraints \: CA=false\n"
40*62c56f98SSadaf Ebrahimi
41*62c56f98SSadaf EbrahimiX509 CRT information SHA384 Digest
42*62c56f98SSadaf Ebrahimidepends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_RSA_C:MBEDTLS_MD_CAN_SHA384
43*62c56f98SSadaf Ebrahimix509_cert_info:"data_files/parse_input/cert_sha384.crt":"cert. version     \: 3\nserial number     \: 0A\nissuer name       \: C=NL, O=PolarSSL, CN=PolarSSL Test CA\nsubject name      \: C=NL, O=PolarSSL, CN=PolarSSL Cert SHA384\nissued  on        \: 2019-02-10 14\:44\:06\nexpires on        \: 2029-02-10 14\:44\:06\nsigned using      \: RSA with SHA-384\nRSA key size      \: 2048 bits\nbasic constraints \: CA=false\n"
44*62c56f98SSadaf Ebrahimi
45*62c56f98SSadaf EbrahimiX509 CRT information SHA512 Digest
46*62c56f98SSadaf Ebrahimidepends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_RSA_C:MBEDTLS_MD_CAN_SHA512
47*62c56f98SSadaf Ebrahimix509_cert_info:"data_files/parse_input/cert_sha512.crt":"cert. version     \: 3\nserial number     \: 0B\nissuer name       \: C=NL, O=PolarSSL, CN=PolarSSL Test CA\nsubject name      \: C=NL, O=PolarSSL, CN=PolarSSL Cert SHA512\nissued  on        \: 2019-02-10 14\:44\:06\nexpires on        \: 2029-02-10 14\:44\:06\nsigned using      \: RSA with SHA-512\nRSA key size      \: 2048 bits\nbasic constraints \: CA=false\n"
48*62c56f98SSadaf Ebrahimi
49*62c56f98SSadaf EbrahimiX509 CRT information RSA-PSS, SHA1 Digest
50*62c56f98SSadaf Ebrahimidepends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_X509_RSASSA_PSS_SUPPORT:MBEDTLS_MD_CAN_SHA1
51*62c56f98SSadaf Ebrahimix509_cert_info:"data_files/parse_input/server9.crt":"cert. version     \: 3\nserial number     \: 16\nissuer name       \: C=NL, O=PolarSSL, CN=PolarSSL Test CA\nsubject name      \: C=NL, O=PolarSSL, CN=localhost\nissued  on        \: 2014-01-20 13\:38\:16\nexpires on        \: 2024-01-18 13\:38\:16\nsigned using      \: RSASSA-PSS (SHA1, MGF1-SHA1, 0xEA)\nRSA key size      \: 1024 bits\nbasic constraints \: CA=false\n"
52*62c56f98SSadaf Ebrahimi
53*62c56f98SSadaf EbrahimiX509 CRT information RSA-PSS, SHA224 Digest
54*62c56f98SSadaf Ebrahimidepends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_X509_RSASSA_PSS_SUPPORT:MBEDTLS_MD_CAN_SHA224
55*62c56f98SSadaf Ebrahimix509_cert_info:"data_files/parse_input/server9-sha224.crt":"cert. version     \: 3\nserial number     \: 17\nissuer name       \: C=NL, O=PolarSSL, CN=PolarSSL Test CA\nsubject name      \: C=NL, O=PolarSSL, CN=localhost\nissued  on        \: 2014-01-20 13\:57\:36\nexpires on        \: 2024-01-18 13\:57\:36\nsigned using      \: RSASSA-PSS (SHA224, MGF1-SHA224, 0xE2)\nRSA key size      \: 1024 bits\nbasic constraints \: CA=false\n"
56*62c56f98SSadaf Ebrahimi
57*62c56f98SSadaf EbrahimiX509 CRT information RSA-PSS, SHA256 Digest
58*62c56f98SSadaf Ebrahimidepends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_X509_RSASSA_PSS_SUPPORT:MBEDTLS_MD_CAN_SHA256
59*62c56f98SSadaf Ebrahimix509_cert_info:"data_files/parse_input/server9-sha256.crt":"cert. version     \: 3\nserial number     \: 18\nissuer name       \: C=NL, O=PolarSSL, CN=PolarSSL Test CA\nsubject name      \: C=NL, O=PolarSSL, CN=localhost\nissued  on        \: 2014-01-20 13\:57\:45\nexpires on        \: 2024-01-18 13\:57\:45\nsigned using      \: RSASSA-PSS (SHA256, MGF1-SHA256, 0xDE)\nRSA key size      \: 1024 bits\nbasic constraints \: CA=false\n"
60*62c56f98SSadaf Ebrahimi
61*62c56f98SSadaf EbrahimiX509 CRT information RSA-PSS, SHA384 Digest
62*62c56f98SSadaf Ebrahimidepends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_X509_RSASSA_PSS_SUPPORT:MBEDTLS_MD_CAN_SHA384
63*62c56f98SSadaf Ebrahimix509_cert_info:"data_files/parse_input/server9-sha384.crt":"cert. version     \: 3\nserial number     \: 19\nissuer name       \: C=NL, O=PolarSSL, CN=PolarSSL Test CA\nsubject name      \: C=NL, O=PolarSSL, CN=localhost\nissued  on        \: 2014-01-20 13\:57\:58\nexpires on        \: 2024-01-18 13\:57\:58\nsigned using      \: RSASSA-PSS (SHA384, MGF1-SHA384, 0xCE)\nRSA key size      \: 1024 bits\nbasic constraints \: CA=false\n"
64*62c56f98SSadaf Ebrahimi
65*62c56f98SSadaf EbrahimiX509 CRT information RSA-PSS, SHA512 Digest
66*62c56f98SSadaf Ebrahimidepends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_X509_RSASSA_PSS_SUPPORT:MBEDTLS_MD_CAN_SHA512
67*62c56f98SSadaf Ebrahimix509_cert_info:"data_files/parse_input/server9-sha512.crt":"cert. version     \: 3\nserial number     \: 1A\nissuer name       \: C=NL, O=PolarSSL, CN=PolarSSL Test CA\nsubject name      \: C=NL, O=PolarSSL, CN=localhost\nissued  on        \: 2014-01-20 13\:58\:12\nexpires on        \: 2024-01-18 13\:58\:12\nsigned using      \: RSASSA-PSS (SHA512, MGF1-SHA512, 0xBE)\nRSA key size      \: 1024 bits\nbasic constraints \: CA=false\n"
68*62c56f98SSadaf Ebrahimi
69*62c56f98SSadaf EbrahimiX509 CRT information EC, SHA1 Digest
70*62c56f98SSadaf Ebrahimidepends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_PK_CAN_ECDSA_SOME:MBEDTLS_ECP_HAVE_SECP256R1:MBEDTLS_MD_CAN_SHA1
71*62c56f98SSadaf Ebrahimix509_cert_info:"data_files/parse_input/server5-sha1.crt":"cert. version     \: 3\nserial number     \: 12\nissuer name       \: C=NL, O=PolarSSL, CN=Polarssl Test EC CA\nsubject name      \: C=NL, O=PolarSSL, CN=localhost\nissued  on        \: 2013-09-24 16\:21\:27\nexpires on        \: 2023-09-22 16\:21\:27\nsigned using      \: ECDSA with SHA1\nEC key size       \: 256 bits\nbasic constraints \: CA=false\n"
72*62c56f98SSadaf Ebrahimi
73*62c56f98SSadaf EbrahimiX509 CRT information EC, SHA224 Digest
74*62c56f98SSadaf Ebrahimidepends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_PK_CAN_ECDSA_SOME:MBEDTLS_ECP_HAVE_SECP256R1:MBEDTLS_MD_CAN_SHA224
75*62c56f98SSadaf Ebrahimix509_cert_info:"data_files/parse_input/server5-sha224.crt":"cert. version     \: 3\nserial number     \: 13\nissuer name       \: C=NL, O=PolarSSL, CN=Polarssl Test EC CA\nsubject name      \: C=NL, O=PolarSSL, CN=localhost\nissued  on        \: 2013-09-24 16\:21\:27\nexpires on        \: 2023-09-22 16\:21\:27\nsigned using      \: ECDSA with SHA224\nEC key size       \: 256 bits\nbasic constraints \: CA=false\n"
76*62c56f98SSadaf Ebrahimi
77*62c56f98SSadaf EbrahimiX509 CRT information EC, SHA256 Digest
78*62c56f98SSadaf Ebrahimidepends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_PK_CAN_ECDSA_SOME:MBEDTLS_ECP_HAVE_SECP256R1:MBEDTLS_MD_CAN_SHA256
79*62c56f98SSadaf Ebrahimix509_cert_info:"data_files/parse_input/server5.crt":"cert. version     \: 3\nserial number     \: 09\nissuer name       \: C=NL, O=PolarSSL, CN=Polarssl Test EC CA\nsubject name      \: C=NL, O=PolarSSL, CN=localhost\nissued  on        \: 2013-09-24 15\:52\:04\nexpires on        \: 2023-09-22 15\:52\:04\nsigned using      \: ECDSA with SHA256\nEC key size       \: 256 bits\nbasic constraints \: CA=false\n"
80*62c56f98SSadaf Ebrahimi
81*62c56f98SSadaf EbrahimiX509 CRT information EC, SHA384 Digest
82*62c56f98SSadaf Ebrahimidepends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_PK_CAN_ECDSA_SOME:MBEDTLS_ECP_HAVE_SECP256R1:MBEDTLS_MD_CAN_SHA384
83*62c56f98SSadaf Ebrahimix509_cert_info:"data_files/parse_input/server5-sha384.crt":"cert. version     \: 3\nserial number     \: 14\nissuer name       \: C=NL, O=PolarSSL, CN=Polarssl Test EC CA\nsubject name      \: C=NL, O=PolarSSL, CN=localhost\nissued  on        \: 2013-09-24 16\:21\:27\nexpires on        \: 2023-09-22 16\:21\:27\nsigned using      \: ECDSA with SHA384\nEC key size       \: 256 bits\nbasic constraints \: CA=false\n"
84*62c56f98SSadaf Ebrahimi
85*62c56f98SSadaf EbrahimiX509 CRT information EC, SHA512 Digest
86*62c56f98SSadaf Ebrahimidepends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_PK_CAN_ECDSA_SOME:MBEDTLS_ECP_HAVE_SECP256R1:MBEDTLS_MD_CAN_SHA512
87*62c56f98SSadaf Ebrahimix509_cert_info:"data_files/parse_input/server5-sha512.crt":"cert. version     \: 3\nserial number     \: 15\nissuer name       \: C=NL, O=PolarSSL, CN=Polarssl Test EC CA\nsubject name      \: C=NL, O=PolarSSL, CN=localhost\nissued  on        \: 2013-09-24 16\:21\:27\nexpires on        \: 2023-09-22 16\:21\:27\nsigned using      \: ECDSA with SHA512\nEC key size       \: 256 bits\nbasic constraints \: CA=false\n"
88*62c56f98SSadaf Ebrahimi
89*62c56f98SSadaf EbrahimiX509 CRT information EC, SHA256 Digest, hardware module name SAN
90*62c56f98SSadaf Ebrahimidepends_on:MBEDTLS_PK_CAN_ECDSA_SOME:MBEDTLS_ECP_HAVE_SECP256R1:MBEDTLS_MD_CAN_SHA256
91*62c56f98SSadaf Ebrahimix509_cert_info:"data_files/parse_input/server5-othername.crt.der":"cert. version     \: 3\nserial number     \: 4D\nissuer name       \: C=UK, O=Mbed TLS, CN=Mbed TLS othername SAN\nsubject name      \: C=UK, O=Mbed TLS, CN=Mbed TLS othername SAN\nissued  on        \: 2023-06-20 09\:04\:43\nexpires on        \: 2033-06-17 09\:04\:43\nsigned using      \: ECDSA with SHA256\nEC key size       \: 256 bits\nsubject alt name  \:\n    otherName \:\n        hardware module name \:\n            hardware type          \: 1.3.6.1.4.1.17.3\n            hardware serial number \: 313233343536\n"
92*62c56f98SSadaf Ebrahimi
93*62c56f98SSadaf EbrahimiX509 CRT information EC, SHA256 Digest, binary hardware module name SAN
94*62c56f98SSadaf Ebrahimidepends_on:MBEDTLS_PK_CAN_ECDSA_SOME:MBEDTLS_ECP_HAVE_SECP256R1:MBEDTLS_MD_CAN_SHA256
95*62c56f98SSadaf Ebrahimix509_cert_info:"data_files/parse_input/server5-nonprintable_othername.crt.der":"cert. version     \: 3\nserial number     \: 4D\nissuer name       \: C=UK, O=Mbed TLS, CN=Mbed TLS non-printable othername SAN\nsubject name      \: C=UK, O=Mbed TLS, CN=Mbed TLS non-printable othername SAN\nissued  on        \: 2023-06-20 09\:49\:20\nexpires on        \: 2033-06-17 09\:49\:20\nsigned using      \: ECDSA with SHA256\nEC key size       \: 256 bits\nsubject alt name  \:\n    otherName \:\n        hardware module name \:\n            hardware type          \: 1.3.6.1.4.1.17.3\n            hardware serial number \: 3132338081008180333231\n"
96*62c56f98SSadaf Ebrahimi
97*62c56f98SSadaf EbrahimiX509 CRT information EC, SHA256 Digest, directoryName SAN
98*62c56f98SSadaf Ebrahimidepends_on:MBEDTLS_PK_CAN_ECDSA_SOME:MBEDTLS_ECP_HAVE_SECP256R1:MBEDTLS_MD_CAN_SHA256
99*62c56f98SSadaf Ebrahimix509_cert_info:"data_files/parse_input/server5-directoryname.crt.der":"cert. version     \: 3\nserial number     \: 4D\nissuer name       \: C=UK, O=Mbed TLS, CN=Mbed TLS directoryName SAN\nsubject name      \: C=UK, O=Mbed TLS, CN=Mbed TLS directoryName SAN\nissued  on        \: 2023-01-10 16\:59\:29\nexpires on        \: 2033-01-07 16\:59\:29\nsigned using      \: ECDSA with SHA256\nEC key size       \: 256 bits\nsubject alt name  \:\n    directoryName \: C=UK, O=Mbed TLS, CN=Mbed TLS directoryName SAN\n"
100*62c56f98SSadaf Ebrahimi
101*62c56f98SSadaf EbrahimiX509 CRT information EC, SHA256 Digest, two directoryName SANs
102*62c56f98SSadaf Ebrahimidepends_on:MBEDTLS_PK_CAN_ECDSA_SOME:MBEDTLS_ECP_HAVE_SECP256R1:MBEDTLS_MD_CAN_SHA256
103*62c56f98SSadaf Ebrahimix509_cert_info:"data_files/parse_input/server5-two-directorynames.crt.der":"cert. version     \: 3\nserial number     \: 4D\nissuer name       \: C=UK, O=Mbed TLS, CN=Mbed TLS directoryName SAN\nsubject name      \: C=UK, O=Mbed TLS, CN=Mbed TLS directoryName SAN\nissued  on        \: 2023-01-12 10\:34\:11\nexpires on        \: 2033-01-09 10\:34\:11\nsigned using      \: ECDSA with SHA256\nEC key size       \: 256 bits\nsubject alt name  \:\n    directoryName \: C=UK, O=Mbed TLS, CN=Mbed TLS directoryName SAN\n    directoryName \: O=MALFORM_ME\n"
104*62c56f98SSadaf Ebrahimi
105*62c56f98SSadaf EbrahimiX509 CRT information EC, SHA256 Digest, Wisun Fan device
106*62c56f98SSadaf Ebrahimidepends_on:MBEDTLS_PK_CAN_ECDSA_SOME:MBEDTLS_ECP_HAVE_SECP256R1:MBEDTLS_MD_CAN_SHA256
107*62c56f98SSadaf Ebrahimix509_cert_info:"data_files/parse_input/server5-fan.crt.der":"cert. version     \: 3\nserial number     \: 4D\nissuer name       \: C=UK, O=Mbed TLS, CN=Mbed TLS FAN\nsubject name      \: C=UK, O=Mbed TLS, CN=Mbed TLS FAN\nissued  on        \: 2023-06-20 09\:49\:35\nexpires on        \: 2033-06-17 09\:49\:35\nsigned using      \: ECDSA with SHA256\nEC key size       \: 256 bits\next key usage     \: Wi-SUN Alliance Field Area Network (FAN)\n"
108*62c56f98SSadaf Ebrahimi
109*62c56f98SSadaf EbrahimiX509 CRT information, NS Cert Type
110*62c56f98SSadaf Ebrahimidepends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_RSA_C:MBEDTLS_MD_CAN_SHA1
111*62c56f98SSadaf Ebrahimix509_cert_info:"data_files/parse_input/server1.cert_type.crt":"cert. version     \: 3\nserial number     \: 01\nissuer name       \: C=NL, O=PolarSSL, CN=PolarSSL Test CA\nsubject name      \: C=NL, O=PolarSSL, CN=PolarSSL Server 1\nissued  on        \: 2019-02-10 14\:44\:06\nexpires on        \: 2029-02-10 14\:44\:06\nsigned using      \: RSA with SHA1\nRSA key size      \: 2048 bits\nbasic constraints \: CA=false\ncert. type        \: SSL Server\n"
112*62c56f98SSadaf Ebrahimi
113*62c56f98SSadaf EbrahimiX509 CRT information, Key Usage
114*62c56f98SSadaf Ebrahimidepends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_RSA_C:MBEDTLS_MD_CAN_SHA1
115*62c56f98SSadaf Ebrahimix509_cert_info:"data_files/parse_input/server1.key_usage.crt":"cert. version     \: 3\nserial number     \: 01\nissuer name       \: C=NL, O=PolarSSL, CN=PolarSSL Test CA\nsubject name      \: C=NL, O=PolarSSL, CN=PolarSSL Server 1\nissued  on        \: 2019-02-10 14\:44\:06\nexpires on        \: 2029-02-10 14\:44\:06\nsigned using      \: RSA with SHA1\nRSA key size      \: 2048 bits\nbasic constraints \: CA=false\nkey usage         \: Digital Signature, Non Repudiation, Key Encipherment\n"
116*62c56f98SSadaf Ebrahimi
117*62c56f98SSadaf EbrahimiX509 CRT information, Key Usage with decipherOnly
118*62c56f98SSadaf Ebrahimidepends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_RSA_C:MBEDTLS_MD_CAN_SHA1
119*62c56f98SSadaf Ebrahimix509_cert_info:"data_files/parse_input/keyUsage.decipherOnly.crt":"cert. version     \: 3\nserial number     \: 9B\:13\:CE\:4C\:A5\:6F\:DE\:52\nissuer name       \: C=GB, L=Cambridge, O=Default Company Ltd\nsubject name      \: C=GB, L=Cambridge, O=Default Company Ltd\nissued  on        \: 2015-05-12 10\:36\:55\nexpires on        \: 2018-05-11 10\:36\:55\nsigned using      \: RSA with SHA1\nRSA key size      \: 1024 bits\nbasic constraints \: CA=false\nkey usage         \: Digital Signature, Non Repudiation, Key Encipherment, Decipher Only\n"
120*62c56f98SSadaf Ebrahimi
121*62c56f98SSadaf EbrahimiX509 CRT information, Subject Alt Name
122*62c56f98SSadaf Ebrahimidepends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_RSA_C:MBEDTLS_MD_CAN_SHA256
123*62c56f98SSadaf Ebrahimix509_cert_info:"data_files/parse_input/cert_example_multi.crt":"cert. version     \: 3\nserial number     \: 11\nissuer name       \: C=NL, O=PolarSSL, CN=PolarSSL Test CA\nsubject name      \: C=NL, O=PolarSSL, CN=www.example.com\nissued  on        \: 2019-07-10 11\:27\:52\nexpires on        \: 2029-07-10 11\:27\:52\nsigned using      \: RSA with SHA-256\nRSA key size      \: 1024 bits\nsubject alt name  \:\n    dNSName \: example.com\n    dNSName \: example.net\n    dNSName \: *.example.org\n"
124*62c56f98SSadaf Ebrahimi
125*62c56f98SSadaf EbrahimiX509 CRT information, Multiple different Subject Alt Name
126*62c56f98SSadaf Ebrahimidepends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_PK_CAN_ECDSA_SOME:MBEDTLS_ECP_HAVE_SECP256R1:MBEDTLS_MD_CAN_SHA256
127*62c56f98SSadaf Ebrahimix509_cert_info:"data_files/parse_input/multiple_san.crt":"cert. version     \: 3\nserial number     \: 04\nissuer name       \: C=UK, O=Mbed TLS, CN=Mbed TLS multiple othername SAN\nsubject name      \: C=UK, O=Mbed TLS, CN=Mbed TLS multiple othername SAN\nissued  on        \: 2019-04-22 16\:10\:48\nexpires on        \: 2029-04-19 16\:10\:48\nsigned using      \: ECDSA with SHA256\nEC key size       \: 256 bits\nsubject alt name  \:\n    dNSName \: example.com\n    otherName \:\n        hardware module name \:\n            hardware type          \: 1.3.6.1.4.1.17.3\n            hardware serial number \: 313233343536\n    dNSName \: example.net\n    dNSName \: *.example.org\n"
128*62c56f98SSadaf Ebrahimi
129*62c56f98SSadaf EbrahimiX509 CRT information, Subject Alt Name + Key Usage
130*62c56f98SSadaf Ebrahimidepends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_RSA_C:MBEDTLS_MD_CAN_SHA1
131*62c56f98SSadaf Ebrahimix509_cert_info:"data_files/parse_input/cert_example_multi_nocn.crt":"cert. version     \: 3\nserial number     \: F7\:C6\:7F\:F8\:E9\:A9\:63\:F9\nissuer name       \: C=NL\nsubject name      \: C=NL\nissued  on        \: 2014-01-22 10\:04\:33\nexpires on        \: 2024-01-22 10\:04\:33\nsigned using      \: RSA with SHA1\nRSA key size      \: 1024 bits\nbasic constraints \: CA=false\nsubject alt name  \:\n    dNSName \: www.shotokan-braunschweig.de\n    dNSName \: www.massimo-abate.eu\n    iPAddress \: 192.168.1.1\n    iPAddress \: 192.168.69.144\nkey usage         \: Digital Signature, Non Repudiation, Key Encipherment\n"
132*62c56f98SSadaf Ebrahimi
133*62c56f98SSadaf EbrahimiX509 CRT information, Subject Alt Name with uniformResourceIdentifier
134*62c56f98SSadaf Ebrahimidepends_on:MBEDTLS_RSA_C:MBEDTLS_MD_CAN_SHA256
135*62c56f98SSadaf Ebrahimix509_cert_info:"data_files/parse_input/rsa_single_san_uri.crt.der":"cert. version     \: 3\nserial number     \: 6F\:75\:EB\:E9\:6D\:25\:BC\:88\:82\:62\:A3\:E0\:68\:A7\:37\:3B\:EC\:75\:8F\:9C\nissuer name       \: C=UK, O=Mbed TLS, CN=Mbed TLS URI SAN\nsubject name      \: C=UK, O=Mbed TLS, CN=Mbed TLS URI SAN\nissued  on        \: 2023-02-14 10\:38\:05\nexpires on        \: 2043-02-09 10\:38\:05\nsigned using      \: RSA with SHA-256\nRSA key size      \: 2048 bits\nbasic constraints \: CA=false\nsubject alt name  \:\n    uniformResourceIdentifier \: urn\:example.com\:5ff40f78-9210-494f-8206-c2c082f0609c\nkey usage         \: Digital Signature, Non Repudiation, Key Encipherment\n"
136*62c56f98SSadaf Ebrahimi
137*62c56f98SSadaf EbrahimiX509 CRT information, Subject Alt Name with two uniformResourceIdentifiers
138*62c56f98SSadaf Ebrahimidepends_on:MBEDTLS_RSA_C:MBEDTLS_MD_CAN_SHA256
139*62c56f98SSadaf Ebrahimix509_cert_info:"data_files/parse_input/rsa_multiple_san_uri.crt.der":"cert. version     \: 3\nserial number     \: 08\:E2\:93\:18\:91\:26\:D8\:46\:88\:90\:10\:4F\:B5\:86\:CB\:C4\:78\:E6\:EA\:0D\nissuer name       \: C=UK, O=Mbed TLS, CN=Mbed TLS URI SAN\nsubject name      \: C=UK, O=Mbed TLS, CN=Mbed TLS URI SAN\nissued  on        \: 2023-02-14 10\:37\:50\nexpires on        \: 2043-02-09 10\:37\:50\nsigned using      \: RSA with SHA-256\nRSA key size      \: 2048 bits\nbasic constraints \: CA=false\nsubject alt name  \:\n    uniformResourceIdentifier \: urn\:example.com\:5ff40f78-9210-494f-8206-c2c082f0609c\n    uniformResourceIdentifier \: urn\:example.com\:5ff40f78-9210-494f-8206-abcde1234567\nkey usage         \: Digital Signature, Non Repudiation, Key Encipherment\n"
140*62c56f98SSadaf Ebrahimi
141*62c56f98SSadaf EbrahimiX509 CRT information, RSA Certificate Policy any
142*62c56f98SSadaf Ebrahimidepends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_RSA_C:MBEDTLS_MD_CAN_SHA256
143*62c56f98SSadaf Ebrahimix509_cert_info:"data_files/parse_input/test-ca-any_policy.crt":"cert. version     \: 3\nserial number     \: 00\nissuer name       \: C=NL, O=PolarSSL, CN=PolarSSL Test CA\nsubject name      \: C=NL, O=PolarSSL, CN=PolarSSL Test CA\nissued  on        \: 2019-03-21 16\:40\:59\nexpires on        \: 2029-03-21 16\:40\:59\nsigned using      \: RSA with SHA-256\nRSA key size      \: 2048 bits\nbasic constraints \: CA=true\ncertificate policies \: Any Policy\n"
144*62c56f98SSadaf Ebrahimi
145*62c56f98SSadaf EbrahimiX509 CRT information, ECDSA Certificate Policy any
146*62c56f98SSadaf Ebrahimidepends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_PK_CAN_ECDSA_SOME:MBEDTLS_ECP_HAVE_SECP384R1:MBEDTLS_MD_CAN_SHA256
147*62c56f98SSadaf Ebrahimix509_cert_info:"data_files/parse_input/test-ca-any_policy_ec.crt":"cert. version     \: 3\nserial number     \: 00\nissuer name       \: C=NL, O=PolarSSL, CN=Polarssl Test EC CA\nsubject name      \: C=NL, O=PolarSSL, CN=Polarssl Test EC CA\nissued  on        \: 2019-03-25 09\:02\:45\nexpires on        \: 2029-03-25 09\:02\:45\nsigned using      \: ECDSA with SHA256\nEC key size       \: 384 bits\nbasic constraints \: CA=true\ncertificate policies \: Any Policy\n"
148*62c56f98SSadaf Ebrahimi
149*62c56f98SSadaf EbrahimiX509 CRT information, RSA Certificate Policy any with qualifier
150*62c56f98SSadaf Ebrahimidepends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_RSA_C:MBEDTLS_MD_CAN_SHA256
151*62c56f98SSadaf Ebrahimix509_cert_info:"data_files/parse_input/test-ca-any_policy_with_qualifier.crt":"cert. version     \: 3\nserial number     \: 00\nissuer name       \: C=NL, O=PolarSSL, CN=PolarSSL Test CA\nsubject name      \: C=NL, O=PolarSSL, CN=PolarSSL Test CA\nissued  on        \: 2019-04-28 13\:14\:31\nexpires on        \: 2029-04-28 13\:14\:31\nsigned using      \: RSA with SHA-256\nRSA key size      \: 2048 bits\nbasic constraints \: CA=true\ncertificate policies \: Any Policy\n"
152*62c56f98SSadaf Ebrahimi
153*62c56f98SSadaf EbrahimiX509 CRT information, ECDSA Certificate Policy any with qualifier
154*62c56f98SSadaf Ebrahimidepends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_PK_CAN_ECDSA_SOME:MBEDTLS_ECP_HAVE_SECP384R1:MBEDTLS_MD_CAN_SHA256
155*62c56f98SSadaf Ebrahimix509_cert_info:"data_files/parse_input/test-ca-any_policy_with_qualifier_ec.crt":"cert. version     \: 3\nserial number     \: 00\nissuer name       \: C=NL, O=PolarSSL, CN=Polarssl Test EC CA\nsubject name      \: C=NL, O=PolarSSL, CN=Polarssl Test EC CA\nissued  on        \: 2019-04-28 10\:16\:05\nexpires on        \: 2029-04-28 10\:16\:05\nsigned using      \: ECDSA with SHA256\nEC key size       \: 384 bits\nbasic constraints \: CA=true\ncertificate policies \: Any Policy\n"
156*62c56f98SSadaf Ebrahimi
157*62c56f98SSadaf EbrahimiX509 CRT information, RSA Certificate multiple Policies
158*62c56f98SSadaf Ebrahimidepends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_RSA_C:MBEDTLS_MD_CAN_SHA256
159*62c56f98SSadaf Ebrahimix509_cert_info:"data_files/parse_input/test-ca-multi_policy.crt":"cert. version     \: 3\nserial number     \: 00\nissuer name       \: C=NL, O=PolarSSL, CN=PolarSSL Test CA\nsubject name      \: C=NL, O=PolarSSL, CN=PolarSSL Test CA\nissued  on        \: 2019-04-28 12\:59\:19\nexpires on        \: 2029-04-28 12\:59\:19\nsigned using      \: RSA with SHA-256\nRSA key size      \: 2048 bits\nbasic constraints \: CA=true\ncertificate policies \: ???, Any Policy\n"
160*62c56f98SSadaf Ebrahimi
161*62c56f98SSadaf EbrahimiX509 CRT information, ECDSA Certificate multiple Policies
162*62c56f98SSadaf Ebrahimidepends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_PK_CAN_ECDSA_SOME:MBEDTLS_ECP_HAVE_SECP384R1:MBEDTLS_MD_CAN_SHA256
163*62c56f98SSadaf Ebrahimix509_cert_info:"data_files/parse_input/test-ca-multi_policy_ec.crt":"cert. version     \: 3\nserial number     \: 00\nissuer name       \: C=NL, O=PolarSSL, CN=Polarssl Test EC CA\nsubject name      \: C=NL, O=PolarSSL, CN=Polarssl Test EC CA\nissued  on        \: 2019-04-28 12\:59\:51\nexpires on        \: 2029-04-28 12\:59\:51\nsigned using      \: ECDSA with SHA256\nEC key size       \: 384 bits\nbasic constraints \: CA=true\ncertificate policies \: ???, Any Policy\n"
164*62c56f98SSadaf Ebrahimi
165*62c56f98SSadaf EbrahimiX509 CRT information, RSA Certificate unsupported policy
166*62c56f98SSadaf Ebrahimidepends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_RSA_C:MBEDTLS_MD_CAN_SHA256
167*62c56f98SSadaf Ebrahimix509_cert_info:"data_files/parse_input/test-ca-unsupported_policy.crt":"cert. version     \: 3\nserial number     \: 00\nissuer name       \: C=NL, O=PolarSSL, CN=PolarSSL Test CA\nsubject name      \: C=NL, O=PolarSSL, CN=PolarSSL Test CA\nissued  on        \: 2019-04-28 13\:00\:13\nexpires on        \: 2029-04-28 13\:00\:13\nsigned using      \: RSA with SHA-256\nRSA key size      \: 2048 bits\nbasic constraints \: CA=true\ncertificate policies \: ???\n"
168*62c56f98SSadaf Ebrahimi
169*62c56f98SSadaf EbrahimiX509 CRT information, ECDSA Certificate unsupported policy
170*62c56f98SSadaf Ebrahimidepends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_PK_CAN_ECDSA_SOME:MBEDTLS_ECP_HAVE_SECP384R1:MBEDTLS_MD_CAN_SHA256
171*62c56f98SSadaf Ebrahimix509_cert_info:"data_files/parse_input/test-ca-unsupported_policy_ec.crt":"cert. version     \: 3\nserial number     \: 00\nissuer name       \: C=NL, O=PolarSSL, CN=Polarssl Test EC CA\nsubject name      \: C=NL, O=PolarSSL, CN=Polarssl Test EC CA\nissued  on        \: 2019-04-28 13\:00\:19\nexpires on        \: 2029-04-28 13\:00\:19\nsigned using      \: ECDSA with SHA256\nEC key size       \: 384 bits\nbasic constraints \: CA=true\ncertificate policies \: ???\n"
172*62c56f98SSadaf Ebrahimi
173*62c56f98SSadaf EbrahimiX509 CRT information, Key Usage + Extended Key Usage
174*62c56f98SSadaf Ebrahimidepends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_RSA_C:MBEDTLS_MD_CAN_SHA256
175*62c56f98SSadaf Ebrahimix509_cert_info:"data_files/parse_input/server1.ext_ku.crt":"cert. version     \: 3\nserial number     \: 21\nissuer name       \: C=NL, O=PolarSSL, CN=PolarSSL Test CA\nsubject name      \: C=NL, O=PolarSSL, CN=PolarSSL Server 1\nissued  on        \: 2014-04-01 14\:44\:43\nexpires on        \: 2024-03-29 14\:44\:43\nsigned using      \: RSA with SHA-256\nRSA key size      \: 2048 bits\nbasic constraints \: CA=false\nkey usage         \: Digital Signature, Non Repudiation, Key Encipherment\next key usage     \: TLS Web Server Authentication\n"
176*62c56f98SSadaf Ebrahimi
177*62c56f98SSadaf EbrahimiX509 CRT information RSA signed by EC
178*62c56f98SSadaf Ebrahimidepends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_RSA_C:MBEDTLS_MD_CAN_SHA256:MBEDTLS_PK_CAN_ECDSA_SOME
179*62c56f98SSadaf Ebrahimix509_cert_info:"data_files/parse_input/server4.crt":"cert. version     \: 3\nserial number     \: 08\nissuer name       \: C=NL, O=PolarSSL, CN=Polarssl Test EC CA\nsubject name      \: C=NL, O=PolarSSL, CN=localhost\nissued  on        \: 2013-09-24 15\:52\:04\nexpires on        \: 2023-09-22 15\:52\:04\nsigned using      \: ECDSA with SHA256\nRSA key size      \: 2048 bits\nbasic constraints \: CA=false\n"
180*62c56f98SSadaf Ebrahimi
181*62c56f98SSadaf EbrahimiX509 CRT information EC signed by RSA
182*62c56f98SSadaf Ebrahimidepends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_PK_CAN_ECDSA_SOME:MBEDTLS_ECP_HAVE_SECP192R1:MBEDTLS_MD_CAN_SHA1:MBEDTLS_RSA_C
183*62c56f98SSadaf Ebrahimix509_cert_info:"data_files/parse_input/server3.crt":"cert. version     \: 3\nserial number     \: 0D\nissuer name       \: C=NL, O=PolarSSL, CN=PolarSSL Test CA\nsubject name      \: C=NL, O=PolarSSL, CN=localhost\nissued  on        \: 2013-08-09 09\:17\:03\nexpires on        \: 2023-08-07 09\:17\:03\nsigned using      \: RSA with SHA1\nEC key size       \: 192 bits\nbasic constraints \: CA=false\n"
184*62c56f98SSadaf Ebrahimi
185*62c56f98SSadaf EbrahimiX509 CRT information Bitstring in subject name
186*62c56f98SSadaf Ebrahimidepends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_RSA_C:MBEDTLS_MD_CAN_SHA1
187*62c56f98SSadaf Ebrahimix509_cert_info:"data_files/parse_input/bitstring-in-dn.pem":"cert. version     \: 3\nserial number     \: 02\nissuer name       \: CN=Test CA 01, ST=Ecnivorp, C=XX, [email protected], O=Test CA Authority\nsubject name      \: C=XX, O=tca, ST=Ecnivorp, OU=TCA, CN=Client, [email protected], serialNumber=7101012255, uniqueIdentifier=#030B0037313031303132323535\nissued  on        \: 2015-03-11 12\:06\:51\nexpires on        \: 2025-03-08 12\:06\:51\nsigned using      \: RSA with SHA1\nRSA key size      \: 2048 bits\nbasic constraints \: CA=false\nsubject alt name  \:\n    rfc822Name \: [email protected]\next key usage     \: TLS Web Client Authentication\n"
188*62c56f98SSadaf Ebrahimi
189*62c56f98SSadaf EbrahimiX509 CRT information Non-ASCII string in issuer name and subject name
190*62c56f98SSadaf Ebrahimidepends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_RSA_C:MBEDTLS_MD_CAN_SHA256
191*62c56f98SSadaf Ebrahimix509_cert_info:"data_files/parse_input/non-ascii-string-in-issuer.crt":"cert. version     \: 3\nserial number     \: 05\:E6\:53\:E7\:1B\:74\:F0\:B5\:D3\:84\:6D\:0C\:6D\:DC\:FA\:3F\:A4\:5A\:2B\:E0\nissuer name       \: C=JP, ST=Tokyo, O=\\C3\\A3\\C2\\83\\C2\\86\\C3\\A3\\C2\\82\\C2\\B9\\C3\\A3\\C2\\83\\C2\\88 Ltd, CN=\\C3\\A3\\C2\\83\\C2\\86\\C3\\A3\\C2\\82\\C2\\B9\\C3\\A3\\C2\\83\\C2\\88 CA\nsubject name      \: C=JP, ST=Tokyo, O=\\C3\\A3\\C2\\83\\C2\\86\\C3\\A3\\C2\\82\\C2\\B9\\C3\\A3\\C2\\83\\C2\\88 Ltd, CN=\\C3\\A3\\C2\\83\\C2\\86\\C3\\A3\\C2\\82\\C2\\B9\\C3\\A3\\C2\\83\\C2\\88 CA\nissued  on        \: 2020-05-20 16\:17\:23\nexpires on        \: 2020-06-19 16\:17\:23\nsigned using      \: RSA with SHA-256\nRSA key size      \: 2048 bits\nbasic constraints \: CA=true\n"
192*62c56f98SSadaf Ebrahimi
193*62c56f98SSadaf EbrahimiX509 CRT information Parsing IPv4 and IPv6 IP names
194*62c56f98SSadaf Ebrahimidepends_on:MBEDTLS_PK_CAN_ECDSA_VERIFY:MBEDTLS_MD_CAN_SHA256:MBEDTLS_ECP_HAVE_SECP256R1:MBEDTLS_RSA_C
195*62c56f98SSadaf Ebrahimix509_cert_info:"data_files/server5-tricky-ip-san.crt.der":"cert. version     \: 3\nserial number     \: 4D\nissuer name       \: C=UK, O=Mbed TLS, CN=Mbed TLS Tricky IP SAN\nsubject name      \: C=UK, O=Mbed TLS, CN=Mbed TLS Tricky IP SAN\nissued  on        \: 2023-06-05 11\:30\:36\nexpires on        \: 2033-06-02 11\:30\:36\nsigned using      \: ECDSA with SHA256\nEC key size       \: 256 bits\nsubject alt name  \:\n    iPAddress \: 97.98.99.100\n    iPAddress \: 6162\:6364\:2E65\:7861\:6D70\:6C65\:2E63\:6F6D\n"
196*62c56f98SSadaf Ebrahimi
197*62c56f98SSadaf EbrahimiX509 SAN parsing otherName
198*62c56f98SSadaf Ebrahimidepends_on:MBEDTLS_PK_CAN_ECDSA_SOME:MBEDTLS_ECP_HAVE_SECP256R1:MBEDTLS_MD_CAN_SHA256
199*62c56f98SSadaf Ebrahimix509_parse_san:"data_files/parse_input/server5-othername.crt.der":"type \: 0\notherName \: hardware module name \: hardware type \: 1.3.6.1.4.1.17.3, hardware serial number \: 313233343536\n":0
200*62c56f98SSadaf Ebrahimi
201*62c56f98SSadaf EbrahimiX509 SAN parsing binary otherName
202*62c56f98SSadaf Ebrahimidepends_on:MBEDTLS_PK_CAN_ECDSA_SOME:MBEDTLS_ECP_HAVE_SECP256R1:MBEDTLS_MD_CAN_SHA256
203*62c56f98SSadaf Ebrahimix509_parse_san:"data_files/parse_input/server5-nonprintable_othername.crt.der":"type \: 0\notherName \: hardware module name \: hardware type \: 1.3.6.1.4.1.17.3, hardware serial number \: 3132338081008180333231\n":0
204*62c56f98SSadaf Ebrahimi
205*62c56f98SSadaf EbrahimiX509 SAN parsing directoryName
206*62c56f98SSadaf Ebrahimidepends_on:MBEDTLS_PK_CAN_ECDSA_SOME:MBEDTLS_ECP_HAVE_SECP256R1:MBEDTLS_MD_CAN_SHA256
207*62c56f98SSadaf Ebrahimix509_parse_san:"data_files/parse_input/server5-directoryname.crt.der":"type \: 4\ndirectoryName \: C=UK, O=Mbed TLS, CN=Mbed TLS directoryName SAN\n":0
208*62c56f98SSadaf Ebrahimi
209*62c56f98SSadaf EbrahimiX509 SAN parsing directoryName, seq malformed
210*62c56f98SSadaf Ebrahimidepends_on:MBEDTLS_PK_CAN_ECDSA_SOME:MBEDTLS_ECP_HAVE_SECP256R1:MBEDTLS_MD_CAN_SHA256
211*62c56f98SSadaf Ebrahimix509_parse_san:"data_files/parse_input/server5-directoryname-seq-malformed.crt.der":"":MBEDTLS_ERR_ASN1_UNEXPECTED_TAG
212*62c56f98SSadaf Ebrahimi
213*62c56f98SSadaf EbrahimiX509 SAN parsing two directoryNames, second DN OID malformed
214*62c56f98SSadaf Ebrahimidepends_on:MBEDTLS_PK_CAN_ECDSA_SOME:MBEDTLS_ECP_HAVE_SECP256R1:MBEDTLS_MD_CAN_SHA256
215*62c56f98SSadaf Ebrahimix509_parse_san:"data_files/parse_input/server5-second-directoryname-oid-malformed.crt.der":"":MBEDTLS_ERR_X509_INVALID_NAME + MBEDTLS_ERR_ASN1_OUT_OF_DATA
216*62c56f98SSadaf Ebrahimi
217*62c56f98SSadaf EbrahimiX509 SAN parsing dNSName
218*62c56f98SSadaf Ebrahimidepends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_RSA_C:MBEDTLS_MD_CAN_SHA256
219*62c56f98SSadaf Ebrahimix509_parse_san:"data_files/parse_input/cert_example_multi.crt":"type \: 2\ndNSName \: example.com\ntype \: 2\ndNSName \: example.net\ntype \: 2\ndNSName \: *.example.org\n":0
220*62c56f98SSadaf Ebrahimi
221*62c56f98SSadaf EbrahimiX509 SAN parsing  Multiple different types
222*62c56f98SSadaf Ebrahimidepends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_PK_CAN_ECDSA_SOME:MBEDTLS_ECP_HAVE_SECP256R1:MBEDTLS_MD_CAN_SHA256
223*62c56f98SSadaf Ebrahimix509_parse_san:"data_files/parse_input/multiple_san.crt":"type \: 2\ndNSName \: example.com\ntype \: 0\notherName \: hardware module name \: hardware type \: 1.3.6.1.4.1.17.3, hardware serial number \: 313233343536\ntype \: 2\ndNSName \: example.net\ntype \: 2\ndNSName \: *.example.org\n":0
224*62c56f98SSadaf Ebrahimi
225*62c56f98SSadaf EbrahimiX509 SAN parsing, no subject alt name
226*62c56f98SSadaf Ebrahimidepends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_RSA_C:MBEDTLS_MD_CAN_SHA256:MBEDTLS_PK_CAN_ECDSA_SOME
227*62c56f98SSadaf Ebrahimix509_parse_san:"data_files/parse_input/server4.crt":"":0
228*62c56f98SSadaf Ebrahimi
229*62c56f98SSadaf EbrahimiX509 SAN parsing, unsupported otherName name
230*62c56f98SSadaf Ebrahimidepends_on:MBEDTLS_PK_CAN_ECDSA_SOME:MBEDTLS_ECP_HAVE_SECP256R1:MBEDTLS_MD_CAN_SHA256
231*62c56f98SSadaf Ebrahimix509_parse_san:"data_files/parse_input/server5-unsupported_othername.crt.der":"":0
232*62c56f98SSadaf Ebrahimi
233*62c56f98SSadaf EbrahimiX509 SAN parsing rfc822Name
234*62c56f98SSadaf Ebrahimidepends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_RSA_C:MBEDTLS_MD_CAN_SHA256
235*62c56f98SSadaf Ebrahimix509_parse_san:"data_files/parse_input/test_cert_rfc822name.crt.der":"type \: 1\nrfc822Name \: [email protected]\ntype \: 1\nrfc822Name \: [email protected]\n":0
236*62c56f98SSadaf Ebrahimi
237*62c56f98SSadaf EbrahimiX509 CRT information Parsing IP (invalid data)
238*62c56f98SSadaf Ebrahimidepends_on:MBEDTLS_PK_CAN_ECDSA_VERIFY:MBEDTLS_MD_CAN_SHA256:MBEDTLS_ECP_HAVE_SECP256R1:MBEDTLS_RSA_C
239*62c56f98SSadaf Ebrahimix509_parse_san:"data_files/server5-tricky-ip-san-malformed-len.crt.der":"":MBEDTLS_ERR_X509_BAD_INPUT_DATA
240*62c56f98SSadaf Ebrahimi
241*62c56f98SSadaf EbrahimiX509 CRL information #1
242*62c56f98SSadaf Ebrahimidepends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_MD_CAN_SHA1:MBEDTLS_RSA_C:!MBEDTLS_X509_REMOVE_INFO
243*62c56f98SSadaf Ebrahimimbedtls_x509_crl_info:"data_files/parse_input/crl_expired.pem":"CRL version   \: 1\nissuer name   \: C=NL, O=PolarSSL, CN=PolarSSL Test CA\nthis update   \: 2011-02-20 10\:24\:19\nnext update   \: 2011-02-20 11\:24\:19\nRevoked certificates\:\nserial number\: 01 revocation date\: 2011-02-12 14\:44\:07\nserial number\: 03 revocation date\: 2011-02-12 14\:44\:07\nsigned using  \: RSA with SHA1\n"
244*62c56f98SSadaf Ebrahimi
245*62c56f98SSadaf EbrahimiX509 CRL Information MD5 Digest
246*62c56f98SSadaf Ebrahimidepends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_MD_CAN_MD5:MBEDTLS_RSA_C:!MBEDTLS_X509_REMOVE_INFO
247*62c56f98SSadaf Ebrahimimbedtls_x509_crl_info:"data_files/parse_input/crl_md5.pem":"CRL version   \: 1\nissuer name   \: C=NL, O=PolarSSL, CN=PolarSSL Test CA\nthis update   \: 2011-02-12 14\:44\:07\nnext update   \: 2011-04-13 14\:44\:07\nRevoked certificates\:\nserial number\: 01 revocation date\: 2011-02-12 14\:44\:07\nserial number\: 03 revocation date\: 2011-02-12 14\:44\:07\nsigned using  \: RSA with MD5\n"
248*62c56f98SSadaf Ebrahimi
249*62c56f98SSadaf EbrahimiX509 CRL Information SHA1 Digest
250*62c56f98SSadaf Ebrahimidepends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_MD_CAN_SHA1:MBEDTLS_RSA_C:!MBEDTLS_X509_REMOVE_INFO
251*62c56f98SSadaf Ebrahimimbedtls_x509_crl_info:"data_files/parse_input/crl_sha1.pem":"CRL version   \: 1\nissuer name   \: C=NL, O=PolarSSL, CN=PolarSSL Test CA\nthis update   \: 2011-02-12 14\:44\:07\nnext update   \: 2011-04-13 14\:44\:07\nRevoked certificates\:\nserial number\: 01 revocation date\: 2011-02-12 14\:44\:07\nserial number\: 03 revocation date\: 2011-02-12 14\:44\:07\nsigned using  \: RSA with SHA1\n"
252*62c56f98SSadaf Ebrahimi
253*62c56f98SSadaf EbrahimiX509 CRL Information SHA224 Digest
254*62c56f98SSadaf Ebrahimidepends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_MD_CAN_SHA224:MBEDTLS_RSA_C:!MBEDTLS_X509_REMOVE_INFO
255*62c56f98SSadaf Ebrahimimbedtls_x509_crl_info:"data_files/parse_input/crl_sha224.pem":"CRL version   \: 1\nissuer name   \: C=NL, O=PolarSSL, CN=PolarSSL Test CA\nthis update   \: 2011-02-12 14\:44\:07\nnext update   \: 2011-04-13 14\:44\:07\nRevoked certificates\:\nserial number\: 01 revocation date\: 2011-02-12 14\:44\:07\nserial number\: 03 revocation date\: 2011-02-12 14\:44\:07\nsigned using  \: RSA with SHA-224\n"
256*62c56f98SSadaf Ebrahimi
257*62c56f98SSadaf EbrahimiX509 CRL Information SHA256 Digest
258*62c56f98SSadaf Ebrahimidepends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_MD_CAN_SHA256:MBEDTLS_RSA_C:!MBEDTLS_X509_REMOVE_INFO
259*62c56f98SSadaf Ebrahimimbedtls_x509_crl_info:"data_files/parse_input/crl_sha256.pem":"CRL version   \: 1\nissuer name   \: C=NL, O=PolarSSL, CN=PolarSSL Test CA\nthis update   \: 2011-02-12 14\:44\:07\nnext update   \: 2011-04-13 14\:44\:07\nRevoked certificates\:\nserial number\: 01 revocation date\: 2011-02-12 14\:44\:07\nserial number\: 03 revocation date\: 2011-02-12 14\:44\:07\nsigned using  \: RSA with SHA-256\n"
260*62c56f98SSadaf Ebrahimi
261*62c56f98SSadaf EbrahimiX509 CRL Information SHA384 Digest
262*62c56f98SSadaf Ebrahimidepends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_MD_CAN_SHA384:MBEDTLS_RSA_C:!MBEDTLS_X509_REMOVE_INFO
263*62c56f98SSadaf Ebrahimimbedtls_x509_crl_info:"data_files/parse_input/crl_sha384.pem":"CRL version   \: 1\nissuer name   \: C=NL, O=PolarSSL, CN=PolarSSL Test CA\nthis update   \: 2011-02-12 14\:44\:07\nnext update   \: 2011-04-13 14\:44\:07\nRevoked certificates\:\nserial number\: 01 revocation date\: 2011-02-12 14\:44\:07\nserial number\: 03 revocation date\: 2011-02-12 14\:44\:07\nsigned using  \: RSA with SHA-384\n"
264*62c56f98SSadaf Ebrahimi
265*62c56f98SSadaf EbrahimiX509 CRL Information SHA512 Digest
266*62c56f98SSadaf Ebrahimidepends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_MD_CAN_SHA512:MBEDTLS_RSA_C:!MBEDTLS_X509_REMOVE_INFO
267*62c56f98SSadaf Ebrahimimbedtls_x509_crl_info:"data_files/parse_input/crl_sha512.pem":"CRL version   \: 1\nissuer name   \: C=NL, O=PolarSSL, CN=PolarSSL Test CA\nthis update   \: 2011-02-12 14\:44\:07\nnext update   \: 2011-04-13 14\:44\:07\nRevoked certificates\:\nserial number\: 01 revocation date\: 2011-02-12 14\:44\:07\nserial number\: 03 revocation date\: 2011-02-12 14\:44\:07\nsigned using  \: RSA with SHA-512\n"
268*62c56f98SSadaf Ebrahimi
269*62c56f98SSadaf EbrahimiX509 CRL information RSA-PSS, SHA1 Digest
270*62c56f98SSadaf Ebrahimidepends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_X509_RSASSA_PSS_SUPPORT:MBEDTLS_MD_CAN_SHA1:!MBEDTLS_X509_REMOVE_INFO
271*62c56f98SSadaf Ebrahimimbedtls_x509_crl_info:"data_files/parse_input/crl-rsa-pss-sha1.pem":"CRL version   \: 2\nissuer name   \: C=NL, O=PolarSSL, CN=PolarSSL Test CA\nthis update   \: 2014-01-20 13\:46\:35\nnext update   \: 2024-01-18 13\:46\:35\nRevoked certificates\:\nserial number\: 0A revocation date\: 2013-09-24 16\:28\:38\nserial number\: 16 revocation date\: 2014-01-20 13\:43\:05\nsigned using  \: RSASSA-PSS (SHA1, MGF1-SHA1, 0xEA)\n"
272*62c56f98SSadaf Ebrahimi
273*62c56f98SSadaf EbrahimiX509 CRL information RSA-PSS, SHA224 Digest
274*62c56f98SSadaf Ebrahimidepends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_X509_RSASSA_PSS_SUPPORT:MBEDTLS_MD_CAN_SHA224:!MBEDTLS_X509_REMOVE_INFO
275*62c56f98SSadaf Ebrahimimbedtls_x509_crl_info:"data_files/parse_input/crl-rsa-pss-sha224.pem":"CRL version   \: 2\nissuer name   \: C=NL, O=PolarSSL, CN=PolarSSL Test CA\nthis update   \: 2014-01-20 13\:56\:06\nnext update   \: 2024-01-18 13\:56\:06\nRevoked certificates\:\nserial number\: 0A revocation date\: 2013-09-24 16\:28\:38\nserial number\: 16 revocation date\: 2014-01-20 13\:43\:05\nsigned using  \: RSASSA-PSS (SHA224, MGF1-SHA224, 0xE2)\n"
276*62c56f98SSadaf Ebrahimi
277*62c56f98SSadaf EbrahimiX509 CRL information RSA-PSS, SHA256 Digest
278*62c56f98SSadaf Ebrahimidepends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_X509_RSASSA_PSS_SUPPORT:MBEDTLS_MD_CAN_SHA256:!MBEDTLS_X509_REMOVE_INFO
279*62c56f98SSadaf Ebrahimimbedtls_x509_crl_info:"data_files/parse_input/crl-rsa-pss-sha256.pem":"CRL version   \: 2\nissuer name   \: C=NL, O=PolarSSL, CN=PolarSSL Test CA\nthis update   \: 2014-01-20 13\:56\:16\nnext update   \: 2024-01-18 13\:56\:16\nRevoked certificates\:\nserial number\: 0A revocation date\: 2013-09-24 16\:28\:38\nserial number\: 16 revocation date\: 2014-01-20 13\:43\:05\nsigned using  \: RSASSA-PSS (SHA256, MGF1-SHA256, 0xDE)\n"
280*62c56f98SSadaf Ebrahimi
281*62c56f98SSadaf EbrahimiX509 CRL information RSA-PSS, SHA384 Digest
282*62c56f98SSadaf Ebrahimidepends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_X509_RSASSA_PSS_SUPPORT:MBEDTLS_MD_CAN_SHA384:!MBEDTLS_X509_REMOVE_INFO
283*62c56f98SSadaf Ebrahimimbedtls_x509_crl_info:"data_files/parse_input/crl-rsa-pss-sha384.pem":"CRL version   \: 2\nissuer name   \: C=NL, O=PolarSSL, CN=PolarSSL Test CA\nthis update   \: 2014-01-20 13\:56\:28\nnext update   \: 2024-01-18 13\:56\:28\nRevoked certificates\:\nserial number\: 0A revocation date\: 2013-09-24 16\:28\:38\nserial number\: 16 revocation date\: 2014-01-20 13\:43\:05\nsigned using  \: RSASSA-PSS (SHA384, MGF1-SHA384, 0xCE)\n"
284*62c56f98SSadaf Ebrahimi
285*62c56f98SSadaf EbrahimiX509 CRL information RSA-PSS, SHA512 Digest
286*62c56f98SSadaf Ebrahimidepends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_X509_RSASSA_PSS_SUPPORT:MBEDTLS_MD_CAN_SHA512:!MBEDTLS_X509_REMOVE_INFO
287*62c56f98SSadaf Ebrahimimbedtls_x509_crl_info:"data_files/parse_input/crl-rsa-pss-sha512.pem":"CRL version   \: 2\nissuer name   \: C=NL, O=PolarSSL, CN=PolarSSL Test CA\nthis update   \: 2014-01-20 13\:56\:38\nnext update   \: 2024-01-18 13\:56\:38\nRevoked certificates\:\nserial number\: 0A revocation date\: 2013-09-24 16\:28\:38\nserial number\: 16 revocation date\: 2014-01-20 13\:43\:05\nsigned using  \: RSASSA-PSS (SHA512, MGF1-SHA512, 0xBE)\n"
288*62c56f98SSadaf Ebrahimi
289*62c56f98SSadaf EbrahimiX509 CRL Information EC, SHA1 Digest
290*62c56f98SSadaf Ebrahimidepends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_MD_CAN_SHA1:MBEDTLS_PK_CAN_ECDSA_SOME:!MBEDTLS_X509_REMOVE_INFO
291*62c56f98SSadaf Ebrahimimbedtls_x509_crl_info:"data_files/parse_input/crl-ec-sha1.pem":"CRL version   \: 2\nissuer name   \: C=NL, O=PolarSSL, CN=Polarssl Test EC CA\nthis update   \: 2013-09-24 16\:31\:08\nnext update   \: 2023-09-22 16\:31\:08\nRevoked certificates\:\nserial number\: 0A revocation date\: 2013-09-24 16\:28\:38\nsigned using  \: ECDSA with SHA1\n"
292*62c56f98SSadaf Ebrahimi
293*62c56f98SSadaf EbrahimiX509 CRL Information EC, SHA224 Digest
294*62c56f98SSadaf Ebrahimidepends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_MD_CAN_SHA224:MBEDTLS_PK_CAN_ECDSA_SOME:!MBEDTLS_X509_REMOVE_INFO
295*62c56f98SSadaf Ebrahimimbedtls_x509_crl_info:"data_files/parse_input/crl-ec-sha224.pem":"CRL version   \: 2\nissuer name   \: C=NL, O=PolarSSL, CN=Polarssl Test EC CA\nthis update   \: 2013-09-24 16\:31\:08\nnext update   \: 2023-09-22 16\:31\:08\nRevoked certificates\:\nserial number\: 0A revocation date\: 2013-09-24 16\:28\:38\nsigned using  \: ECDSA with SHA224\n"
296*62c56f98SSadaf Ebrahimi
297*62c56f98SSadaf EbrahimiX509 CRL Information EC, SHA256 Digest
298*62c56f98SSadaf Ebrahimidepends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_MD_CAN_SHA256:MBEDTLS_PK_CAN_ECDSA_SOME:!MBEDTLS_X509_REMOVE_INFO
299*62c56f98SSadaf Ebrahimimbedtls_x509_crl_info:"data_files/parse_input/crl-ec-sha256.pem":"CRL version   \: 2\nissuer name   \: C=NL, O=PolarSSL, CN=Polarssl Test EC CA\nthis update   \: 2013-09-24 16\:31\:08\nnext update   \: 2023-09-22 16\:31\:08\nRevoked certificates\:\nserial number\: 0A revocation date\: 2013-09-24 16\:28\:38\nsigned using  \: ECDSA with SHA256\n"
300*62c56f98SSadaf Ebrahimi
301*62c56f98SSadaf EbrahimiX509 CRL Information EC, SHA384 Digest
302*62c56f98SSadaf Ebrahimidepends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_MD_CAN_SHA384:MBEDTLS_PK_CAN_ECDSA_SOME:!MBEDTLS_X509_REMOVE_INFO
303*62c56f98SSadaf Ebrahimimbedtls_x509_crl_info:"data_files/parse_input/crl-ec-sha384.pem":"CRL version   \: 2\nissuer name   \: C=NL, O=PolarSSL, CN=Polarssl Test EC CA\nthis update   \: 2013-09-24 16\:31\:08\nnext update   \: 2023-09-22 16\:31\:08\nRevoked certificates\:\nserial number\: 0A revocation date\: 2013-09-24 16\:28\:38\nsigned using  \: ECDSA with SHA384\n"
304*62c56f98SSadaf Ebrahimi
305*62c56f98SSadaf EbrahimiX509 CRL Information EC, SHA512 Digest
306*62c56f98SSadaf Ebrahimidepends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_MD_CAN_SHA512:MBEDTLS_PK_CAN_ECDSA_SOME:!MBEDTLS_X509_REMOVE_INFO
307*62c56f98SSadaf Ebrahimimbedtls_x509_crl_info:"data_files/parse_input/crl-ec-sha512.pem":"CRL version   \: 2\nissuer name   \: C=NL, O=PolarSSL, CN=Polarssl Test EC CA\nthis update   \: 2013-09-24 16\:31\:08\nnext update   \: 2023-09-22 16\:31\:08\nRevoked certificates\:\nserial number\: 0A revocation date\: 2013-09-24 16\:28\:38\nsigned using  \: ECDSA with SHA512\n"
308*62c56f98SSadaf Ebrahimi
309*62c56f98SSadaf EbrahimiX509 CRL Malformed Input (trailing spaces at end of file)
310*62c56f98SSadaf Ebrahimidepends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_MD_CAN_SHA1:MBEDTLS_MD_CAN_SHA512:MBEDTLS_PK_CAN_ECDSA_VERIFY
311*62c56f98SSadaf Ebrahimimbedtls_x509_crl_parse:"data_files/parse_input/crl-malformed-trailing-spaces.pem":MBEDTLS_ERR_PEM_NO_HEADER_FOOTER_PRESENT
312*62c56f98SSadaf Ebrahimi
313*62c56f98SSadaf EbrahimiX509 CRL Unsupported critical extension (issuingDistributionPoint)
314*62c56f98SSadaf Ebrahimidepends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_RSA_C:MBEDTLS_MD_CAN_SHA256
315*62c56f98SSadaf Ebrahimimbedtls_x509_crl_parse:"data_files/parse_input/crl-idp.pem":MBEDTLS_ERR_X509_INVALID_EXTENSIONS + MBEDTLS_ERR_ASN1_UNEXPECTED_TAG
316*62c56f98SSadaf Ebrahimi
317*62c56f98SSadaf EbrahimiX509 CRL Unsupported non-critical extension (issuingDistributionPoint)
318*62c56f98SSadaf Ebrahimidepends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_RSA_C:MBEDTLS_MD_CAN_SHA256
319*62c56f98SSadaf Ebrahimimbedtls_x509_crl_parse:"data_files/parse_input/crl-idpnc.pem":0
320*62c56f98SSadaf Ebrahimi
321*62c56f98SSadaf EbrahimiX509 CSR Information RSA with MD5
322*62c56f98SSadaf Ebrahimidepends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_MD_CAN_MD5:MBEDTLS_RSA_C:!MBEDTLS_X509_REMOVE_INFO
323*62c56f98SSadaf Ebrahimimbedtls_x509_csr_info:"data_files/parse_input/server1.req.md5":"CSR version   \: 1\nsubject name  \: C=NL, O=PolarSSL, CN=PolarSSL Server 1\nsigned using  \: RSA with MD5\nRSA key size  \: 2048 bits\n"
324*62c56f98SSadaf Ebrahimi
325*62c56f98SSadaf EbrahimiX509 CSR Information RSA with SHA1
326*62c56f98SSadaf Ebrahimidepends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_MD_CAN_SHA1:MBEDTLS_RSA_C:!MBEDTLS_X509_REMOVE_INFO
327*62c56f98SSadaf Ebrahimimbedtls_x509_csr_info:"data_files/parse_input/server1.req.sha1":"CSR version   \: 1\nsubject name  \: C=NL, O=PolarSSL, CN=PolarSSL Server 1\nsigned using  \: RSA with SHA1\nRSA key size  \: 2048 bits\n"
328*62c56f98SSadaf Ebrahimi
329*62c56f98SSadaf EbrahimiX509 CSR Information RSA with SHA224
330*62c56f98SSadaf Ebrahimidepends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_MD_CAN_SHA224:MBEDTLS_RSA_C:!MBEDTLS_X509_REMOVE_INFO
331*62c56f98SSadaf Ebrahimimbedtls_x509_csr_info:"data_files/parse_input/server1.req.sha224":"CSR version   \: 1\nsubject name  \: C=NL, O=PolarSSL, CN=PolarSSL Server 1\nsigned using  \: RSA with SHA-224\nRSA key size  \: 2048 bits\n"
332*62c56f98SSadaf Ebrahimi
333*62c56f98SSadaf EbrahimiX509 CSR Information RSA with SHA-256
334*62c56f98SSadaf Ebrahimidepends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_MD_CAN_SHA256:MBEDTLS_RSA_C:MBEDTS_X509_INFO
335*62c56f98SSadaf Ebrahimimbedtls_x509_csr_info:"data_files/parse_input/server1.req.sha256":"CSR version   \: 1\nsubject name  \: C=NL, O=PolarSSL, CN=PolarSSL Server 1\nsigned using  \: RSA with SHA-256\nRSA key size  \: 2048 bits\n"
336*62c56f98SSadaf Ebrahimi
337*62c56f98SSadaf EbrahimiX509 CSR Information RSA with SHA384
338*62c56f98SSadaf Ebrahimidepends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_MD_CAN_SHA384:MBEDTLS_RSA_C:!MBEDTLS_X509_REMOVE_INFO
339*62c56f98SSadaf Ebrahimimbedtls_x509_csr_info:"data_files/parse_input/server1.req.sha384":"CSR version   \: 1\nsubject name  \: C=NL, O=PolarSSL, CN=PolarSSL Server 1\nsigned using  \: RSA with SHA-384\nRSA key size  \: 2048 bits\n"
340*62c56f98SSadaf Ebrahimi
341*62c56f98SSadaf EbrahimiX509 CSR Information RSA with SHA512
342*62c56f98SSadaf Ebrahimidepends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_MD_CAN_SHA512:MBEDTLS_RSA_C:!MBEDTLS_X509_REMOVE_INFO
343*62c56f98SSadaf Ebrahimimbedtls_x509_csr_info:"data_files/parse_input/server1.req.sha512":"CSR version   \: 1\nsubject name  \: C=NL, O=PolarSSL, CN=PolarSSL Server 1\nsigned using  \: RSA with SHA-512\nRSA key size  \: 2048 bits\n"
344*62c56f98SSadaf Ebrahimi
345*62c56f98SSadaf EbrahimiX509 CSR Information RSA with SHA-256, containing commas
346*62c56f98SSadaf Ebrahimidepends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_MD_CAN_SHA256:MBEDTLS_RSA_C:MBEDTS_X509_INFO
347*62c56f98SSadaf Ebrahimimbedtls_x509_csr_info:"data_files/parse_input/server1.req.commas.sha256":"CSR version   \: 1\nsubject name  \: C=NL, O=PolarSSL\\, Commas, CN=PolarSSL Server 1\nsigned using  \: RSA with SHA-256\nRSA key size  \: 2048 bits\n"
348*62c56f98SSadaf Ebrahimi
349*62c56f98SSadaf EbrahimiX509 CSR Information EC with SHA1
350*62c56f98SSadaf Ebrahimidepends_on:MBEDTLS_PK_CAN_ECDSA_SOME:MBEDTLS_PEM_PARSE_C:MBEDTLS_ECP_HAVE_SECP256R1:MBEDTLS_MD_CAN_SHA1:!MBEDTLS_X509_REMOVE_INFO
351*62c56f98SSadaf Ebrahimimbedtls_x509_csr_info:"data_files/parse_input/server5.req.sha1":"CSR version   \: 1\nsubject name  \: C=NL, O=PolarSSL, CN=localhost\nsigned using  \: ECDSA with SHA1\nEC key size   \: 256 bits\n\nkey usage         \: Digital Signature, Non Repudiation, Key Encipherment\n"
352*62c56f98SSadaf Ebrahimi
353*62c56f98SSadaf EbrahimiX509 CSR Information EC with SHA224
354*62c56f98SSadaf Ebrahimidepends_on:MBEDTLS_PK_CAN_ECDSA_SOME:MBEDTLS_PEM_PARSE_C:MBEDTLS_ECP_HAVE_SECP256R1:MBEDTLS_MD_CAN_SHA224:!MBEDTLS_X509_REMOVE_INFO
355*62c56f98SSadaf Ebrahimimbedtls_x509_csr_info:"data_files/parse_input/server5.req.sha224":"CSR version   \: 1\nsubject name  \: C=NL, O=PolarSSL, CN=localhost\nsigned using  \: ECDSA with SHA224\nEC key size   \: 256 bits\n\nkey usage         \: Digital Signature, Non Repudiation, Key Encipherment\n"
356*62c56f98SSadaf Ebrahimi
357*62c56f98SSadaf EbrahimiX509 CSR Information EC with SHA256
358*62c56f98SSadaf Ebrahimidepends_on:MBEDTLS_PK_CAN_ECDSA_SOME:MBEDTLS_PEM_PARSE_C:MBEDTLS_ECP_HAVE_SECP256R1:MBEDTLS_MD_CAN_SHA256:!MBEDTLS_X509_REMOVE_INFO
359*62c56f98SSadaf Ebrahimimbedtls_x509_csr_info:"data_files/parse_input/server5.req.sha256":"CSR version   \: 1\nsubject name  \: C=NL, O=PolarSSL, CN=localhost\nsigned using  \: ECDSA with SHA256\nEC key size   \: 256 bits\n\nkey usage         \: Digital Signature, Non Repudiation, Key Encipherment\n"
360*62c56f98SSadaf Ebrahimi
361*62c56f98SSadaf EbrahimiX509 CSR Information EC with SHA384
362*62c56f98SSadaf Ebrahimidepends_on:MBEDTLS_PK_CAN_ECDSA_SOME:MBEDTLS_PEM_PARSE_C:MBEDTLS_ECP_HAVE_SECP256R1:MBEDTLS_MD_CAN_SHA384:!MBEDTLS_X509_REMOVE_INFO
363*62c56f98SSadaf Ebrahimimbedtls_x509_csr_info:"data_files/parse_input/server5.req.sha384":"CSR version   \: 1\nsubject name  \: C=NL, O=PolarSSL, CN=localhost\nsigned using  \: ECDSA with SHA384\nEC key size   \: 256 bits\n\nkey usage         \: Digital Signature, Non Repudiation, Key Encipherment\n"
364*62c56f98SSadaf Ebrahimi
365*62c56f98SSadaf EbrahimiX509 CSR Information EC with SHA512
366*62c56f98SSadaf Ebrahimidepends_on:MBEDTLS_PK_CAN_ECDSA_SOME:MBEDTLS_PEM_PARSE_C:MBEDTLS_ECP_HAVE_SECP256R1:MBEDTLS_MD_CAN_SHA512:!MBEDTLS_X509_REMOVE_INFO
367*62c56f98SSadaf Ebrahimimbedtls_x509_csr_info:"data_files/parse_input/server5.req.sha512":"CSR version   \: 1\nsubject name  \: C=NL, O=PolarSSL, CN=localhost\nsigned using  \: ECDSA with SHA512\nEC key size   \: 256 bits\n\nkey usage         \: Digital Signature, Non Repudiation, Key Encipherment\n"
368*62c56f98SSadaf Ebrahimi
369*62c56f98SSadaf EbrahimiX509 CSR Information RSA-PSS with SHA1
370*62c56f98SSadaf Ebrahimidepends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_X509_RSASSA_PSS_SUPPORT:MBEDTLS_MD_CAN_SHA1:!MBEDTLS_X509_REMOVE_INFO
371*62c56f98SSadaf Ebrahimimbedtls_x509_csr_info:"data_files/parse_input/server9.req.sha1":"CSR version   \: 1\nsubject name  \: C=NL, O=PolarSSL, CN=localhost\nsigned using  \: RSASSA-PSS (SHA1, MGF1-SHA1, 0x6A)\nRSA key size  \: 1024 bits\n\nkey usage         \: Digital Signature, Non Repudiation, Key Encipherment\n"
372*62c56f98SSadaf Ebrahimi
373*62c56f98SSadaf EbrahimiX509 CSR Information RSA-PSS with SHA224
374*62c56f98SSadaf Ebrahimidepends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_X509_RSASSA_PSS_SUPPORT:MBEDTLS_MD_CAN_SHA224:!MBEDTLS_X509_REMOVE_INFO
375*62c56f98SSadaf Ebrahimimbedtls_x509_csr_info:"data_files/parse_input/server9.req.sha224":"CSR version   \: 1\nsubject name  \: C=NL, O=PolarSSL, CN=localhost\nsigned using  \: RSASSA-PSS (SHA224, MGF1-SHA224, 0x62)\nRSA key size  \: 1024 bits\n\nkey usage         \: Digital Signature, Non Repudiation, Key Encipherment\n"
376*62c56f98SSadaf Ebrahimi
377*62c56f98SSadaf EbrahimiX509 CSR Information RSA-PSS with SHA256
378*62c56f98SSadaf Ebrahimidepends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_X509_RSASSA_PSS_SUPPORT:MBEDTLS_MD_CAN_SHA256:!MBEDTLS_X509_REMOVE_INFO
379*62c56f98SSadaf Ebrahimimbedtls_x509_csr_info:"data_files/parse_input/server9.req.sha256":"CSR version   \: 1\nsubject name  \: C=NL, O=PolarSSL, CN=localhost\nsigned using  \: RSASSA-PSS (SHA256, MGF1-SHA256, 0x5E)\nRSA key size  \: 1024 bits\n\nkey usage         \: Digital Signature, Non Repudiation, Key Encipherment\n"
380*62c56f98SSadaf Ebrahimi
381*62c56f98SSadaf EbrahimiX509 CSR Information RSA-PSS with SHA384
382*62c56f98SSadaf Ebrahimidepends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_X509_RSASSA_PSS_SUPPORT:MBEDTLS_MD_CAN_SHA384:!MBEDTLS_X509_REMOVE_INFO
383*62c56f98SSadaf Ebrahimimbedtls_x509_csr_info:"data_files/parse_input/server9.req.sha384":"CSR version   \: 1\nsubject name  \: C=NL, O=PolarSSL, CN=localhost\nsigned using  \: RSASSA-PSS (SHA384, MGF1-SHA384, 0x4E)\nRSA key size  \: 1024 bits\n\nkey usage         \: Digital Signature, Non Repudiation, Key Encipherment\n"
384*62c56f98SSadaf Ebrahimi
385*62c56f98SSadaf EbrahimiX509 CSR Information RSA-PSS with SHA512
386*62c56f98SSadaf Ebrahimidepends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_X509_RSASSA_PSS_SUPPORT:MBEDTLS_MD_CAN_SHA512:!MBEDTLS_X509_REMOVE_INFO
387*62c56f98SSadaf Ebrahimimbedtls_x509_csr_info:"data_files/parse_input/server9.req.sha512":"CSR version   \: 1\nsubject name  \: C=NL, O=PolarSSL, CN=localhost\nsigned using  \: RSASSA-PSS (SHA512, MGF1-SHA512, 0x3E)\nRSA key size  \: 1024 bits\n\nkey usage         \: Digital Signature, Non Repudiation, Key Encipherment\n"
388*62c56f98SSadaf Ebrahimi
389*62c56f98SSadaf EbrahimiX509 CSR Information RSA with SHA-256 - Microsoft header
390*62c56f98SSadaf Ebrahimidepends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_MD_CAN_SHA256:MBEDTLS_RSA_C
391*62c56f98SSadaf Ebrahimimbedtls_x509_csr_info:"data_files/parse_input/server1-ms.req.sha256":"CSR version   \: 1\nsubject name  \: C=NL, O=PolarSSL, CN=PolarSSL Server 1\nsigned using  \: RSA with SHA-256\nRSA key size  \: 2048 bits\n"
392*62c56f98SSadaf Ebrahimi
393*62c56f98SSadaf EbrahimiX509 CSR Information v3 extensions #1 (all)
394*62c56f98SSadaf Ebrahimidepends_on:MBEDTLS_MD_CAN_SHA256:MBEDTLS_RSA_C:!MBEDTLS_X509_REMOVE_INFO
395*62c56f98SSadaf Ebrahimimbedtls_x509_csr_info:"data_files/parse_input/test_csr_v3_all.csr.der":"CSR version   \: 1\nsubject name  \: CN=etcd\nsigned using  \: RSA with SHA-256\nRSA key size  \: 1024 bits\n\nsubject alt name  \:\n    otherName \:\n        hardware module name \:\n            hardware type          \: 1.3.6.1.4.1.17.3\n            hardware serial number \: 3132338081008180333231\ncert. type        \: SSL Client\nkey usage         \: CRL Sign\n"
396*62c56f98SSadaf Ebrahimi
397*62c56f98SSadaf EbrahimiX509 CSR Information v3 extensions #2 (nsCertType only)
398*62c56f98SSadaf Ebrahimidepends_on:MBEDTLS_MD_CAN_SHA256:MBEDTLS_RSA_C:!MBEDTLS_X509_REMOVE_INFO
399*62c56f98SSadaf Ebrahimimbedtls_x509_csr_info:"data_files/parse_input/test_csr_v3_nsCertType.csr.der":"CSR version   \: 1\nsubject name  \: CN=etcd\nsigned using  \: RSA with SHA-256\nRSA key size  \: 1024 bits\n\ncert. type        \: SSL Server\n"
400*62c56f98SSadaf Ebrahimi
401*62c56f98SSadaf EbrahimiX509 CSR Information v3 extensions #3 (subjectAltName only)
402*62c56f98SSadaf Ebrahimidepends_on:MBEDTLS_MD_CAN_SHA256:MBEDTLS_RSA_C:!MBEDTLS_X509_REMOVE_INFO
403*62c56f98SSadaf Ebrahimimbedtls_x509_csr_info:"data_files/parse_input/test_csr_v3_subjectAltName.csr.der":"CSR version   \: 1\nsubject name  \: CN=etcd\nsigned using  \: RSA with SHA-256\nRSA key size  \: 1024 bits\n\nsubject alt name  \:\n    dNSName \: example.com\n    dNSName \: example.net\n    dNSName \: *.example.org\n"
404*62c56f98SSadaf Ebrahimi
405*62c56f98SSadaf EbrahimiX509 CSR Information v3 extensions #4 (keyUsage only)
406*62c56f98SSadaf Ebrahimidepends_on:MBEDTLS_MD_CAN_SHA256:MBEDTLS_RSA_C:!MBEDTLS_X509_REMOVE_INFO
407*62c56f98SSadaf Ebrahimimbedtls_x509_csr_info:"data_files/parse_input/test_csr_v3_keyUsage.csr.der":"CSR version   \: 1\nsubject name  \: CN=etcd\nsigned using  \: RSA with SHA-256\nRSA key size  \: 1024 bits\n\nkey usage         \: Digital Signature, Key Encipherment\n"
408*62c56f98SSadaf Ebrahimi
409*62c56f98SSadaf EbrahimiX509 Verify Information: empty
410*62c56f98SSadaf Ebrahimix509_verify_info:0:"":""
411*62c56f98SSadaf Ebrahimi
412*62c56f98SSadaf EbrahimiX509 Verify Information: one issue
413*62c56f98SSadaf Ebrahimix509_verify_info:MBEDTLS_X509_BADCERT_MISSING:"":"Certificate was missing\n"
414*62c56f98SSadaf Ebrahimi
415*62c56f98SSadaf EbrahimiX509 Verify Information: two issues
416*62c56f98SSadaf Ebrahimix509_verify_info:MBEDTLS_X509_BADCERT_EXPIRED | MBEDTLS_X509_BADCRL_EXPIRED:"":"The certificate validity has expired\nThe CRL is expired\n"
417*62c56f98SSadaf Ebrahimi
418*62c56f98SSadaf EbrahimiX509 Verify Information: two issues, one unknown
419*62c56f98SSadaf Ebrahimix509_verify_info:MBEDTLS_X509_BADCERT_OTHER | 0x80000000:"":"Other reason (can be used by verify callback)\nUnknown reason (this should not happen)\n"
420*62c56f98SSadaf Ebrahimi
421*62c56f98SSadaf EbrahimiX509 Verify Information: empty, with prefix
422*62c56f98SSadaf Ebrahimix509_verify_info:0:"  ! ":""
423*62c56f98SSadaf Ebrahimi
424*62c56f98SSadaf EbrahimiX509 Verify Information: one issue, with prefix
425*62c56f98SSadaf Ebrahimix509_verify_info:MBEDTLS_X509_BADCERT_MISSING:"  ! ":"  ! Certificate was missing\n"
426*62c56f98SSadaf Ebrahimi
427*62c56f98SSadaf EbrahimiX509 Verify Information: two issues, with prefix
428*62c56f98SSadaf Ebrahimix509_verify_info:MBEDTLS_X509_BADCERT_EXPIRED | MBEDTLS_X509_BADCRL_EXPIRED:"  ! ":"  ! The certificate validity has expired\n  ! The CRL is expired\n"
429*62c56f98SSadaf Ebrahimi
430*62c56f98SSadaf EbrahimiX509 Get Distinguished Name #1
431*62c56f98SSadaf Ebrahimidepends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_RSA_C:MBEDTLS_MD_CAN_SHA1
432*62c56f98SSadaf Ebrahimimbedtls_x509_dn_gets:"data_files/server1.crt":"subject":"C=NL, O=PolarSSL, CN=PolarSSL Server 1"
433*62c56f98SSadaf Ebrahimi
434*62c56f98SSadaf EbrahimiX509 Get Distinguished Name #2
435*62c56f98SSadaf Ebrahimidepends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_RSA_C:MBEDTLS_MD_CAN_SHA1
436*62c56f98SSadaf Ebrahimimbedtls_x509_dn_gets:"data_files/server1.crt":"issuer":"C=NL, O=PolarSSL, CN=PolarSSL Test CA"
437*62c56f98SSadaf Ebrahimi
438*62c56f98SSadaf EbrahimiX509 Get Distinguished Name #3
439*62c56f98SSadaf Ebrahimidepends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_RSA_C:MBEDTLS_MD_CAN_SHA1
440*62c56f98SSadaf Ebrahimimbedtls_x509_dn_gets:"data_files/server2.crt":"subject":"C=NL, O=PolarSSL, CN=localhost"
441*62c56f98SSadaf Ebrahimi
442*62c56f98SSadaf EbrahimiX509 Get Distinguished Name #4
443*62c56f98SSadaf Ebrahimidepends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_RSA_C:MBEDTLS_MD_CAN_SHA1
444*62c56f98SSadaf Ebrahimimbedtls_x509_dn_gets:"data_files/server2.crt":"issuer":"C=NL, O=PolarSSL, CN=PolarSSL Test CA"
445*62c56f98SSadaf Ebrahimi
446*62c56f98SSadaf EbrahimiX509 Get Distinguished Name #5
447*62c56f98SSadaf Ebrahimidepends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_RSA_C:MBEDTLS_MD_CAN_SHA1
448*62c56f98SSadaf Ebrahimimbedtls_x509_dn_gets:"data_files/server1.commas.crt":"subject":"C=NL, O=PolarSSL\\, Commas, CN=PolarSSL Server 1"
449*62c56f98SSadaf Ebrahimi
450*62c56f98SSadaf EbrahimiX509 Get Distinguished Name #6
451*62c56f98SSadaf Ebrahimidepends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_RSA_C:MBEDTLS_MD_CAN_SHA1
452*62c56f98SSadaf Ebrahimimbedtls_x509_dn_gets:"data_files/server1.hashsymbol.crt":"subject":"C=NL, O=\\#PolarSSL, CN=PolarSSL Server 1"
453*62c56f98SSadaf Ebrahimi
454*62c56f98SSadaf EbrahimiX509 Get Distinguished Name #7
455*62c56f98SSadaf Ebrahimidepends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_RSA_C:MBEDTLS_MD_CAN_SHA1
456*62c56f98SSadaf Ebrahimimbedtls_x509_dn_gets:"data_files/server1.spaces.crt":"subject":"C=NL, O=\\ PolarSSL\\ , CN=PolarSSL Server 1"
457*62c56f98SSadaf Ebrahimi
458*62c56f98SSadaf EbrahimiX509 Get Distinguished Name #8
459*62c56f98SSadaf Ebrahimidepends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_RSA_C:MBEDTLS_MD_CAN_SHA1
460*62c56f98SSadaf Ebrahimimbedtls_x509_dn_gets:"data_files/server1.asciichars.crt":"subject":"C=NL, O=\\E6\\9E\\81\\E5\\9C\\B0SSL, CN=PolarSSL Server 1"
461*62c56f98SSadaf Ebrahimi
462*62c56f98SSadaf EbrahimiX509 Get Modified DN #1
463*62c56f98SSadaf Ebrahimidepends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_RSA_C:MBEDTLS_MD_CAN_SHA1
464*62c56f98SSadaf Ebrahimimbedtls_x509_dn_gets_subject_replace:"data_files/server1.crt":"Modified":"C=NL, O=Modified, CN=PolarSSL Server 1":0
465*62c56f98SSadaf Ebrahimi
466*62c56f98SSadaf EbrahimiX509 Get Modified DN #2 Name exactly 255 bytes
467*62c56f98SSadaf Ebrahimidepends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_RSA_C:MBEDTLS_MD_CAN_SHA1
468*62c56f98SSadaf Ebrahimimbedtls_x509_dn_gets_subject_replace:"data_files/server1.crt":"123456789012345678901234567890123456789012345678901234567890123456789012345678901234567890123456789012345678901234567890123456789012345678901234567890123456789012345678901234567890123456789012345678901234567890123456789012345678901234567890123456789012345":"C=NL, O=123456789012345678901234567890123456789012345678901234567890123456789012345678901234567890123456789012345678901234567890123456789012345678901234567890123456789012345678901234567890123456789012345678901234567890123456789012345678901234567890123456789012345, CN=PolarSSL Server 1":0
469*62c56f98SSadaf Ebrahimi
470*62c56f98SSadaf EbrahimiX509 Get Modified DN #3 Name exceeds 255 bytes
471*62c56f98SSadaf Ebrahimidepends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_RSA_C:MBEDTLS_MD_CAN_SHA1
472*62c56f98SSadaf Ebrahimimbedtls_x509_dn_gets_subject_replace:"data_files/server1.crt":"1234567890123456789012345678901234567890123456789012345678901234567890123456789012345678901234567890123456789012345678901234567890123456789012345678901234567890123456789012345678901234567890123456789012345678901234567890123456789012345678901234567890123456":"":MBEDTLS_ERR_X509_BUFFER_TOO_SMALL
473*62c56f98SSadaf Ebrahimi
474*62c56f98SSadaf EbrahimiX509 Get Modified DN #4 Name exactly 255 bytes, with comma requiring escaping
475*62c56f98SSadaf Ebrahimidepends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_RSA_C:MBEDTLS_MD_CAN_SHA1
476*62c56f98SSadaf Ebrahimimbedtls_x509_dn_gets_subject_replace:"data_files/server1.crt":"1234567890,1234567890123456789012345678901234567890123456789012345678901234567890123456789012345678901234567890123456789012345678901234567890123456789012345678901234567890123456789012345678901234567890123456789012345678901234567890123456789012345678901234":"":MBEDTLS_ERR_X509_BUFFER_TOO_SMALL
477*62c56f98SSadaf Ebrahimi
478*62c56f98SSadaf EbrahimiX509 Get Modified DN #5 Name exactly 255 bytes, ending with comma requiring escaping
479*62c56f98SSadaf Ebrahimidepends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_RSA_C:MBEDTLS_MD_CAN_SHA1
480*62c56f98SSadaf Ebrahimimbedtls_x509_dn_gets_subject_replace:"data_files/server1.crt":"12345678901234567890123456789012345678901234567890123456789012345678901234567890123456789012345678901234567890123456789012345678901234567890123456789012345678901234567890123456789012345678901234567890123456789012345678901234567890123456789012345678901234,":"":MBEDTLS_ERR_X509_BUFFER_TOO_SMALL
481*62c56f98SSadaf Ebrahimi
482*62c56f98SSadaf EbrahimiX509 Get Next DN #1 No Multivalue RDNs
483*62c56f98SSadaf Ebrahimimbedtls_x509_dn_get_next:"C=NL, O=PolarSSL, CN=PolarSSL Server 1":0:"C O CN":3:"C=NL, O=PolarSSL, CN=PolarSSL Server 1"
484*62c56f98SSadaf Ebrahimi
485*62c56f98SSadaf EbrahimiX509 Get Next DN #2 Initial Multivalue RDN
486*62c56f98SSadaf Ebrahimimbedtls_x509_dn_get_next:"C=NL, O=PolarSSL, CN=PolarSSL Server 1":0x01:"C CN":2:"C=NL + O=PolarSSL, CN=PolarSSL Server 1"
487*62c56f98SSadaf Ebrahimi
488*62c56f98SSadaf EbrahimiX509 Get Next DN #3 Single Multivalue RDN
489*62c56f98SSadaf Ebrahimimbedtls_x509_dn_get_next:"C=NL, O=PolarSSL, CN=PolarSSL Server 1":0x03:"C":1:"C=NL + O=PolarSSL + CN=PolarSSL Server 1"
490*62c56f98SSadaf Ebrahimi
491*62c56f98SSadaf EbrahimiX509 Get Next DN #4 Consecutive Multivalue RDNs
492*62c56f98SSadaf Ebrahimimbedtls_x509_dn_get_next:"C=NL, O=PolarSSL, title=Example, CN=PolarSSL Server 1":0x05:"C title":2:"C=NL + O=PolarSSL, title=Example + CN=PolarSSL Server 1"
493*62c56f98SSadaf Ebrahimi
494*62c56f98SSadaf Ebrahimi# Parse the following valid DN:
495*62c56f98SSadaf Ebrahimi#
496*62c56f98SSadaf Ebrahimi# 31 0B <- Set of
497*62c56f98SSadaf Ebrahimi#     30 09 <- Sequence of
498*62c56f98SSadaf Ebrahimi#         06 03 55 04 06 <- OID 2.5.4.6 countryName (C)
499*62c56f98SSadaf Ebrahimi#         13 02 4E 4C <- PrintableString "NL"
500*62c56f98SSadaf Ebrahimi# 31 11 <- Set of
501*62c56f98SSadaf Ebrahimi#     30 0F <- Sequence of
502*62c56f98SSadaf Ebrahimi#         06 03 55 04 0A <- OID 2.5.4.10 organizationName (O)
503*62c56f98SSadaf Ebrahimi#         0C 08 50 6F 6C 61 72 53 53 4C <- UTF8String "PolarSSL"
504*62c56f98SSadaf Ebrahimi# 31 19 <- Set of
505*62c56f98SSadaf Ebrahimi#     30 17 <- Sequence of
506*62c56f98SSadaf Ebrahimi#         06 03 55 04 03 <- OID 2.5.4.3 commonName (CN)
507*62c56f98SSadaf Ebrahimi#         0C 10 50 6F 6C 61 72 53 53 4C 20 54 65 73 74 20 43 41 <- UTF8String "PolarSSL Test CA"
508*62c56f98SSadaf Ebrahimi#
509*62c56f98SSadaf EbrahimiX509 Get Name Valid DN
510*62c56f98SSadaf Ebrahimimbedtls_x509_get_name:"310B3009060355040613024E4C3111300F060355040A0C08506F6C617253534C3119301706035504030C10506F6C617253534C2054657374204341":0
511*62c56f98SSadaf Ebrahimi
512*62c56f98SSadaf Ebrahimi# Parse the following corrupted DN:
513*62c56f98SSadaf Ebrahimi#
514*62c56f98SSadaf Ebrahimi# 31 0B <- Set of
515*62c56f98SSadaf Ebrahimi#     30 09 <- Sequence of
516*62c56f98SSadaf Ebrahimi#         06 03 55 04 06 <- OID 2.5.4.6 countryName (C)
517*62c56f98SSadaf Ebrahimi#         13 02 4E 4C <- PrintableString "NL"
518*62c56f98SSadaf Ebrahimi# 31 11 <- Set of
519*62c56f98SSadaf Ebrahimi#     30 0F <- Sequence of
520*62c56f98SSadaf Ebrahimi#         06 03 55 04 0A <- OID 2.5.4.10 organizationName (O)
521*62c56f98SSadaf Ebrahimi#         0C 08 50 6F 6C 61 72 53 53 4C <- UTF8String "PolarSSL"
522*62c56f98SSadaf Ebrahimi# 30 19 <- Sequence of (corrupted)
523*62c56f98SSadaf Ebrahimi#     30 17 <- Sequence of
524*62c56f98SSadaf Ebrahimi#         06 03 55 04 03 <- OID 2.5.4.3 commonName (CN)
525*62c56f98SSadaf Ebrahimi#         0C 10 50 6F 6C 61 72 53 53 4C 20 54 65 73 74 20 43 41 <- UTF8String "PolarSSL Test CA"
526*62c56f98SSadaf Ebrahimi#
527*62c56f98SSadaf Ebrahimi# The third 'Set of' is corrupted to instead be a 'Sequence of', causing an
528*62c56f98SSadaf Ebrahimi# error and forcing mbedtls_x509_get_name() to clean up the names it has
529*62c56f98SSadaf Ebrahimi# already allocated.
530*62c56f98SSadaf Ebrahimi#
531*62c56f98SSadaf EbrahimiX509 Get Name Corrupted DN Mem Leak
532*62c56f98SSadaf Ebrahimimbedtls_x509_get_name:"310B3009060355040613024E4C3111300F060355040A0C08506F6C617253534C3019301706035504030C10506F6C617253534C2054657374204341":MBEDTLS_ERR_X509_INVALID_NAME + MBEDTLS_ERR_ASN1_UNEXPECTED_TAG
533*62c56f98SSadaf Ebrahimi
534*62c56f98SSadaf EbrahimiX509 Time Expired #1
535*62c56f98SSadaf Ebrahimidepends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_RSA_C:MBEDTLS_HAVE_TIME_DATE:MBEDTLS_MD_CAN_SHA1
536*62c56f98SSadaf Ebrahimimbedtls_x509_time_is_past:"data_files/server1.crt":"valid_from":1
537*62c56f98SSadaf Ebrahimi
538*62c56f98SSadaf EbrahimiX509 Time Expired #2
539*62c56f98SSadaf Ebrahimidepends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_RSA_C:MBEDTLS_HAVE_TIME_DATE:MBEDTLS_MD_CAN_SHA1
540*62c56f98SSadaf Ebrahimimbedtls_x509_time_is_past:"data_files/server1.crt":"valid_to":0
541*62c56f98SSadaf Ebrahimi
542*62c56f98SSadaf EbrahimiX509 Time Expired #3
543*62c56f98SSadaf Ebrahimidepends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_RSA_C:MBEDTLS_HAVE_TIME_DATE:MBEDTLS_MD_CAN_SHA1
544*62c56f98SSadaf Ebrahimimbedtls_x509_time_is_past:"data_files/server2.crt":"valid_from":1
545*62c56f98SSadaf Ebrahimi
546*62c56f98SSadaf EbrahimiX509 Time Expired #4
547*62c56f98SSadaf Ebrahimidepends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_RSA_C:MBEDTLS_HAVE_TIME_DATE:MBEDTLS_MD_CAN_SHA1
548*62c56f98SSadaf Ebrahimimbedtls_x509_time_is_past:"data_files/server2.crt":"valid_to":0
549*62c56f98SSadaf Ebrahimi
550*62c56f98SSadaf EbrahimiX509 Time Expired #5
551*62c56f98SSadaf Ebrahimidepends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_RSA_C:MBEDTLS_HAVE_TIME_DATE:MBEDTLS_MD_CAN_SHA1
552*62c56f98SSadaf Ebrahimimbedtls_x509_time_is_past:"data_files/test-ca.crt":"valid_from":1
553*62c56f98SSadaf Ebrahimi
554*62c56f98SSadaf EbrahimiX509 Time Expired #6
555*62c56f98SSadaf Ebrahimidepends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_RSA_C:MBEDTLS_HAVE_TIME_DATE:MBEDTLS_MD_CAN_SHA1
556*62c56f98SSadaf Ebrahimimbedtls_x509_time_is_past:"data_files/test-ca.crt":"valid_to":0
557*62c56f98SSadaf Ebrahimi
558*62c56f98SSadaf EbrahimiX509 Time Future #1
559*62c56f98SSadaf Ebrahimidepends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_PK_CAN_ECDSA_SOME:MBEDTLS_ECP_HAVE_SECP256R1:MBEDTLS_HAVE_TIME_DATE:MBEDTLS_MD_CAN_SHA256
560*62c56f98SSadaf Ebrahimimbedtls_x509_time_is_future:"data_files/server5.crt":"valid_from":0
561*62c56f98SSadaf Ebrahimi
562*62c56f98SSadaf EbrahimiX509 Time Future #2
563*62c56f98SSadaf Ebrahimidepends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_PK_CAN_ECDSA_SOME:MBEDTLS_ECP_HAVE_SECP256R1:MBEDTLS_HAVE_TIME_DATE:MBEDTLS_MD_CAN_SHA256
564*62c56f98SSadaf Ebrahimimbedtls_x509_time_is_future:"data_files/server5.crt":"valid_to":1
565*62c56f98SSadaf Ebrahimi
566*62c56f98SSadaf EbrahimiX509 Time Future #3
567*62c56f98SSadaf Ebrahimidepends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_PK_CAN_ECDSA_SOME:MBEDTLS_ECP_HAVE_SECP256R1:MBEDTLS_HAVE_TIME_DATE:MBEDTLS_MD_CAN_SHA256
568*62c56f98SSadaf Ebrahimimbedtls_x509_time_is_future:"data_files/server5-future.crt":"valid_from":1
569*62c56f98SSadaf Ebrahimi
570*62c56f98SSadaf EbrahimiX509 Time Future #4
571*62c56f98SSadaf Ebrahimidepends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_PK_CAN_ECDSA_SOME:MBEDTLS_ECP_HAVE_SECP256R1:MBEDTLS_HAVE_TIME_DATE:MBEDTLS_MD_CAN_SHA256
572*62c56f98SSadaf Ebrahimimbedtls_x509_time_is_future:"data_files/server5-future.crt":"valid_to":1
573*62c56f98SSadaf Ebrahimi
574*62c56f98SSadaf EbrahimiX509 Time Future #5
575*62c56f98SSadaf Ebrahimidepends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_PK_CAN_ECDSA_SOME:MBEDTLS_ECP_HAVE_SECP384R1:MBEDTLS_HAVE_TIME_DATE:MBEDTLS_MD_CAN_SHA256
576*62c56f98SSadaf Ebrahimimbedtls_x509_time_is_future:"data_files/test-ca2.crt":"valid_from":0
577*62c56f98SSadaf Ebrahimi
578*62c56f98SSadaf EbrahimiX509 Time Future #6
579*62c56f98SSadaf Ebrahimidepends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_PK_CAN_ECDSA_SOME:MBEDTLS_ECP_HAVE_SECP384R1:MBEDTLS_HAVE_TIME_DATE:MBEDTLS_MD_CAN_SHA256
580*62c56f98SSadaf Ebrahimimbedtls_x509_time_is_future:"data_files/test-ca2.crt":"valid_to":1
581*62c56f98SSadaf Ebrahimi
582*62c56f98SSadaf EbrahimiX509 CRT verification #1 (Revoked Cert, Expired CRL, no CN)
583*62c56f98SSadaf Ebrahimidepends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_MD_CAN_SHA1:MBEDTLS_RSA_C:MBEDTLS_PKCS1_V15:MBEDTLS_HAVE_TIME_DATE
584*62c56f98SSadaf Ebrahimix509_verify:"data_files/server1.crt":"data_files/test-ca.crt":"data_files/crl_expired.pem":"NULL":MBEDTLS_ERR_X509_CERT_VERIFY_FAILED:MBEDTLS_X509_BADCERT_REVOKED | MBEDTLS_X509_BADCRL_EXPIRED:"compat":"NULL"
585*62c56f98SSadaf Ebrahimi
586*62c56f98SSadaf EbrahimiX509 CRT verification #1a (Revoked Cert, Future CRL, no CN)
587*62c56f98SSadaf Ebrahimidepends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_MD_CAN_SHA256:MBEDTLS_PK_CAN_ECDSA_VERIFY:MBEDTLS_ECP_HAVE_SECP256R1:MBEDTLS_ECP_HAVE_SECP384R1:MBEDTLS_MD_CAN_SHA1:MBEDTLS_HAVE_TIME_DATE
588*62c56f98SSadaf Ebrahimix509_verify:"data_files/server6.crt":"data_files/test-ca2.crt":"data_files/crl-future.pem":"NULL":MBEDTLS_ERR_X509_CERT_VERIFY_FAILED:MBEDTLS_X509_BADCERT_REVOKED | MBEDTLS_X509_BADCRL_FUTURE:"compat":"NULL"
589*62c56f98SSadaf Ebrahimi
590*62c56f98SSadaf EbrahimiX509 CRT verification #2 (Revoked Cert, Expired CRL)
591*62c56f98SSadaf Ebrahimidepends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_MD_CAN_SHA1:MBEDTLS_RSA_C:MBEDTLS_PKCS1_V15:MBEDTLS_HAVE_TIME_DATE
592*62c56f98SSadaf Ebrahimix509_verify:"data_files/server1.crt":"data_files/test-ca.crt":"data_files/crl_expired.pem":"PolarSSL Server 1":MBEDTLS_ERR_X509_CERT_VERIFY_FAILED:MBEDTLS_X509_BADCERT_REVOKED | MBEDTLS_X509_BADCRL_EXPIRED:"compat":"NULL"
593*62c56f98SSadaf Ebrahimi
594*62c56f98SSadaf EbrahimiX509 CRT verification #2a (Revoked Cert, Future CRL)
595*62c56f98SSadaf Ebrahimidepends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_MD_CAN_SHA256:MBEDTLS_PK_CAN_ECDSA_VERIFY:MBEDTLS_ECP_HAVE_SECP256R1:MBEDTLS_ECP_HAVE_SECP384R1:MBEDTLS_MD_CAN_SHA1:MBEDTLS_HAVE_TIME_DATE
596*62c56f98SSadaf Ebrahimix509_verify:"data_files/server6.crt":"data_files/test-ca2.crt":"data_files/crl-future.pem":"localhost":MBEDTLS_ERR_X509_CERT_VERIFY_FAILED:MBEDTLS_X509_BADCERT_REVOKED | MBEDTLS_X509_BADCRL_FUTURE:"compat":"NULL"
597*62c56f98SSadaf Ebrahimi
598*62c56f98SSadaf EbrahimiX509 CRT verification #3 (Revoked Cert, Future CRL, CN Mismatch)
599*62c56f98SSadaf Ebrahimidepends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_MD_CAN_SHA1:MBEDTLS_RSA_C:MBEDTLS_PKCS1_V15:MBEDTLS_HAVE_TIME_DATE
600*62c56f98SSadaf Ebrahimix509_verify:"data_files/server1.crt":"data_files/test-ca.crt":"data_files/crl_expired.pem":"PolarSSL Wrong CN":MBEDTLS_ERR_X509_CERT_VERIFY_FAILED:MBEDTLS_X509_BADCERT_REVOKED | MBEDTLS_X509_BADCRL_EXPIRED | MBEDTLS_X509_BADCERT_CN_MISMATCH:"compat":"NULL"
601*62c56f98SSadaf Ebrahimi
602*62c56f98SSadaf EbrahimiX509 CRT verification #3a (Revoked Cert, Expired CRL, CN Mismatch)
603*62c56f98SSadaf Ebrahimidepends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_MD_CAN_SHA256:MBEDTLS_PK_CAN_ECDSA_VERIFY:MBEDTLS_ECP_HAVE_SECP256R1:MBEDTLS_ECP_HAVE_SECP384R1:MBEDTLS_MD_CAN_SHA1:MBEDTLS_HAVE_TIME_DATE
604*62c56f98SSadaf Ebrahimix509_verify:"data_files/server6.crt":"data_files/test-ca2.crt":"data_files/crl-future.pem":"Wrong CN":MBEDTLS_ERR_X509_CERT_VERIFY_FAILED:MBEDTLS_X509_BADCERT_REVOKED | MBEDTLS_X509_BADCRL_FUTURE | MBEDTLS_X509_BADCERT_CN_MISMATCH:"compat":"NULL"
605*62c56f98SSadaf Ebrahimi
606*62c56f98SSadaf EbrahimiX509 CRT verification #4 (Valid Cert, Expired CRL)
607*62c56f98SSadaf Ebrahimidepends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_MD_CAN_SHA1:MBEDTLS_RSA_C:MBEDTLS_PKCS1_V15:MBEDTLS_HAVE_TIME_DATE
608*62c56f98SSadaf Ebrahimix509_verify:"data_files/server2.crt":"data_files/test-ca.crt":"data_files/crl_expired.pem":"NULL":MBEDTLS_ERR_X509_CERT_VERIFY_FAILED:MBEDTLS_X509_BADCRL_EXPIRED:"compat":"NULL"
609*62c56f98SSadaf Ebrahimi
610*62c56f98SSadaf EbrahimiX509 CRT verification #4a (Revoked Cert, Future CRL)
611*62c56f98SSadaf Ebrahimidepends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_MD_CAN_SHA256:MBEDTLS_PK_CAN_ECDSA_VERIFY:MBEDTLS_ECP_HAVE_SECP256R1:MBEDTLS_ECP_HAVE_SECP384R1:MBEDTLS_MD_CAN_SHA1:MBEDTLS_HAVE_TIME_DATE
612*62c56f98SSadaf Ebrahimix509_verify:"data_files/server5.crt":"data_files/test-ca2.crt":"data_files/crl-future.pem":"NULL":MBEDTLS_ERR_X509_CERT_VERIFY_FAILED:MBEDTLS_X509_BADCRL_FUTURE:"compat":"NULL"
613*62c56f98SSadaf Ebrahimi
614*62c56f98SSadaf EbrahimiX509 CRT verification #5 (Revoked Cert)
615*62c56f98SSadaf Ebrahimidepends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_MD_CAN_SHA1:MBEDTLS_RSA_C:MBEDTLS_PKCS1_V15:MBEDTLS_HAVE_TIME_DATE
616*62c56f98SSadaf Ebrahimix509_verify:"data_files/server1.crt":"data_files/test-ca.crt":"data_files/crl.pem":"NULL":MBEDTLS_ERR_X509_CERT_VERIFY_FAILED:MBEDTLS_X509_BADCERT_REVOKED:"compat":"NULL"
617*62c56f98SSadaf Ebrahimi
618*62c56f98SSadaf EbrahimiX509 CRT verification #5' (Revoked Cert, differing DN string formats #1)
619*62c56f98SSadaf Ebrahimidepends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_MD_CAN_SHA1:MBEDTLS_RSA_C:MBEDTLS_PKCS1_V15:MBEDTLS_HAVE_TIME_DATE
620*62c56f98SSadaf Ebrahimix509_verify:"data_files/server1.crt":"data_files/test-ca_utf8.crt":"data_files/crl.pem":"NULL":MBEDTLS_ERR_X509_CERT_VERIFY_FAILED:MBEDTLS_X509_BADCERT_REVOKED:"compat":"NULL"
621*62c56f98SSadaf Ebrahimi
622*62c56f98SSadaf EbrahimiX509 CRT verification #5'' (Revoked Cert, differing DN string formats #2)
623*62c56f98SSadaf Ebrahimidepends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_MD_CAN_SHA1:MBEDTLS_RSA_C:MBEDTLS_PKCS1_V15:MBEDTLS_HAVE_TIME_DATE
624*62c56f98SSadaf Ebrahimix509_verify:"data_files/server1.crt":"data_files/test-ca_printable.crt":"data_files/crl.pem":"NULL":MBEDTLS_ERR_X509_CERT_VERIFY_FAILED:MBEDTLS_X509_BADCERT_REVOKED:"compat":"NULL"
625*62c56f98SSadaf Ebrahimi
626*62c56f98SSadaf EbrahimiX509 CRT verification #5''' (Revoked Cert, differing upper and lower case)
627*62c56f98SSadaf Ebrahimidepends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_MD_CAN_SHA1:MBEDTLS_RSA_C:MBEDTLS_PKCS1_V15:MBEDTLS_HAVE_TIME_DATE
628*62c56f98SSadaf Ebrahimix509_verify:"data_files/server1.crt":"data_files/test-ca_uppercase.crt":"data_files/crl.pem":"NULL":MBEDTLS_ERR_X509_CERT_VERIFY_FAILED:MBEDTLS_X509_BADCERT_REVOKED:"compat":"NULL"
629*62c56f98SSadaf Ebrahimi
630*62c56f98SSadaf EbrahimiX509 CRT verification #6 (Revoked Cert)
631*62c56f98SSadaf Ebrahimidepends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_MD_CAN_SHA1:MBEDTLS_RSA_C:MBEDTLS_PKCS1_V15:MBEDTLS_HAVE_TIME_DATE
632*62c56f98SSadaf Ebrahimix509_verify:"data_files/server1.crt":"data_files/test-ca.crt":"data_files/crl.pem":"PolarSSL Server 1":MBEDTLS_ERR_X509_CERT_VERIFY_FAILED:MBEDTLS_X509_BADCERT_REVOKED:"compat":"NULL"
633*62c56f98SSadaf Ebrahimi
634*62c56f98SSadaf EbrahimiX509 CRT verification #7 (Revoked Cert, CN Mismatch)
635*62c56f98SSadaf Ebrahimidepends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_MD_CAN_SHA1:MBEDTLS_RSA_C:MBEDTLS_PKCS1_V15:MBEDTLS_HAVE_TIME_DATE
636*62c56f98SSadaf Ebrahimix509_verify:"data_files/server1.crt":"data_files/test-ca.crt":"data_files/crl.pem":"PolarSSL Wrong CN":MBEDTLS_ERR_X509_CERT_VERIFY_FAILED:MBEDTLS_X509_BADCERT_REVOKED | MBEDTLS_X509_BADCERT_CN_MISMATCH:"compat":"NULL"
637*62c56f98SSadaf Ebrahimi
638*62c56f98SSadaf EbrahimiX509 CRT verification #8 (Valid Cert)
639*62c56f98SSadaf Ebrahimidepends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_MD_CAN_SHA256:MBEDTLS_PK_CAN_ECDSA_VERIFY:MBEDTLS_ECP_HAVE_SECP256R1:MBEDTLS_ECP_HAVE_SECP384R1:MBEDTLS_MD_CAN_SHA1
640*62c56f98SSadaf Ebrahimix509_verify:"data_files/server5.crt":"data_files/test-ca2.crt":"data_files/crl-ec-sha1.pem":"NULL":0:0:"compat":"NULL"
641*62c56f98SSadaf Ebrahimi
642*62c56f98SSadaf EbrahimiX509 CRT verification #8a (Expired Cert)
643*62c56f98SSadaf Ebrahimidepends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_MD_CAN_SHA256:MBEDTLS_PK_CAN_ECDSA_VERIFY:MBEDTLS_ECP_HAVE_SECP256R1:MBEDTLS_ECP_HAVE_SECP384R1:MBEDTLS_MD_CAN_SHA1:MBEDTLS_HAVE_TIME_DATE
644*62c56f98SSadaf Ebrahimix509_verify:"data_files/server5-expired.crt":"data_files/test-ca2.crt":"data_files/crl-ec-sha1.pem":"NULL":MBEDTLS_ERR_X509_CERT_VERIFY_FAILED:MBEDTLS_X509_BADCERT_EXPIRED:"compat":"NULL"
645*62c56f98SSadaf Ebrahimi
646*62c56f98SSadaf EbrahimiX509 CRT verification #8b (Future Cert)
647*62c56f98SSadaf Ebrahimidepends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_MD_CAN_SHA256:MBEDTLS_PK_CAN_ECDSA_VERIFY:MBEDTLS_ECP_HAVE_SECP256R1:MBEDTLS_ECP_HAVE_SECP384R1:MBEDTLS_MD_CAN_SHA1:MBEDTLS_HAVE_TIME_DATE
648*62c56f98SSadaf Ebrahimix509_verify:"data_files/server5-future.crt":"data_files/test-ca2.crt":"data_files/crl-ec-sha1.pem":"NULL":MBEDTLS_ERR_X509_CERT_VERIFY_FAILED:MBEDTLS_X509_BADCERT_FUTURE:"compat":"NULL"
649*62c56f98SSadaf Ebrahimi
650*62c56f98SSadaf EbrahimiX509 CRT verification #8c (Expired Cert, longer chain)
651*62c56f98SSadaf Ebrahimidepends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_MD_CAN_SHA256:MBEDTLS_PK_CAN_ECDSA_VERIFY:MBEDTLS_ECP_HAVE_SECP256R1:MBEDTLS_ECP_HAVE_SECP384R1:MBEDTLS_MD_CAN_SHA1:MBEDTLS_RSA_C:MBEDTLS_PKCS1_V15:MBEDTLS_HAVE_TIME_DATE
652*62c56f98SSadaf Ebrahimix509_verify:"data_files/server7-expired.crt":"data_files/test-ca2.crt":"data_files/crl-ec-sha1.pem":"NULL":MBEDTLS_ERR_X509_CERT_VERIFY_FAILED:MBEDTLS_X509_BADCERT_EXPIRED:"compat":"NULL"
653*62c56f98SSadaf Ebrahimi
654*62c56f98SSadaf EbrahimiX509 CRT verification #8d (Future Cert, longer chain)
655*62c56f98SSadaf Ebrahimidepends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_MD_CAN_SHA256:MBEDTLS_PK_CAN_ECDSA_VERIFY:MBEDTLS_ECP_HAVE_SECP256R1:MBEDTLS_ECP_HAVE_SECP384R1:MBEDTLS_MD_CAN_SHA1:MBEDTLS_RSA_C:MBEDTLS_PKCS1_V15:MBEDTLS_HAVE_TIME_DATE
656*62c56f98SSadaf Ebrahimix509_verify:"data_files/server7-future.crt":"data_files/test-ca2.crt":"data_files/crl-ec-sha1.pem":"NULL":MBEDTLS_ERR_X509_CERT_VERIFY_FAILED:MBEDTLS_X509_BADCERT_FUTURE:"compat":"NULL"
657*62c56f98SSadaf Ebrahimi
658*62c56f98SSadaf EbrahimiX509 CRT verification #9 (Not trusted Cert)
659*62c56f98SSadaf Ebrahimidepends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_MD_CAN_SHA1:MBEDTLS_RSA_C:MBEDTLS_PKCS1_V15
660*62c56f98SSadaf Ebrahimix509_verify:"data_files/server2.crt":"data_files/server1.crt":"data_files/crl.pem":"NULL":MBEDTLS_ERR_X509_CERT_VERIFY_FAILED:MBEDTLS_X509_BADCERT_NOT_TRUSTED:"compat":"NULL"
661*62c56f98SSadaf Ebrahimi
662*62c56f98SSadaf EbrahimiX509 CRT verification #10 (Not trusted Cert, Expired CRL)
663*62c56f98SSadaf Ebrahimidepends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_RSA_C:MBEDTLS_PKCS1_V15:MBEDTLS_MD_CAN_SHA1
664*62c56f98SSadaf Ebrahimix509_verify:"data_files/server2.crt":"data_files/server1.crt":"data_files/crl_expired.pem":"NULL":MBEDTLS_ERR_X509_CERT_VERIFY_FAILED:MBEDTLS_X509_BADCERT_NOT_TRUSTED:"compat":"NULL"
665*62c56f98SSadaf Ebrahimi
666*62c56f98SSadaf EbrahimiX509 CRT verification #13 (Valid Cert MD5 Digest, MD5 forbidden)
667*62c56f98SSadaf Ebrahimidepends_on:MBEDTLS_MD_CAN_MD5:MBEDTLS_PEM_PARSE_C:MBEDTLS_MD_CAN_SHA1:MBEDTLS_RSA_C:MBEDTLS_PKCS1_V15
668*62c56f98SSadaf Ebrahimix509_verify:"data_files/cert_md5.crt":"data_files/test-ca.crt":"data_files/crl.pem":"NULL":MBEDTLS_ERR_X509_CERT_VERIFY_FAILED:MBEDTLS_X509_BADCERT_BAD_MD:"compat":"NULL"
669*62c56f98SSadaf Ebrahimi
670*62c56f98SSadaf EbrahimiX509 CRT verification #13 (Valid Cert MD5 Digest, MD5 allowed)
671*62c56f98SSadaf Ebrahimidepends_on:MBEDTLS_MD_CAN_MD5:MBEDTLS_PEM_PARSE_C:MBEDTLS_MD_CAN_SHA1:MBEDTLS_RSA_C:MBEDTLS_PKCS1_V15
672*62c56f98SSadaf Ebrahimix509_verify:"data_files/cert_md5.crt":"data_files/test-ca.crt":"data_files/crl.pem":"NULL":0:0:"all":"NULL"
673*62c56f98SSadaf Ebrahimi
674*62c56f98SSadaf EbrahimiX509 CRT verification #14 (Valid Cert SHA1 Digest explicitly allowed in profile)
675*62c56f98SSadaf Ebrahimidepends_on:MBEDTLS_MD_CAN_SHA1:MBEDTLS_PEM_PARSE_C:MBEDTLS_MD_CAN_SHA1:MBEDTLS_RSA_C:MBEDTLS_PKCS1_V15
676*62c56f98SSadaf Ebrahimix509_verify:"data_files/cert_sha1.crt":"data_files/test-ca.crt":"data_files/crl.pem":"NULL":0:0:"compat":"NULL"
677*62c56f98SSadaf Ebrahimi
678*62c56f98SSadaf EbrahimiX509 CRT verification #14 (Valid Cert SHA1 Digest forbidden in default profile)
679*62c56f98SSadaf Ebrahimidepends_on:MBEDTLS_MD_CAN_SHA1:MBEDTLS_PEM_PARSE_C:MBEDTLS_MD_CAN_SHA1:MBEDTLS_RSA_C:MBEDTLS_PKCS1_V15
680*62c56f98SSadaf Ebrahimix509_verify:"data_files/cert_sha1.crt":"data_files/test-ca.crt":"data_files/crl.pem":"NULL":MBEDTLS_ERR_X509_CERT_VERIFY_FAILED:MBEDTLS_X509_BADCRL_BAD_MD | MBEDTLS_X509_BADCERT_BAD_MD:"":"NULL"
681*62c56f98SSadaf Ebrahimi
682*62c56f98SSadaf EbrahimiX509 CRT verification #15 (Valid Cert SHA224 Digest)
683*62c56f98SSadaf Ebrahimidepends_on:MBEDTLS_MD_CAN_SHA224:MBEDTLS_PEM_PARSE_C:MBEDTLS_MD_CAN_SHA1:MBEDTLS_RSA_C:MBEDTLS_PKCS1_V15
684*62c56f98SSadaf Ebrahimix509_verify:"data_files/cert_sha224.crt":"data_files/test-ca.crt":"data_files/crl.pem":"NULL":0:0:"compat":"NULL"
685*62c56f98SSadaf Ebrahimi
686*62c56f98SSadaf EbrahimiX509 CRT verification #16 (Valid Cert SHA256 Digest)
687*62c56f98SSadaf Ebrahimidepends_on:MBEDTLS_MD_CAN_SHA256:MBEDTLS_PEM_PARSE_C:MBEDTLS_MD_CAN_SHA1:MBEDTLS_RSA_C:MBEDTLS_PKCS1_V15
688*62c56f98SSadaf Ebrahimix509_verify:"data_files/cert_sha256.crt":"data_files/test-ca.crt":"data_files/crl.pem":"NULL":0:0:"compat":"NULL"
689*62c56f98SSadaf Ebrahimi
690*62c56f98SSadaf EbrahimiX509 CRT verification #17 (Valid Cert SHA384 Digest)
691*62c56f98SSadaf Ebrahimidepends_on:MBEDTLS_MD_CAN_SHA384:MBEDTLS_PEM_PARSE_C:MBEDTLS_MD_CAN_SHA1:MBEDTLS_RSA_C:MBEDTLS_PKCS1_V15
692*62c56f98SSadaf Ebrahimix509_verify:"data_files/cert_sha384.crt":"data_files/test-ca.crt":"data_files/crl.pem":"NULL":0:0:"compat":"NULL"
693*62c56f98SSadaf Ebrahimi
694*62c56f98SSadaf EbrahimiX509 CRT verification #18 (Valid Cert SHA512 Digest)
695*62c56f98SSadaf Ebrahimidepends_on:MBEDTLS_MD_CAN_SHA512:MBEDTLS_PEM_PARSE_C:MBEDTLS_MD_CAN_SHA1:MBEDTLS_RSA_C:MBEDTLS_PKCS1_V15
696*62c56f98SSadaf Ebrahimix509_verify:"data_files/cert_sha512.crt":"data_files/test-ca.crt":"data_files/crl.pem":"NULL":0:0:"compat":"NULL"
697*62c56f98SSadaf Ebrahimi
698*62c56f98SSadaf EbrahimiX509 CRT verification #19 (Valid Cert, denying callback)
699*62c56f98SSadaf Ebrahimidepends_on:MBEDTLS_MD_CAN_SHA512:MBEDTLS_PEM_PARSE_C:MBEDTLS_MD_CAN_SHA1:MBEDTLS_RSA_C:MBEDTLS_PKCS1_V15
700*62c56f98SSadaf Ebrahimix509_verify:"data_files/cert_sha512.crt":"data_files/test-ca.crt":"data_files/crl.pem":"NULL":MBEDTLS_ERR_X509_CERT_VERIFY_FAILED:MBEDTLS_X509_BADCERT_OTHER:"compat":"verify_none"
701*62c56f98SSadaf Ebrahimi
702*62c56f98SSadaf EbrahimiX509 CRT verification #19 (Not trusted Cert, allowing callback)
703*62c56f98SSadaf Ebrahimidepends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_RSA_C:MBEDTLS_PKCS1_V15:MBEDTLS_MD_CAN_SHA1
704*62c56f98SSadaf Ebrahimix509_verify:"data_files/server2.crt":"data_files/server1.crt":"data_files/crl_expired.pem":"NULL":0:0:"compat":"verify_all"
705*62c56f98SSadaf Ebrahimi
706*62c56f98SSadaf EbrahimiX509 CRT verification #21 (domain matching wildcard certificate, case insensitive)
707*62c56f98SSadaf Ebrahimidepends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_MD_CAN_SHA1:MBEDTLS_RSA_C:MBEDTLS_PKCS1_V15
708*62c56f98SSadaf Ebrahimix509_verify:"data_files/cert_example_wildcard.crt":"data_files/test-ca.crt":"data_files/crl.pem":"mail.ExAmPlE.com":0:0:"compat":"NULL"
709*62c56f98SSadaf Ebrahimi
710*62c56f98SSadaf EbrahimiX509 CRT verification #22 (domain not matching wildcard certificate)
711*62c56f98SSadaf Ebrahimidepends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_MD_CAN_SHA1:MBEDTLS_RSA_C:MBEDTLS_PKCS1_V15
712*62c56f98SSadaf Ebrahimix509_verify:"data_files/cert_example_wildcard.crt":"data_files/test-ca.crt":"data_files/crl.pem":"mail.example.net":MBEDTLS_ERR_X509_CERT_VERIFY_FAILED:MBEDTLS_X509_BADCERT_CN_MISMATCH:"compat":"NULL"
713*62c56f98SSadaf Ebrahimi
714*62c56f98SSadaf EbrahimiX509 CRT verification #23 (domain not matching wildcard certificate)
715*62c56f98SSadaf Ebrahimidepends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_MD_CAN_SHA1:MBEDTLS_RSA_C:MBEDTLS_PKCS1_V15
716*62c56f98SSadaf Ebrahimix509_verify:"data_files/cert_example_wildcard.crt":"data_files/test-ca.crt":"data_files/crl.pem":"example.com":MBEDTLS_ERR_X509_CERT_VERIFY_FAILED:MBEDTLS_X509_BADCERT_CN_MISMATCH:"compat":"NULL"
717*62c56f98SSadaf Ebrahimi
718*62c56f98SSadaf EbrahimiX509 CRT verification #24 (domain matching CN of multi certificate)
719*62c56f98SSadaf Ebrahimidepends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_MD_CAN_SHA1:MBEDTLS_MD_CAN_SHA256:MBEDTLS_RSA_C:MBEDTLS_PKCS1_V15
720*62c56f98SSadaf Ebrahimix509_verify:"data_files/cert_example_multi.crt":"data_files/test-ca.crt":"data_files/crl.pem":"www.example.com":MBEDTLS_ERR_X509_CERT_VERIFY_FAILED:MBEDTLS_X509_BADCERT_CN_MISMATCH:"compat":"NULL"
721*62c56f98SSadaf Ebrahimi
722*62c56f98SSadaf EbrahimiX509 CRT verification #25 (domain matching multi certificate)
723*62c56f98SSadaf Ebrahimidepends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_MD_CAN_SHA1:MBEDTLS_MD_CAN_SHA256:MBEDTLS_RSA_C:MBEDTLS_PKCS1_V15
724*62c56f98SSadaf Ebrahimix509_verify:"data_files/cert_example_multi.crt":"data_files/test-ca.crt":"data_files/crl.pem":"example.net":0:0:"compat":"NULL"
725*62c56f98SSadaf Ebrahimi
726*62c56f98SSadaf EbrahimiX509 CRT verification #26 (domain not matching multi certificate)
727*62c56f98SSadaf Ebrahimidepends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_MD_CAN_SHA1:MBEDTLS_MD_CAN_SHA256:MBEDTLS_RSA_C:MBEDTLS_PKCS1_V15
728*62c56f98SSadaf Ebrahimix509_verify:"data_files/cert_example_multi.crt":"data_files/test-ca.crt":"data_files/crl.pem":"www.example.net":MBEDTLS_ERR_X509_CERT_VERIFY_FAILED:MBEDTLS_X509_BADCERT_CN_MISMATCH:"compat":"NULL"
729*62c56f98SSadaf Ebrahimi
730*62c56f98SSadaf EbrahimiX509 CRT verification #27.1 (domain not matching multi certificate: suffix)
731*62c56f98SSadaf Ebrahimidepends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_MD_CAN_SHA1:MBEDTLS_MD_CAN_SHA256:MBEDTLS_RSA_C:MBEDTLS_PKCS1_V15
732*62c56f98SSadaf Ebrahimix509_verify:"data_files/cert_example_multi.crt":"data_files/test-ca.crt":"data_files/crl.pem":"xample.net":MBEDTLS_ERR_X509_CERT_VERIFY_FAILED:MBEDTLS_X509_BADCERT_CN_MISMATCH:"compat":"NULL"
733*62c56f98SSadaf Ebrahimi
734*62c56f98SSadaf EbrahimiX509 CRT verification #27.2 (domain not matching multi certificate: head junk)
735*62c56f98SSadaf Ebrahimidepends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_MD_CAN_SHA1:MBEDTLS_MD_CAN_SHA256:MBEDTLS_RSA_C:MBEDTLS_PKCS1_V15
736*62c56f98SSadaf Ebrahimix509_verify:"data_files/cert_example_multi.crt":"data_files/test-ca.crt":"data_files/crl.pem":"bexample.net":MBEDTLS_ERR_X509_CERT_VERIFY_FAILED:MBEDTLS_X509_BADCERT_CN_MISMATCH:"compat":"NULL"
737*62c56f98SSadaf Ebrahimi
738*62c56f98SSadaf EbrahimiX509 CRT verification #28 (domain not matching wildcard in multi certificate)
739*62c56f98SSadaf Ebrahimidepends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_MD_CAN_SHA1:MBEDTLS_MD_CAN_SHA256:MBEDTLS_RSA_C:MBEDTLS_PKCS1_V15
740*62c56f98SSadaf Ebrahimix509_verify:"data_files/cert_example_multi.crt":"data_files/test-ca.crt":"data_files/crl.pem":"example.org":MBEDTLS_ERR_X509_CERT_VERIFY_FAILED:MBEDTLS_X509_BADCERT_CN_MISMATCH:"compat":"NULL"
741*62c56f98SSadaf Ebrahimi
742*62c56f98SSadaf EbrahimiX509 CRT verification #29 (domain matching wildcard in multi certificate)
743*62c56f98SSadaf Ebrahimidepends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_MD_CAN_SHA1:MBEDTLS_MD_CAN_SHA256:MBEDTLS_RSA_C:MBEDTLS_PKCS1_V15
744*62c56f98SSadaf Ebrahimix509_verify:"data_files/cert_example_multi.crt":"data_files/test-ca.crt":"data_files/crl.pem":"mail.example.org":0:0:"compat":"NULL"
745*62c56f98SSadaf Ebrahimi
746*62c56f98SSadaf EbrahimiX509 CRT verification #30 (domain matching multi certificate without CN)
747*62c56f98SSadaf Ebrahimidepends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_MD_CAN_SHA1:MBEDTLS_RSA_C:MBEDTLS_PKCS1_V15
748*62c56f98SSadaf Ebrahimix509_verify:"data_files/cert_example_multi_nocn.crt":"data_files/test-ca.crt":"data_files/crl.pem":"www.shotokan-braunschweig.de":MBEDTLS_ERR_X509_CERT_VERIFY_FAILED:MBEDTLS_X509_BADCERT_NOT_TRUSTED:"compat":"NULL"
749*62c56f98SSadaf Ebrahimi
750*62c56f98SSadaf EbrahimiX509 CRT verification #31 (domain not matching multi certificate without CN)
751*62c56f98SSadaf Ebrahimidepends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_MD_CAN_SHA1:MBEDTLS_RSA_C:MBEDTLS_PKCS1_V15
752*62c56f98SSadaf Ebrahimix509_verify:"data_files/cert_example_multi_nocn.crt":"data_files/test-ca.crt":"data_files/crl.pem":"www.example.net":MBEDTLS_ERR_X509_CERT_VERIFY_FAILED:MBEDTLS_X509_BADCERT_CN_MISMATCH + MBEDTLS_X509_BADCERT_NOT_TRUSTED:"compat":"NULL"
753*62c56f98SSadaf Ebrahimi
754*62c56f98SSadaf EbrahimiX509 CRT verification #32 (Valid, EC cert, RSA CA)
755*62c56f98SSadaf Ebrahimidepends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_RSA_C:MBEDTLS_PK_CAN_ECDSA_VERIFY:MBEDTLS_ECP_HAVE_SECP192R1:MBEDTLS_RSA_C:MBEDTLS_PKCS1_V15:MBEDTLS_MD_CAN_SHA1
756*62c56f98SSadaf Ebrahimix509_verify:"data_files/server3.crt":"data_files/test-ca.crt":"data_files/crl.pem":"NULL":0:0:"compat":"NULL"
757*62c56f98SSadaf Ebrahimi
758*62c56f98SSadaf EbrahimiX509 CRT verification #33 (Valid, RSA cert, EC CA)
759*62c56f98SSadaf Ebrahimidepends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_RSA_C:MBEDTLS_PK_CAN_ECDSA_VERIFY:MBEDTLS_MD_CAN_SHA256:MBEDTLS_ECP_HAVE_SECP256R1:MBEDTLS_RSA_C:MBEDTLS_PKCS1_V15:MBEDTLS_ECP_HAVE_SECP384R1
760*62c56f98SSadaf Ebrahimix509_verify:"data_files/server4.crt":"data_files/test-ca2.crt":"data_files/crl-ec-sha256.pem":"NULL":0:0:"compat":"NULL"
761*62c56f98SSadaf Ebrahimi
762*62c56f98SSadaf EbrahimiX509 CRT verification #34 (Valid, EC cert, EC CA)
763*62c56f98SSadaf Ebrahimidepends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_PK_CAN_ECDSA_VERIFY:MBEDTLS_MD_CAN_SHA256:MBEDTLS_ECP_HAVE_SECP256R1:MBEDTLS_ECP_HAVE_SECP384R1
764*62c56f98SSadaf Ebrahimix509_verify:"data_files/server5.crt":"data_files/test-ca2.crt":"data_files/crl-ec-sha256.pem":"NULL":0:0:"compat":"NULL"
765*62c56f98SSadaf Ebrahimi
766*62c56f98SSadaf EbrahimiX509 CRT verification #35 (Revoked, EC CA)
767*62c56f98SSadaf Ebrahimidepends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_PK_CAN_ECDSA_VERIFY:MBEDTLS_MD_CAN_SHA256:MBEDTLS_ECP_HAVE_SECP256R1:MBEDTLS_ECP_HAVE_SECP384R1:MBEDTLS_HAVE_TIME_DATE
768*62c56f98SSadaf Ebrahimix509_verify:"data_files/server6.crt":"data_files/test-ca2.crt":"data_files/crl-ec-sha256.pem":"NULL":MBEDTLS_ERR_X509_CERT_VERIFY_FAILED:MBEDTLS_X509_BADCERT_REVOKED:"compat":"NULL"
769*62c56f98SSadaf Ebrahimi
770*62c56f98SSadaf EbrahimiX509 CRT verification #36 (Valid, EC CA, SHA1 Digest)
771*62c56f98SSadaf Ebrahimidepends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_PK_CAN_ECDSA_VERIFY:MBEDTLS_MD_CAN_SHA256:MBEDTLS_ECP_HAVE_SECP256R1:MBEDTLS_ECP_HAVE_SECP384R1:MBEDTLS_MD_CAN_SHA1
772*62c56f98SSadaf Ebrahimix509_verify:"data_files/server5-sha1.crt":"data_files/test-ca2.crt":"data_files/crl-ec-sha256.pem":"NULL":0:0:"compat":"NULL"
773*62c56f98SSadaf Ebrahimi
774*62c56f98SSadaf EbrahimiX509 CRT verification #37 (Valid, EC CA, SHA224 Digest)
775*62c56f98SSadaf Ebrahimidepends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_PK_CAN_ECDSA_VERIFY:MBEDTLS_MD_CAN_SHA256:MBEDTLS_ECP_HAVE_SECP256R1:MBEDTLS_ECP_HAVE_SECP384R1:MBEDTLS_MD_CAN_SHA224
776*62c56f98SSadaf Ebrahimix509_verify:"data_files/server5-sha224.crt":"data_files/test-ca2.crt":"data_files/crl-ec-sha256.pem":"NULL":0:0:"compat":"NULL"
777*62c56f98SSadaf Ebrahimi
778*62c56f98SSadaf EbrahimiX509 CRT verification #38 (Valid, EC CA, SHA384 Digest)
779*62c56f98SSadaf Ebrahimidepends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_PK_CAN_ECDSA_VERIFY:MBEDTLS_MD_CAN_SHA256:MBEDTLS_MD_CAN_SHA384:MBEDTLS_ECP_HAVE_SECP256R1:MBEDTLS_ECP_HAVE_SECP384R1
780*62c56f98SSadaf Ebrahimix509_verify:"data_files/server5-sha384.crt":"data_files/test-ca2.crt":"data_files/crl-ec-sha256.pem":"NULL":0:0:"compat":"NULL"
781*62c56f98SSadaf Ebrahimi
782*62c56f98SSadaf EbrahimiX509 CRT verification #39 (Valid, EC CA, SHA512 Digest)
783*62c56f98SSadaf Ebrahimidepends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_PK_CAN_ECDSA_VERIFY:MBEDTLS_MD_CAN_SHA256:MBEDTLS_MD_CAN_SHA512:MBEDTLS_ECP_HAVE_SECP256R1:MBEDTLS_ECP_HAVE_SECP384R1
784*62c56f98SSadaf Ebrahimix509_verify:"data_files/server5-sha512.crt":"data_files/test-ca2.crt":"data_files/crl-ec-sha256.pem":"NULL":0:0:"compat":"NULL"
785*62c56f98SSadaf Ebrahimi
786*62c56f98SSadaf EbrahimiX509 CRT verification #40 (Valid, depth 0, RSA, CA)
787*62c56f98SSadaf Ebrahimidepends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_RSA_C:MBEDTLS_PKCS1_V15:MBEDTLS_MD_CAN_SHA256:MBEDTLS_MD_CAN_SHA1
788*62c56f98SSadaf Ebrahimix509_verify:"data_files/test-ca.crt":"data_files/test-ca.crt":"data_files/crl.pem":"NULL":0:0:"compat":"NULL"
789*62c56f98SSadaf Ebrahimi
790*62c56f98SSadaf EbrahimiX509 CRT verification #41 (Valid, depth 0, EC, CA)
791*62c56f98SSadaf Ebrahimidepends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_PK_CAN_ECDSA_VERIFY:MBEDTLS_ECP_HAVE_SECP256R1:MBEDTLS_ECP_HAVE_SECP384R1:MBEDTLS_MD_CAN_SHA256
792*62c56f98SSadaf Ebrahimix509_verify:"data_files/test-ca2.crt":"data_files/test-ca2.crt":"data_files/crl-ec-sha256.pem":"NULL":0:0:"compat":"NULL"
793*62c56f98SSadaf Ebrahimi
794*62c56f98SSadaf EbrahimiX509 CRT verification #42 (Depth 0, not CA, RSA)
795*62c56f98SSadaf Ebrahimidepends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_RSA_C:MBEDTLS_PKCS1_V15:MBEDTLS_MD_CAN_SHA1
796*62c56f98SSadaf Ebrahimix509_verify:"data_files/server2.crt":"data_files/server2.crt":"data_files/crl.pem":"NULL":MBEDTLS_ERR_X509_CERT_VERIFY_FAILED:MBEDTLS_X509_BADCERT_NOT_TRUSTED:"compat":"NULL"
797*62c56f98SSadaf Ebrahimi
798*62c56f98SSadaf EbrahimiX509 CRT verification #43 (Depth 0, not CA, EC)
799*62c56f98SSadaf Ebrahimidepends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_PK_CAN_ECDSA_VERIFY:MBEDTLS_ECP_HAVE_SECP256R1:MBEDTLS_MD_CAN_SHA256
800*62c56f98SSadaf Ebrahimix509_verify:"data_files/server5.crt":"data_files/server5.crt":"data_files/crl-ec-sha256.pem":"NULL":MBEDTLS_ERR_X509_CERT_VERIFY_FAILED:MBEDTLS_X509_BADCERT_NOT_TRUSTED:"compat":"NULL"
801*62c56f98SSadaf Ebrahimi
802*62c56f98SSadaf EbrahimiX509 CRT verification #44 (Corrupted signature, EC)
803*62c56f98SSadaf Ebrahimidepends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_PK_CAN_ECDSA_VERIFY:MBEDTLS_ECP_HAVE_SECP256R1:MBEDTLS_ECP_HAVE_SECP384R1:MBEDTLS_MD_CAN_SHA256
804*62c56f98SSadaf Ebrahimix509_verify:"data_files/server5-badsign.crt":"data_files/test-ca2.crt":"data_files/crl-ec-sha256.pem":"NULL":MBEDTLS_ERR_X509_CERT_VERIFY_FAILED:MBEDTLS_X509_BADCERT_NOT_TRUSTED:"compat":"NULL"
805*62c56f98SSadaf Ebrahimi
806*62c56f98SSadaf EbrahimiX509 CRT verification #45 (Corrupted signature, RSA)
807*62c56f98SSadaf Ebrahimidepends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_RSA_C:MBEDTLS_PKCS1_V15:MBEDTLS_MD_CAN_SHA1
808*62c56f98SSadaf Ebrahimix509_verify:"data_files/server2-badsign.crt":"data_files/test-ca.crt":"data_files/crl.pem":"NULL":MBEDTLS_ERR_X509_CERT_VERIFY_FAILED:MBEDTLS_X509_BADCERT_NOT_TRUSTED:"compat":"NULL"
809*62c56f98SSadaf Ebrahimi
810*62c56f98SSadaf EbrahimiX509 CRT verification #45b (Corrupted signature, intermediate CA)
811*62c56f98SSadaf Ebrahimidepends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_RSA_C:MBEDTLS_PKCS1_V15:MBEDTLS_MD_CAN_SHA1:MBEDTLS_PK_CAN_ECDSA_SOME:MBEDTLS_ECP_HAVE_SECP256R1:MBEDTLS_ECP_HAVE_SECP384R1:MBEDTLS_MD_CAN_SHA256
812*62c56f98SSadaf Ebrahimix509_verify:"data_files/server7-badsign.crt":"data_files/test-ca2.crt":"data_files/crl.pem":"NULL":MBEDTLS_ERR_X509_CERT_VERIFY_FAILED:MBEDTLS_X509_BADCERT_NOT_TRUSTED:"compat":"NULL"
813*62c56f98SSadaf Ebrahimi
814*62c56f98SSadaf EbrahimiX509 CRT verification #46 (Valid, depth 2, EC-RSA-EC)
815*62c56f98SSadaf Ebrahimidepends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_PK_CAN_ECDSA_VERIFY:MBEDTLS_RSA_C:MBEDTLS_ECP_HAVE_SECP256R1:MBEDTLS_ECP_HAVE_SECP384R1:MBEDTLS_RSA_C:MBEDTLS_PKCS1_V15:MBEDTLS_MD_CAN_SHA256
816*62c56f98SSadaf Ebrahimix509_verify:"data_files/server7_int-ca.crt":"data_files/test-ca2.crt":"data_files/crl-ec-sha256.pem":"NULL":0:0:"compat":"NULL"
817*62c56f98SSadaf Ebrahimi
818*62c56f98SSadaf EbrahimiX509 CRT verification #47 (Untrusted, depth 2, EC-RSA-EC)
819*62c56f98SSadaf Ebrahimidepends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_PK_CAN_ECDSA_VERIFY:MBEDTLS_RSA_C:MBEDTLS_ECP_HAVE_SECP256R1:MBEDTLS_RSA_C:MBEDTLS_PKCS1_V15:MBEDTLS_MD_CAN_SHA1:MBEDTLS_MD_CAN_SHA256
820*62c56f98SSadaf Ebrahimix509_verify:"data_files/server7_int-ca.crt":"data_files/test-ca.crt":"data_files/crl-ec-sha256.pem":"NULL":MBEDTLS_ERR_X509_CERT_VERIFY_FAILED:MBEDTLS_X509_BADCERT_NOT_TRUSTED:"compat":"NULL"
821*62c56f98SSadaf Ebrahimi
822*62c56f98SSadaf EbrahimiX509 CRT verification #48 (Missing intermediate CA, EC-RSA-EC)
823*62c56f98SSadaf Ebrahimidepends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_PK_CAN_ECDSA_VERIFY:MBEDTLS_RSA_C:MBEDTLS_ECP_HAVE_SECP256R1:MBEDTLS_RSA_C:MBEDTLS_PKCS1_V15:MBEDTLS_MD_CAN_SHA1:MBEDTLS_MD_CAN_SHA256
824*62c56f98SSadaf Ebrahimix509_verify:"data_files/server7.crt":"data_files/test-ca.crt":"data_files/crl-ec-sha256.pem":"NULL":MBEDTLS_ERR_X509_CERT_VERIFY_FAILED:MBEDTLS_X509_BADCERT_NOT_TRUSTED:"compat":"NULL"
825*62c56f98SSadaf Ebrahimi
826*62c56f98SSadaf EbrahimiX509 CRT verification #49 (Valid, depth 2, RSA-EC-RSA)
827*62c56f98SSadaf Ebrahimidepends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_PK_CAN_ECDSA_VERIFY:MBEDTLS_RSA_C:MBEDTLS_ECP_HAVE_SECP384R1:MBEDTLS_RSA_C:MBEDTLS_PKCS1_V15:MBEDTLS_MD_CAN_SHA256:MBEDTLS_MD_CAN_SHA1
828*62c56f98SSadaf Ebrahimix509_verify:"data_files/server8_int-ca2.crt":"data_files/test-ca.crt":"data_files/crl-ec-sha256.pem":"NULL":0:0:"compat":"NULL"
829*62c56f98SSadaf Ebrahimi
830*62c56f98SSadaf EbrahimiX509 CRT verification #50 (Valid, multiple CAs)
831*62c56f98SSadaf Ebrahimidepends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_RSA_C:MBEDTLS_PKCS1_V15:MBEDTLS_PK_CAN_ECDSA_VERIFY:MBEDTLS_ECP_HAVE_SECP384R1:MBEDTLS_MD_CAN_SHA1:MBEDTLS_MD_CAN_SHA256
832*62c56f98SSadaf Ebrahimix509_verify:"data_files/server2.crt":"data_files/test-ca_cat12.crt":"data_files/crl.pem":"NULL":0:0:"compat":"NULL"
833*62c56f98SSadaf Ebrahimi
834*62c56f98SSadaf EbrahimiX509 CRT verification #51 (Valid, multiple CAs, reverse order)
835*62c56f98SSadaf Ebrahimidepends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_RSA_C:MBEDTLS_PKCS1_V15:MBEDTLS_PK_CAN_ECDSA_VERIFY:MBEDTLS_ECP_HAVE_SECP384R1:MBEDTLS_MD_CAN_SHA1:MBEDTLS_MD_CAN_SHA256
836*62c56f98SSadaf Ebrahimix509_verify:"data_files/server2.crt":"data_files/test-ca_cat21.crt":"data_files/crl.pem":"NULL":0:0:"compat":"NULL"
837*62c56f98SSadaf Ebrahimi
838*62c56f98SSadaf EbrahimiX509 CRT verification #52 (CA keyUsage valid)
839*62c56f98SSadaf Ebrahimidepends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_PK_CAN_ECDSA_VERIFY:MBEDTLS_MD_CAN_SHA256:MBEDTLS_ECP_HAVE_SECP256R1:MBEDTLS_ECP_HAVE_SECP384R1
840*62c56f98SSadaf Ebrahimix509_verify:"data_files/server5.crt":"data_files/test-ca2.ku-crt_crl.crt":"data_files/crl-ec-sha256.pem":"NULL":0:0:"compat":"NULL"
841*62c56f98SSadaf Ebrahimi
842*62c56f98SSadaf EbrahimiX509 CRT verification #53 (CA keyUsage missing cRLSign)
843*62c56f98SSadaf Ebrahimidepends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_PK_CAN_ECDSA_VERIFY:MBEDTLS_MD_CAN_SHA256:MBEDTLS_ECP_HAVE_SECP256R1:MBEDTLS_ECP_HAVE_SECP384R1
844*62c56f98SSadaf Ebrahimix509_verify:"data_files/server5.crt":"data_files/test-ca2.ku-crt.crt":"data_files/crl-ec-sha256.pem":"NULL":MBEDTLS_ERR_X509_CERT_VERIFY_FAILED:MBEDTLS_X509_BADCRL_NOT_TRUSTED:"compat":"NULL"
845*62c56f98SSadaf Ebrahimi
846*62c56f98SSadaf EbrahimiX509 CRT verification #54 (CA keyUsage missing cRLSign, no CRL)
847*62c56f98SSadaf Ebrahimidepends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_PK_CAN_ECDSA_VERIFY:MBEDTLS_MD_CAN_SHA256:MBEDTLS_ECP_HAVE_SECP256R1:MBEDTLS_ECP_HAVE_SECP384R1:MBEDTLS_MD_CAN_SHA1:MBEDTLS_RSA_C
848*62c56f98SSadaf Ebrahimix509_verify:"data_files/server5.crt":"data_files/test-ca2.ku-crt.crt":"data_files/crl.pem":"NULL":0:0:"compat":"NULL"
849*62c56f98SSadaf Ebrahimi
850*62c56f98SSadaf EbrahimiX509 CRT verification #55 (CA keyUsage missing keyCertSign)
851*62c56f98SSadaf Ebrahimidepends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_PK_CAN_ECDSA_VERIFY:MBEDTLS_MD_CAN_SHA256:MBEDTLS_ECP_HAVE_SECP256R1:MBEDTLS_ECP_HAVE_SECP384R1
852*62c56f98SSadaf Ebrahimix509_verify:"data_files/server5.crt":"data_files/test-ca2.ku-crl.crt":"data_files/crl-ec-sha256.pem":"NULL":MBEDTLS_ERR_X509_CERT_VERIFY_FAILED:MBEDTLS_X509_BADCERT_NOT_TRUSTED:"compat":"NULL"
853*62c56f98SSadaf Ebrahimi
854*62c56f98SSadaf EbrahimiX509 CRT verification #56 (CA keyUsage plain wrong)
855*62c56f98SSadaf Ebrahimidepends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_PK_CAN_ECDSA_VERIFY:MBEDTLS_MD_CAN_SHA256:MBEDTLS_ECP_HAVE_SECP256R1:MBEDTLS_ECP_HAVE_SECP384R1
856*62c56f98SSadaf Ebrahimix509_verify:"data_files/server5.crt":"data_files/test-ca2.ku-ds.crt":"data_files/crl-ec-sha256.pem":"NULL":MBEDTLS_ERR_X509_CERT_VERIFY_FAILED:MBEDTLS_X509_BADCERT_NOT_TRUSTED:"compat":"NULL"
857*62c56f98SSadaf Ebrahimi
858*62c56f98SSadaf EbrahimiX509 CRT verification #57 (Valid, RSASSA-PSS, SHA-1)
859*62c56f98SSadaf Ebrahimidepends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_X509_RSASSA_PSS_SUPPORT:MBEDTLS_MD_CAN_SHA1:MBEDTLS_PKCS1_V15
860*62c56f98SSadaf Ebrahimix509_verify:"data_files/server9.crt":"data_files/test-ca.crt":"data_files/crl.pem":"NULL":0:0:"compat":"NULL"
861*62c56f98SSadaf Ebrahimi
862*62c56f98SSadaf EbrahimiX509 CRT verification #58 (Valid, RSASSA-PSS, SHA-224)
863*62c56f98SSadaf Ebrahimidepends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_X509_RSASSA_PSS_SUPPORT:MBEDTLS_MD_CAN_SHA224:MBEDTLS_MD_CAN_SHA1
864*62c56f98SSadaf Ebrahimix509_verify:"data_files/server9-sha224.crt":"data_files/test-ca.crt":"data_files/crl-rsa-pss-sha224.pem":"NULL":0:0:"compat":"NULL"
865*62c56f98SSadaf Ebrahimi
866*62c56f98SSadaf EbrahimiX509 CRT verification #59 (Valid, RSASSA-PSS, SHA-256)
867*62c56f98SSadaf Ebrahimidepends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_X509_RSASSA_PSS_SUPPORT:MBEDTLS_MD_CAN_SHA256:MBEDTLS_MD_CAN_SHA1
868*62c56f98SSadaf Ebrahimix509_verify:"data_files/server9-sha256.crt":"data_files/test-ca.crt":"data_files/crl-rsa-pss-sha256.pem":"NULL":0:0:"compat":"NULL"
869*62c56f98SSadaf Ebrahimi
870*62c56f98SSadaf EbrahimiX509 CRT verification #60 (Valid, RSASSA-PSS, SHA-384)
871*62c56f98SSadaf Ebrahimidepends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_X509_RSASSA_PSS_SUPPORT:MBEDTLS_MD_CAN_SHA384:MBEDTLS_MD_CAN_SHA1
872*62c56f98SSadaf Ebrahimix509_verify:"data_files/server9-sha384.crt":"data_files/test-ca.crt":"data_files/crl-rsa-pss-sha384.pem":"NULL":0:0:"compat":"NULL"
873*62c56f98SSadaf Ebrahimi
874*62c56f98SSadaf EbrahimiX509 CRT verification #61 (Valid, RSASSA-PSS, SHA-512)
875*62c56f98SSadaf Ebrahimidepends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_X509_RSASSA_PSS_SUPPORT:MBEDTLS_MD_CAN_SHA512:MBEDTLS_MD_CAN_SHA1
876*62c56f98SSadaf Ebrahimix509_verify:"data_files/server9-sha512.crt":"data_files/test-ca.crt":"data_files/crl-rsa-pss-sha512.pem":"NULL":0:0:"compat":"NULL"
877*62c56f98SSadaf Ebrahimi
878*62c56f98SSadaf EbrahimiX509 CRT verification #62 (Revoked, RSASSA-PSS, SHA-1)
879*62c56f98SSadaf Ebrahimidepends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_X509_RSASSA_PSS_SUPPORT:MBEDTLS_MD_CAN_SHA1:MBEDTLS_HAVE_TIME_DATE
880*62c56f98SSadaf Ebrahimix509_verify:"data_files/server9.crt":"data_files/test-ca.crt":"data_files/crl-rsa-pss-sha1.pem":"NULL":MBEDTLS_ERR_X509_CERT_VERIFY_FAILED:MBEDTLS_X509_BADCERT_REVOKED:"compat":"NULL"
881*62c56f98SSadaf Ebrahimi
882*62c56f98SSadaf EbrahimiX509 CRT verification #63 (Revoked, RSASSA-PSS, SHA-1, CRL badsign)
883*62c56f98SSadaf Ebrahimidepends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_X509_RSASSA_PSS_SUPPORT:MBEDTLS_MD_CAN_SHA1
884*62c56f98SSadaf Ebrahimix509_verify:"data_files/server9.crt":"data_files/test-ca.crt":"data_files/crl-rsa-pss-sha1-badsign.pem":"NULL":MBEDTLS_ERR_X509_CERT_VERIFY_FAILED:MBEDTLS_X509_BADCRL_NOT_TRUSTED:"compat":"NULL"
885*62c56f98SSadaf Ebrahimi
886*62c56f98SSadaf EbrahimiX509 CRT verification #64 (Valid, RSASSA-PSS, SHA-1, not top)
887*62c56f98SSadaf Ebrahimidepends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_X509_RSASSA_PSS_SUPPORT:MBEDTLS_MD_CAN_SHA1:MBEDTLS_RSA_C:MBEDTLS_PKCS1_V15
888*62c56f98SSadaf Ebrahimix509_verify:"data_files/server9-with-ca.crt":"data_files/test-ca.crt":"data_files/crl.pem":"NULL":0:0:"compat":"NULL"
889*62c56f98SSadaf Ebrahimi
890*62c56f98SSadaf EbrahimiX509 CRT verification #65 (RSASSA-PSS, SHA1, bad cert signature)
891*62c56f98SSadaf Ebrahimidepends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_X509_RSASSA_PSS_SUPPORT:MBEDTLS_MD_CAN_SHA1
892*62c56f98SSadaf Ebrahimix509_verify:"data_files/server9-badsign.crt":"data_files/test-ca.crt":"data_files/crl.pem":"NULL":MBEDTLS_ERR_X509_CERT_VERIFY_FAILED:MBEDTLS_X509_BADCERT_NOT_TRUSTED:"compat":"NULL"
893*62c56f98SSadaf Ebrahimi
894*62c56f98SSadaf EbrahimiX509 CRT verification #66 (RSASSA-PSS, SHA1, no RSA CA)
895*62c56f98SSadaf Ebrahimidepends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_X509_RSASSA_PSS_SUPPORT:MBEDTLS_MD_CAN_SHA1:MBEDTLS_PK_CAN_ECDSA_VERIFY:MBEDTLS_ECP_HAVE_SECP384R1:MBEDTLS_MD_CAN_SHA256
896*62c56f98SSadaf Ebrahimix509_verify:"data_files/server9.crt":"data_files/test-ca2.crt":"data_files/crl.pem":"NULL":MBEDTLS_ERR_X509_CERT_VERIFY_FAILED:MBEDTLS_X509_BADCERT_NOT_TRUSTED:"compat":"NULL"
897*62c56f98SSadaf Ebrahimi
898*62c56f98SSadaf EbrahimiX509 CRT verification #67 (Valid, RSASSA-PSS, all defaults)
899*62c56f98SSadaf Ebrahimidepends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_X509_RSASSA_PSS_SUPPORT:MBEDTLS_MD_CAN_SHA1
900*62c56f98SSadaf Ebrahimix509_verify:"data_files/server9-defaults.crt":"data_files/test-ca.crt":"data_files/crl-rsa-pss-sha1.pem":"NULL":0:0:"compat":"NULL"
901*62c56f98SSadaf Ebrahimi
902*62c56f98SSadaf EbrahimiX509 CRT verification #68 (RSASSA-PSS, wrong salt_len, !USE_PSA)
903*62c56f98SSadaf Ebrahimidepends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_X509_RSASSA_PSS_SUPPORT:MBEDTLS_MD_CAN_SHA256:MBEDTLS_MD_CAN_SHA1:!MBEDTLS_USE_PSA_CRYPTO
904*62c56f98SSadaf Ebrahimix509_verify:"data_files/server9-bad-saltlen.crt":"data_files/test-ca.crt":"data_files/crl-rsa-pss-sha1.pem":"NULL":MBEDTLS_ERR_X509_CERT_VERIFY_FAILED:MBEDTLS_X509_BADCERT_NOT_TRUSTED:"compat":"NULL"
905*62c56f98SSadaf Ebrahimi
906*62c56f98SSadaf EbrahimiX509 CRT verification #68 (RSASSA-PSS, wrong salt_len, USE_PSA)
907*62c56f98SSadaf Ebrahimidepends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_X509_RSASSA_PSS_SUPPORT:MBEDTLS_MD_CAN_SHA256:MBEDTLS_MD_CAN_SHA1:MBEDTLS_USE_PSA_CRYPTO
908*62c56f98SSadaf Ebrahimix509_verify:"data_files/server9-bad-saltlen.crt":"data_files/test-ca.crt":"data_files/crl-rsa-pss-sha1.pem":"NULL":0:0:"compat":"NULL"
909*62c56f98SSadaf Ebrahimi
910*62c56f98SSadaf EbrahimiX509 CRT verification #69 (RSASSA-PSS, wrong mgf_hash)
911*62c56f98SSadaf Ebrahimidepends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_X509_RSASSA_PSS_SUPPORT:MBEDTLS_MD_CAN_SHA256:MBEDTLS_MD_CAN_SHA224:MBEDTLS_MD_CAN_SHA1
912*62c56f98SSadaf Ebrahimix509_verify:"data_files/server9-bad-mgfhash.crt":"data_files/test-ca.crt":"data_files/crl.pem":"NULL":MBEDTLS_ERR_X509_CERT_VERIFY_FAILED:MBEDTLS_X509_BADCERT_NOT_TRUSTED:"compat":"NULL"
913*62c56f98SSadaf Ebrahimi
914*62c56f98SSadaf EbrahimiX509 CRT verification #70 (v1 trusted CA)
915*62c56f98SSadaf Ebrahimidepends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_RSA_C:MBEDTLS_PKCS1_V15:MBEDTLS_MD_CAN_SHA256:MBEDTLS_MD_CAN_SHA1
916*62c56f98SSadaf Ebrahimix509_verify:"data_files/server1-v1.crt":"data_files/test-ca-v1.crt":"data_files/crl.pem":"NULL":0:0:"compat":"NULL"
917*62c56f98SSadaf Ebrahimi
918*62c56f98SSadaf EbrahimiX509 CRT verification #71 (v1 trusted CA, other)
919*62c56f98SSadaf Ebrahimidepends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_RSA_C:MBEDTLS_PKCS1_V15:MBEDTLS_MD_CAN_SHA256:MBEDTLS_MD_CAN_SHA1
920*62c56f98SSadaf Ebrahimix509_verify:"data_files/server2-v1.crt":"data_files/server1-v1.crt":"data_files/crl.pem":"NULL":0:0:"compat":"NULL"
921*62c56f98SSadaf Ebrahimi
922*62c56f98SSadaf EbrahimiX509 CRT verification #72 (v1 chain)
923*62c56f98SSadaf Ebrahimidepends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_RSA_C:MBEDTLS_PKCS1_V15:MBEDTLS_MD_CAN_SHA256:MBEDTLS_MD_CAN_SHA1
924*62c56f98SSadaf Ebrahimix509_verify:"data_files/server2-v1-chain.crt":"data_files/test-ca-v1.crt":"data_files/crl.pem":"NULL":MBEDTLS_ERR_X509_CERT_VERIFY_FAILED:MBEDTLS_X509_BADCERT_NOT_TRUSTED:"compat":"NULL"
925*62c56f98SSadaf Ebrahimi
926*62c56f98SSadaf EbrahimiX509 CRT verification #73 (selfsigned trusted without CA bit)
927*62c56f98SSadaf Ebrahimidepends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_PK_CAN_ECDSA_VERIFY:MBEDTLS_MD_CAN_SHA256:MBEDTLS_ECP_HAVE_SECP256R1:MBEDTLS_MD_CAN_SHA1:MBEDTLS_RSA_C
928*62c56f98SSadaf Ebrahimix509_verify:"data_files/server5-selfsigned.crt":"data_files/server5-selfsigned.crt":"data_files/crl.pem":"NULL":0:0:"compat":"NULL"
929*62c56f98SSadaf Ebrahimi
930*62c56f98SSadaf EbrahimiX509 CRT verification #74 (signed by selfsigned trusted without CA bit)
931*62c56f98SSadaf Ebrahimidepends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_PK_CAN_ECDSA_VERIFY:MBEDTLS_MD_CAN_SHA256:MBEDTLS_ECP_HAVE_SECP256R1:MBEDTLS_MD_CAN_SHA1:MBEDTLS_RSA_C
932*62c56f98SSadaf Ebrahimix509_verify:"data_files/server6-ss-child.crt":"data_files/server5-selfsigned.crt":"data_files/crl.pem":"NULL":MBEDTLS_ERR_X509_CERT_VERIFY_FAILED:MBEDTLS_X509_BADCERT_NOT_TRUSTED:"compat":"NULL"
933*62c56f98SSadaf Ebrahimi
934*62c56f98SSadaf EbrahimiX509 CRT verification #75 (encoding mismatch)
935*62c56f98SSadaf Ebrahimidepends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_MD_CAN_SHA1:MBEDTLS_RSA_C:MBEDTLS_PKCS1_V15
936*62c56f98SSadaf Ebrahimix509_verify:"data_files/enco-cert-utf8str.pem":"data_files/enco-ca-prstr.pem":"data_files/crl.pem":"NULL":0:0:"compat":"NULL"
937*62c56f98SSadaf Ebrahimi
938*62c56f98SSadaf EbrahimiX509 CRT verification #76 (multiple CRLs, not revoked)
939*62c56f98SSadaf Ebrahimidepends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_PK_CAN_ECDSA_VERIFY:MBEDTLS_ECP_HAVE_SECP384R1:MBEDTLS_ECP_HAVE_SECP256R1:MBEDTLS_MD_CAN_SHA256:MBEDTLS_RSA_C:MBEDTLS_MD_CAN_SHA1
940*62c56f98SSadaf Ebrahimix509_verify:"data_files/server5.crt":"data_files/test-ca_cat12.crt":"data_files/crl_cat_ec-rsa.pem":"NULL":0:0:"compat":"NULL"
941*62c56f98SSadaf Ebrahimi
942*62c56f98SSadaf EbrahimiX509 CRT verification #77 (multiple CRLs, revoked)
943*62c56f98SSadaf Ebrahimidepends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_PK_CAN_ECDSA_VERIFY:MBEDTLS_ECP_HAVE_SECP384R1:MBEDTLS_ECP_HAVE_SECP256R1:MBEDTLS_MD_CAN_SHA256:MBEDTLS_RSA_C:MBEDTLS_MD_CAN_SHA1:MBEDTLS_HAVE_TIME_DATE
944*62c56f98SSadaf Ebrahimix509_verify:"data_files/server6.crt":"data_files/test-ca_cat12.crt":"data_files/crl_cat_ec-rsa.pem":"NULL":MBEDTLS_ERR_X509_CERT_VERIFY_FAILED:MBEDTLS_X509_BADCERT_REVOKED:"compat":"NULL"
945*62c56f98SSadaf Ebrahimi
946*62c56f98SSadaf EbrahimiX509 CRT verification #78 (multiple CRLs, revoked by second)
947*62c56f98SSadaf Ebrahimidepends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_PK_CAN_ECDSA_VERIFY:MBEDTLS_ECP_HAVE_SECP384R1:MBEDTLS_ECP_HAVE_SECP256R1:MBEDTLS_MD_CAN_SHA256:MBEDTLS_RSA_C:MBEDTLS_MD_CAN_SHA1:MBEDTLS_HAVE_TIME_DATE
948*62c56f98SSadaf Ebrahimix509_verify:"data_files/server6.crt":"data_files/test-ca_cat12.crt":"data_files/crl_cat_rsa-ec.pem":"NULL":MBEDTLS_ERR_X509_CERT_VERIFY_FAILED:MBEDTLS_X509_BADCERT_REVOKED:"compat":"NULL"
949*62c56f98SSadaf Ebrahimi
950*62c56f98SSadaf EbrahimiX509 CRT verification #79 (multiple CRLs, revoked by future)
951*62c56f98SSadaf Ebrahimidepends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_PK_CAN_ECDSA_VERIFY:MBEDTLS_ECP_HAVE_SECP384R1:MBEDTLS_ECP_HAVE_SECP256R1:MBEDTLS_MD_CAN_SHA256:MBEDTLS_RSA_C:MBEDTLS_MD_CAN_SHA1:MBEDTLS_HAVE_TIME_DATE
952*62c56f98SSadaf Ebrahimix509_verify:"data_files/server6.crt":"data_files/test-ca_cat12.crt":"data_files/crl_cat_ecfut-rsa.pem":"NULL":MBEDTLS_ERR_X509_CERT_VERIFY_FAILED:MBEDTLS_X509_BADCERT_REVOKED|MBEDTLS_X509_BADCRL_FUTURE:"compat":"NULL"
953*62c56f98SSadaf Ebrahimi
954*62c56f98SSadaf EbrahimiX509 CRT verification #80 (multiple CRLs, first future, revoked by second)
955*62c56f98SSadaf Ebrahimidepends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_PK_CAN_ECDSA_VERIFY:MBEDTLS_ECP_HAVE_SECP384R1:MBEDTLS_ECP_HAVE_SECP256R1:MBEDTLS_MD_CAN_SHA256:MBEDTLS_RSA_C:MBEDTLS_PKCS1_V15:MBEDTLS_MD_CAN_SHA1:MBEDTLS_HAVE_TIME_DATE
956*62c56f98SSadaf Ebrahimix509_verify:"data_files/server1.crt":"data_files/test-ca_cat12.crt":"data_files/crl_cat_ecfut-rsa.pem":"NULL":MBEDTLS_ERR_X509_CERT_VERIFY_FAILED:MBEDTLS_X509_BADCERT_REVOKED:"compat":"NULL"
957*62c56f98SSadaf Ebrahimi
958*62c56f98SSadaf EbrahimiX509 CRT verification #81 (multiple CRLs, none relevant)
959*62c56f98SSadaf Ebrahimidepends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_PK_CAN_ECDSA_VERIFY:MBEDTLS_ECP_HAVE_SECP384R1:MBEDTLS_ECP_HAVE_SECP256R1:MBEDTLS_MD_CAN_SHA256:MBEDTLS_RSA_C:MBEDTLS_PKCS1_V15:MBEDTLS_MD_CAN_SHA1
960*62c56f98SSadaf Ebrahimix509_verify:"data_files/enco-cert-utf8str.pem":"data_files/enco-ca-prstr.pem":"data_files/crl_cat_rsa-ec.pem":"NULL":0:0:"compat":"NULL"
961*62c56f98SSadaf Ebrahimi
962*62c56f98SSadaf EbrahimiX509 CRT verification #82 (Not yet valid CA and valid CA)
963*62c56f98SSadaf Ebrahimidepends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_PK_CAN_ECDSA_VERIFY:MBEDTLS_ECP_HAVE_SECP256R1:MBEDTLS_ECP_HAVE_SECP384R1:MBEDTLS_MD_CAN_SHA1:MBEDTLS_MD_CAN_SHA256
964*62c56f98SSadaf Ebrahimix509_verify:"data_files/server5.crt":"data_files/test-ca2_cat-future-present.crt":"data_files/crl-ec-sha1.pem":"NULL":0:0:"compat":"NULL"
965*62c56f98SSadaf Ebrahimi
966*62c56f98SSadaf EbrahimiX509 CRT verification #83 (valid CA and Not yet valid CA)
967*62c56f98SSadaf Ebrahimidepends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_PK_CAN_ECDSA_VERIFY:MBEDTLS_ECP_HAVE_SECP256R1:MBEDTLS_ECP_HAVE_SECP384R1:MBEDTLS_MD_CAN_SHA1:MBEDTLS_MD_CAN_SHA256
968*62c56f98SSadaf Ebrahimix509_verify:"data_files/server5.crt":"data_files/test-ca2_cat-present-future.crt":"data_files/crl-ec-sha1.pem":"NULL":0:0:"compat":"NULL"
969*62c56f98SSadaf Ebrahimi
970*62c56f98SSadaf EbrahimiX509 CRT verification #84 (valid CA and Not yet valid CA)
971*62c56f98SSadaf Ebrahimidepends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_PK_CAN_ECDSA_VERIFY:MBEDTLS_ECP_HAVE_SECP256R1:MBEDTLS_ECP_HAVE_SECP384R1:MBEDTLS_MD_CAN_SHA1:MBEDTLS_MD_CAN_SHA256
972*62c56f98SSadaf Ebrahimix509_verify:"data_files/server5.crt":"data_files/test-ca2_cat-present-past.crt":"data_files/crl-ec-sha1.pem":"NULL":0:0:"compat":"NULL"
973*62c56f98SSadaf Ebrahimi
974*62c56f98SSadaf EbrahimiX509 CRT verification #85 (Not yet valid CA and valid CA)
975*62c56f98SSadaf Ebrahimidepends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_PK_CAN_ECDSA_VERIFY:MBEDTLS_ECP_HAVE_SECP256R1:MBEDTLS_ECP_HAVE_SECP384R1:MBEDTLS_MD_CAN_SHA1:MBEDTLS_MD_CAN_SHA256
976*62c56f98SSadaf Ebrahimix509_verify:"data_files/server5.crt":"data_files/test-ca2_cat-past-present.crt":"data_files/crl-ec-sha1.pem":"NULL":0:0:"compat":"NULL"
977*62c56f98SSadaf Ebrahimi
978*62c56f98SSadaf EbrahimiX509 CRT verification #86 (Not yet valid CA and invalid CA)
979*62c56f98SSadaf Ebrahimidepends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_PK_CAN_ECDSA_VERIFY:MBEDTLS_ECP_HAVE_SECP256R1:MBEDTLS_ECP_HAVE_SECP384R1:MBEDTLS_MD_CAN_SHA1:MBEDTLS_MD_CAN_SHA256:MBEDTLS_HAVE_TIME_DATE
980*62c56f98SSadaf Ebrahimix509_verify:"data_files/server5.crt":"data_files/test-ca2_cat-future-invalid.crt":"data_files/crl-ec-sha1.pem":"NULL":MBEDTLS_ERR_X509_CERT_VERIFY_FAILED:MBEDTLS_X509_BADCERT_FUTURE:"compat":"NULL"
981*62c56f98SSadaf Ebrahimi
982*62c56f98SSadaf EbrahimiX509 CRT verification #87 (Expired CA and invalid CA)
983*62c56f98SSadaf Ebrahimidepends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_PK_CAN_ECDSA_VERIFY:MBEDTLS_ECP_HAVE_SECP256R1:MBEDTLS_ECP_HAVE_SECP384R1:MBEDTLS_MD_CAN_SHA1:MBEDTLS_MD_CAN_SHA256:MBEDTLS_HAVE_TIME_DATE
984*62c56f98SSadaf Ebrahimix509_verify:"data_files/server5.crt":"data_files/test-ca2_cat-past-invalid.crt":"data_files/crl-ec-sha1.pem":"NULL":MBEDTLS_ERR_X509_CERT_VERIFY_FAILED:MBEDTLS_X509_BADCERT_EXPIRED:"compat":"NULL"
985*62c56f98SSadaf Ebrahimi
986*62c56f98SSadaf EbrahimiX509 CRT verification #88 (Spurious cert in the chain)
987*62c56f98SSadaf Ebrahimidepends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_PK_CAN_ECDSA_VERIFY:MBEDTLS_ECP_HAVE_SECP256R1:MBEDTLS_ECP_HAVE_SECP384R1:MBEDTLS_MD_CAN_SHA1:MBEDTLS_MD_CAN_SHA256:MBEDTLS_RSA_C:MBEDTLS_PKCS1_V15
988*62c56f98SSadaf Ebrahimix509_verify:"data_files/server7_spurious_int-ca.crt":"data_files/test-ca2.crt":"data_files/crl-ec-sha1.pem":"NULL":0:0:"compat":"NULL"
989*62c56f98SSadaf Ebrahimi
990*62c56f98SSadaf EbrahimiX509 CRT verification #89 (Spurious cert later in the chain)
991*62c56f98SSadaf Ebrahimidepends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_PK_CAN_ECDSA_VERIFY:MBEDTLS_ECP_HAVE_SECP256R1:MBEDTLS_ECP_HAVE_SECP384R1:MBEDTLS_MD_CAN_SHA1:MBEDTLS_MD_CAN_SHA256:MBEDTLS_RSA_C:MBEDTLS_PKCS1_V15
992*62c56f98SSadaf Ebrahimix509_verify:"data_files/server10_int3_spurious_int-ca2.crt":"data_files/test-ca.crt":"data_files/crl-ec-sha1.pem":"NULL":0:0:"compat":"NULL"
993*62c56f98SSadaf Ebrahimi
994*62c56f98SSadaf EbrahimiX509 CRT verification #90 (EE with same name as trusted root)
995*62c56f98SSadaf Ebrahimidepends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_PK_CAN_ECDSA_VERIFY:MBEDTLS_ECP_HAVE_SECP256R1:MBEDTLS_MD_CAN_SHA256:MBEDTLS_MD_CAN_SHA1
996*62c56f98SSadaf Ebrahimix509_verify:"data_files/server5-ss-forgeca.crt":"data_files/test-int-ca3.crt":"data_files/crl-ec-sha1.pem":"NULL":MBEDTLS_ERR_X509_CERT_VERIFY_FAILED:MBEDTLS_X509_BADCERT_NOT_TRUSTED:"":"NULL"
997*62c56f98SSadaf Ebrahimi
998*62c56f98SSadaf EbrahimiX509 CRT verification #91 (same CA with good then bad key)
999*62c56f98SSadaf Ebrahimidepends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_MD_CAN_SHA1:MBEDTLS_RSA_C:MBEDTLS_PKCS1_V15:MBEDTLS_MD_CAN_SHA256:MBEDTLS_PK_CAN_ECDSA_VERIFY
1000*62c56f98SSadaf Ebrahimix509_verify:"data_files/server1.crt":"data_files/test-ca-good-alt.crt":"data_files/crl-ec-sha256.pem":"NULL":0:0:"compat":"NULL"
1001*62c56f98SSadaf Ebrahimi
1002*62c56f98SSadaf EbrahimiX509 CRT verification #91 (same CA with bad then good key)
1003*62c56f98SSadaf Ebrahimidepends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_MD_CAN_SHA1:MBEDTLS_RSA_C:MBEDTLS_PKCS1_V15:MBEDTLS_MD_CAN_SHA256:MBEDTLS_PK_CAN_ECDSA_VERIFY
1004*62c56f98SSadaf Ebrahimix509_verify:"data_files/server1.crt":"data_files/test-ca-alt-good.crt":"data_files/crl-ec-sha256.pem":"NULL":0:0:"compat":"NULL"
1005*62c56f98SSadaf Ebrahimi
1006*62c56f98SSadaf EbrahimiX509 CRT verification #92 (bad name, allowing callback)
1007*62c56f98SSadaf Ebrahimidepends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_PK_CAN_ECDSA_VERIFY:MBEDTLS_MD_CAN_SHA256:MBEDTLS_ECP_HAVE_SECP256R1:MBEDTLS_ECP_HAVE_SECP384R1
1008*62c56f98SSadaf Ebrahimix509_verify:"data_files/server5.crt":"data_files/test-ca2.crt":"data_files/crl-ec-sha256.pem":"globalhost":0:0:"":"verify_all"
1009*62c56f98SSadaf Ebrahimi
1010*62c56f98SSadaf EbrahimiX509 CRT verification #93 (Suite B invalid, EC cert, RSA CA)
1011*62c56f98SSadaf Ebrahimidepends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_RSA_C:MBEDTLS_PK_CAN_ECDSA_VERIFY:MBEDTLS_ECP_HAVE_SECP192R1:MBEDTLS_PKCS1_V15:MBEDTLS_MD_CAN_SHA1
1012*62c56f98SSadaf Ebrahimix509_verify:"data_files/server3.crt":"data_files/test-ca.crt":"data_files/crl.pem":"NULL":MBEDTLS_ERR_X509_CERT_VERIFY_FAILED:MBEDTLS_X509_BADCERT_BAD_MD|MBEDTLS_X509_BADCERT_BAD_PK|MBEDTLS_X509_BADCERT_BAD_KEY|MBEDTLS_X509_BADCRL_BAD_MD|MBEDTLS_X509_BADCRL_BAD_PK:"suite_b":"NULL"
1013*62c56f98SSadaf Ebrahimi
1014*62c56f98SSadaf EbrahimiX509 CRT verification #94 (Suite B invalid, RSA cert, EC CA)
1015*62c56f98SSadaf Ebrahimidepends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_RSA_C:MBEDTLS_PK_CAN_ECDSA_VERIFY:MBEDTLS_MD_CAN_SHA256:MBEDTLS_ECP_HAVE_SECP256R1:MBEDTLS_PKCS1_V15:MBEDTLS_ECP_HAVE_SECP384R1
1016*62c56f98SSadaf Ebrahimix509_verify:"data_files/server4.crt":"data_files/test-ca2.crt":"data_files/crl-ec-sha256.pem":"NULL":MBEDTLS_ERR_X509_CERT_VERIFY_FAILED:MBEDTLS_X509_BADCERT_BAD_PK:"suite_b":"NULL"
1017*62c56f98SSadaf Ebrahimi
1018*62c56f98SSadaf EbrahimiX509 CRT verification #95 (Suite B Valid, EC cert, EC CA)
1019*62c56f98SSadaf Ebrahimidepends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_PK_CAN_ECDSA_VERIFY:MBEDTLS_MD_CAN_SHA256:MBEDTLS_ECP_HAVE_SECP256R1:MBEDTLS_ECP_HAVE_SECP384R1
1020*62c56f98SSadaf Ebrahimix509_verify:"data_files/server5.crt":"data_files/test-ca2.crt":"data_files/crl-ec-sha256.pem":"NULL":0:0:"suite_b":"NULL"
1021*62c56f98SSadaf Ebrahimi
1022*62c56f98SSadaf EbrahimiX509 CRT verification #96 (next profile Invalid Cert SHA224 Digest)
1023*62c56f98SSadaf Ebrahimidepends_on:MBEDTLS_MD_CAN_SHA224:MBEDTLS_PEM_PARSE_C:MBEDTLS_RSA_C:MBEDTLS_PKCS1_V15:MBEDTLS_MD_CAN_SHA1
1024*62c56f98SSadaf Ebrahimix509_verify:"data_files/cert_sha224.crt":"data_files/test-ca.crt":"data_files/crl.pem":"NULL":MBEDTLS_ERR_X509_CERT_VERIFY_FAILED:MBEDTLS_X509_BADCERT_BAD_MD|MBEDTLS_X509_BADCRL_BAD_MD:"next":"NULL"
1025*62c56f98SSadaf Ebrahimi
1026*62c56f98SSadaf EbrahimiX509 CRT verification #97 (next profile Valid Cert SHA256 Digest)
1027*62c56f98SSadaf Ebrahimidepends_on:MBEDTLS_MD_CAN_SHA256:MBEDTLS_PEM_PARSE_C:MBEDTLS_RSA_C:MBEDTLS_PKCS1_V15:MBEDTLS_PK_CAN_ECDSA_VERIFY:MBEDTLS_MD_CAN_SHA1
1028*62c56f98SSadaf Ebrahimix509_verify:"data_files/cert_sha256.crt":"data_files/test-ca.crt":"data_files/crl-ec-sha256.pem":"NULL":0:0:"next":"NULL"
1029*62c56f98SSadaf Ebrahimi
1030*62c56f98SSadaf EbrahimiX509 CRT verification #98 (Revoked Cert, revocation date in the future, _with_ MBEDTLS_HAVE_TIME_DATE)
1031*62c56f98SSadaf Ebrahimidepends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_MD_CAN_SHA1:MBEDTLS_RSA_C:MBEDTLS_PKCS1_V15:MBEDTLS_HAVE_TIME_DATE
1032*62c56f98SSadaf Ebrahimix509_verify:"data_files/server1.crt":"data_files/test-ca.crt":"data_files/crl-futureRevocationDate.pem":"NULL":MBEDTLS_ERR_X509_CERT_VERIFY_FAILED:MBEDTLS_X509_BADCERT_REVOKED|MBEDTLS_X509_BADCRL_FUTURE:"compat":"NULL"
1033*62c56f98SSadaf Ebrahimi
1034*62c56f98SSadaf EbrahimiX509 CRT verification #99 (Revoked Cert, revocation date in the future, _without_ MBEDTLS_HAVE_TIME_DATE)
1035*62c56f98SSadaf Ebrahimidepends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_MD_CAN_SHA1:MBEDTLS_RSA_C:MBEDTLS_PKCS1_V15:!MBEDTLS_HAVE_TIME_DATE
1036*62c56f98SSadaf Ebrahimix509_verify:"data_files/server1.crt":"data_files/test-ca.crt":"data_files/crl-futureRevocationDate.pem":"NULL":MBEDTLS_ERR_X509_CERT_VERIFY_FAILED:MBEDTLS_X509_BADCERT_REVOKED:"compat":"NULL"
1037*62c56f98SSadaf Ebrahimi
1038*62c56f98SSadaf EbrahimiX509 CRT verification: domain identical to IPv4 in SubjectAltName
1039*62c56f98SSadaf Ebrahimidepends_on:MBEDTLS_PK_CAN_ECDSA_VERIFY:MBEDTLS_MD_CAN_SHA256:MBEDTLS_ECP_HAVE_SECP256R1:MBEDTLS_RSA_C
1040*62c56f98SSadaf Ebrahimix509_verify:"data_files/server5-tricky-ip-san.crt.der":"data_files/server5-tricky-ip-san.crt.der":"data_files/crl_sha256.pem":"abcd":MBEDTLS_ERR_X509_CERT_VERIFY_FAILED:MBEDTLS_X509_BADCERT_CN_MISMATCH:"":"NULL"
1041*62c56f98SSadaf Ebrahimi
1042*62c56f98SSadaf EbrahimiX509 CRT verification: domain identical to IPv6 in SubjectAltName
1043*62c56f98SSadaf Ebrahimidepends_on:MBEDTLS_PK_CAN_ECDSA_VERIFY:MBEDTLS_MD_CAN_SHA256:MBEDTLS_ECP_HAVE_SECP256R1:MBEDTLS_RSA_C
1044*62c56f98SSadaf Ebrahimix509_verify:"data_files/server5-tricky-ip-san.crt.der":"data_files/server5-tricky-ip-san.crt.der":"data_files/crl_sha256.pem":"abcd.example.com":MBEDTLS_ERR_X509_CERT_VERIFY_FAILED:MBEDTLS_X509_BADCERT_CN_MISMATCH:"":"NULL"
1045*62c56f98SSadaf Ebrahimi
1046*62c56f98SSadaf EbrahimiX509 CRT verification: matching IPv4 in SubjectAltName
1047*62c56f98SSadaf Ebrahimidepends_on:MBEDTLS_PK_CAN_ECDSA_SOME:MBEDTLS_MD_CAN_SHA256:MBEDTLS_ECP_HAVE_SECP256R1:MBEDTLS_RSA_C
1048*62c56f98SSadaf Ebrahimix509_verify:"data_files/server5-tricky-ip-san.crt.der":"data_files/server5-tricky-ip-san.crt.der":"data_files/crl_sha256.pem":"97.98.99.100":0:0:"":"NULL"
1049*62c56f98SSadaf Ebrahimi
1050*62c56f98SSadaf EbrahimiX509 CRT verification: mismatching IPv4 in SubjectAltName
1051*62c56f98SSadaf Ebrahimidepends_on:MBEDTLS_PK_CAN_ECDSA_SOME:MBEDTLS_MD_CAN_SHA256:MBEDTLS_ECP_HAVE_SECP256R1:MBEDTLS_RSA_C
1052*62c56f98SSadaf Ebrahimix509_verify:"data_files/server5-tricky-ip-san.crt.der":"data_files/server5-tricky-ip-san.crt.der":"data_files/crl_sha256.pem":"7.8.9.10":MBEDTLS_ERR_X509_CERT_VERIFY_FAILED:MBEDTLS_X509_BADCERT_CN_MISMATCH:"":"NULL"
1053*62c56f98SSadaf Ebrahimi
1054*62c56f98SSadaf EbrahimiX509 CRT verification: IPv4 with trailing data in SubjectAltName
1055*62c56f98SSadaf Ebrahimidepends_on:MBEDTLS_PK_CAN_ECDSA_SOME:MBEDTLS_MD_CAN_SHA256:MBEDTLS_ECP_HAVE_SECP256R1:MBEDTLS_RSA_C
1056*62c56f98SSadaf Ebrahimix509_verify:"data_files/server5-tricky-ip-san.crt.der":"data_files/server5-tricky-ip-san.crt.der":"data_files/crl_sha256.pem":"97.98.99.100?":MBEDTLS_ERR_X509_CERT_VERIFY_FAILED:MBEDTLS_X509_BADCERT_CN_MISMATCH:"":"NULL"
1057*62c56f98SSadaf Ebrahimi
1058*62c56f98SSadaf EbrahimiX509 CRT verification: matching IPv6 in SubjectAltName
1059*62c56f98SSadaf Ebrahimidepends_on:MBEDTLS_PK_CAN_ECDSA_SOME:MBEDTLS_MD_CAN_SHA256:MBEDTLS_ECP_HAVE_SECP256R1:MBEDTLS_RSA_C
1060*62c56f98SSadaf Ebrahimix509_verify:"data_files/server5-tricky-ip-san.crt.der":"data_files/server5-tricky-ip-san.crt.der":"data_files/crl_sha256.pem":"6162\:6364\:2E65\:7861\:6D70\:6C65\:2E63\:6F6D":0:0:"":"NULL"
1061*62c56f98SSadaf Ebrahimi
1062*62c56f98SSadaf EbrahimiX509 CRT verification: mismatching IPv6 in SubjectAltName
1063*62c56f98SSadaf Ebrahimidepends_on:MBEDTLS_PK_CAN_ECDSA_SOME:MBEDTLS_MD_CAN_SHA256:MBEDTLS_ECP_HAVE_SECP256R1:MBEDTLS_RSA_C
1064*62c56f98SSadaf Ebrahimix509_verify:"data_files/server5-tricky-ip-san.crt.der":"data_files/server5-tricky-ip-san.crt.der":"data_files/crl_sha256.pem":"6162\:6364\:\:6F6D":MBEDTLS_ERR_X509_CERT_VERIFY_FAILED:MBEDTLS_X509_BADCERT_CN_MISMATCH:"":"NULL"
1065*62c56f98SSadaf Ebrahimi
1066*62c56f98SSadaf EbrahimiX509 CRT verification: matching URI in SubjectAltName
1067*62c56f98SSadaf Ebrahimidepends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_PK_CAN_ECDSA_SOME:MBEDTLS_MD_CAN_SHA256:MBEDTLS_ECP_HAVE_SECP256R1:MBEDTLS_RSA_C
1068*62c56f98SSadaf Ebrahimix509_verify:"data_files/rsa_single_san_uri.crt.der":"data_files/rsa_single_san_uri.crt.der":"data_files/crl_sha256.pem":"urn\:example.com\:5ff40f78-9210-494f-8206-c2c082f0609c":0:0:"":"NULL"
1069*62c56f98SSadaf Ebrahimi
1070*62c56f98SSadaf EbrahimiX509 CRT verification: URI with trailing data in SubjectAltName
1071*62c56f98SSadaf Ebrahimidepends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_PK_CAN_ECDSA_SOME:MBEDTLS_MD_CAN_SHA256:MBEDTLS_ECP_HAVE_SECP256R1:MBEDTLS_RSA_C
1072*62c56f98SSadaf Ebrahimix509_verify:"data_files/rsa_single_san_uri.crt.der":"data_files/rsa_single_san_uri.crt.der":"data_files/crl_sha256.pem":"urn\:example.com\:5ff40f78-9210-494f-8206-c2c082f0609cz":MBEDTLS_ERR_X509_CERT_VERIFY_FAILED:MBEDTLS_X509_BADCERT_CN_MISMATCH:"":"NULL"
1073*62c56f98SSadaf Ebrahimi
1074*62c56f98SSadaf EbrahimiX509 CRT verification: URI with preceding data in SubjectAltName
1075*62c56f98SSadaf Ebrahimidepends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_PK_CAN_ECDSA_SOME:MBEDTLS_MD_CAN_SHA256:MBEDTLS_ECP_HAVE_SECP256R1:MBEDTLS_RSA_C
1076*62c56f98SSadaf Ebrahimix509_verify:"data_files/rsa_single_san_uri.crt.der":"data_files/rsa_single_san_uri.crt.der":"data_files/crl_sha256.pem":"zurn\:example.com\:5ff40f78-9210-494f-8206-c2c082f0609c":MBEDTLS_ERR_X509_CERT_VERIFY_FAILED:MBEDTLS_X509_BADCERT_CN_MISMATCH:"":"NULL"
1077*62c56f98SSadaf Ebrahimi
1078*62c56f98SSadaf EbrahimiX509 CRT verification: URI with bad data in SubjectAltName
1079*62c56f98SSadaf Ebrahimidepends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_PK_CAN_ECDSA_SOME:MBEDTLS_MD_CAN_SHA256:MBEDTLS_ECP_HAVE_SECP256R1:MBEDTLS_RSA_C
1080*62c56f98SSadaf Ebrahimix509_verify:"data_files/rsa_single_san_uri.crt.der":"data_files/rsa_single_san_uri.crt.der":"data_files/crl_sha256.pem":"bad\:example.com\:5ff40f78-9210-494f-8206-c2c082f0609c":MBEDTLS_ERR_X509_CERT_VERIFY_FAILED:MBEDTLS_X509_BADCERT_CN_MISMATCH:"":"NULL"
1081*62c56f98SSadaf Ebrahimi
1082*62c56f98SSadaf EbrahimiX509 CRT parse CN: IPv4 valid address
1083*62c56f98SSadaf Ebrahimix509_crt_parse_cn_inet_pton:"10.10.10.10":"0A0A0A0A":4
1084*62c56f98SSadaf Ebrahimi
1085*62c56f98SSadaf EbrahimiX509 CRT parse CN: IPv4 leading zeroes #1
1086*62c56f98SSadaf Ebrahimix509_crt_parse_cn_inet_pton:"010.10.10.10":"":0
1087*62c56f98SSadaf Ebrahimi
1088*62c56f98SSadaf EbrahimiX509 CRT parse CN: IPv4 leading zeroes #2
1089*62c56f98SSadaf Ebrahimix509_crt_parse_cn_inet_pton:"10.10.10.001":"":0
1090*62c56f98SSadaf Ebrahimi
1091*62c56f98SSadaf EbrahimiX509 CRT parse CN: IPv4 excess 0s
1092*62c56f98SSadaf Ebrahimix509_crt_parse_cn_inet_pton:"10.0000.10.10":"":0
1093*62c56f98SSadaf Ebrahimi
1094*62c56f98SSadaf EbrahimiX509 CRT parse CN: IPv4 short address
1095*62c56f98SSadaf Ebrahimix509_crt_parse_cn_inet_pton:"10.10.10":"":0
1096*62c56f98SSadaf Ebrahimi
1097*62c56f98SSadaf EbrahimiX509 CRT parse CN: IPv4 invalid ? char
1098*62c56f98SSadaf Ebrahimix509_crt_parse_cn_inet_pton:"10.10?10.10":"":0
1099*62c56f98SSadaf Ebrahimi
1100*62c56f98SSadaf EbrahimiX509 CRT parse CN: IPv4 invalid - char
1101*62c56f98SSadaf Ebrahimix509_crt_parse_cn_inet_pton:"10.-10.10.10":"":0
1102*62c56f98SSadaf Ebrahimi
1103*62c56f98SSadaf EbrahimiX509 CRT parse CN: IPv4 invalid + char
1104*62c56f98SSadaf Ebrahimix509_crt_parse_cn_inet_pton:"10.+10.10.10":"":0
1105*62c56f98SSadaf Ebrahimi
1106*62c56f98SSadaf EbrahimiX509 CRT parse CN: IPv4 begin dot
1107*62c56f98SSadaf Ebrahimix509_crt_parse_cn_inet_pton:".10.10.10.10":"":0
1108*62c56f98SSadaf Ebrahimi
1109*62c56f98SSadaf EbrahimiX509 CRT parse CN: IPv4 end dot
1110*62c56f98SSadaf Ebrahimix509_crt_parse_cn_inet_pton:"10.10.10.10.":"":0
1111*62c56f98SSadaf Ebrahimi
1112*62c56f98SSadaf EbrahimiX509 CRT parse CN: IPv4 consecutive dots
1113*62c56f98SSadaf Ebrahimix509_crt_parse_cn_inet_pton:"10.10..10.10.":"":0
1114*62c56f98SSadaf Ebrahimi
1115*62c56f98SSadaf EbrahimiX509 CRT parse CN: IPv4 overlarge octet 256
1116*62c56f98SSadaf Ebrahimix509_crt_parse_cn_inet_pton:"10.256.10.10":"":0
1117*62c56f98SSadaf Ebrahimi
1118*62c56f98SSadaf EbrahimiX509 CRT parse CN: IPv4 overlarge octet 999
1119*62c56f98SSadaf Ebrahimix509_crt_parse_cn_inet_pton:"10.10.10.999":"":0
1120*62c56f98SSadaf Ebrahimi
1121*62c56f98SSadaf EbrahimiX509 CRT parse CN: IPv4 overlarge octet 1000
1122*62c56f98SSadaf Ebrahimix509_crt_parse_cn_inet_pton:"10.1000.10.10":"":0
1123*62c56f98SSadaf Ebrahimi
1124*62c56f98SSadaf EbrahimiX509 CRT parse CN: IPv4 additional octet
1125*62c56f98SSadaf Ebrahimix509_crt_parse_cn_inet_pton:"10.10.10.10.10":"":0
1126*62c56f98SSadaf Ebrahimi
1127*62c56f98SSadaf EbrahimiX509 CRT parse CN: IPv6 valid address
1128*62c56f98SSadaf Ebrahimix509_crt_parse_cn_inet_pton:"1\:2\:3\:4\:5\:6\:7\:8":"00010002000300040005000600070008":16
1129*62c56f98SSadaf Ebrahimi
1130*62c56f98SSadaf EbrahimiX509 CRT parse CN: IPv6 valid address shorthand
1131*62c56f98SSadaf Ebrahimix509_crt_parse_cn_inet_pton:"6263\:\:1":"62630000000000000000000000000001":16
1132*62c56f98SSadaf Ebrahimi
1133*62c56f98SSadaf EbrahimiX509 CRT parse CN: IPv6 valid address shorthand start
1134*62c56f98SSadaf Ebrahimix509_crt_parse_cn_inet_pton:"\:\:1":"00000000000000000000000000000001":16
1135*62c56f98SSadaf Ebrahimi
1136*62c56f98SSadaf EbrahimiX509 CRT parse CN: IPv6 valid address extra 0s
1137*62c56f98SSadaf Ebrahimix509_crt_parse_cn_inet_pton:"0001\:\:0001\:0001":"00010000000000000000000000010001":16
1138*62c56f98SSadaf Ebrahimi
1139*62c56f98SSadaf EbrahimiX509 CRT parse CN: IPv6 invalid address excess 0s
1140*62c56f98SSadaf Ebrahimix509_crt_parse_cn_inet_pton:"1\:00000\:1\:0":"":0
1141*62c56f98SSadaf Ebrahimi
1142*62c56f98SSadaf EbrahimiX509 CRT parse CN: IPv6 invalid address - start single colon
1143*62c56f98SSadaf Ebrahimix509_crt_parse_cn_inet_pton:"\:6263\:\:1":"":0
1144*62c56f98SSadaf Ebrahimi
1145*62c56f98SSadaf EbrahimiX509 CRT parse CN: IPv6 invalid address - end single colon
1146*62c56f98SSadaf Ebrahimix509_crt_parse_cn_inet_pton:"6263\:\:1\:":"":0
1147*62c56f98SSadaf Ebrahimi
1148*62c56f98SSadaf EbrahimiX509 CRT parse CN: IPv6 short address
1149*62c56f98SSadaf Ebrahimix509_crt_parse_cn_inet_pton:"1\:1\:1":"":0
1150*62c56f98SSadaf Ebrahimi
1151*62c56f98SSadaf EbrahimiX509 CRT parse CN: IPv6 wildcard address
1152*62c56f98SSadaf Ebrahimix509_crt_parse_cn_inet_pton:"\:\:":"00000000000000000000000000000000":16
1153*62c56f98SSadaf Ebrahimi
1154*62c56f98SSadaf EbrahimiX509 CRT parse CN: IPv6 address too long
1155*62c56f98SSadaf Ebrahimix509_crt_parse_cn_inet_pton:"1\:2\:3\:4\:5\:6\:7\:8\:9":"":0
1156*62c56f98SSadaf Ebrahimi
1157*62c56f98SSadaf EbrahimiX509 CRT parse CN: IPv6 long hextet
1158*62c56f98SSadaf Ebrahimix509_crt_parse_cn_inet_pton:"12345\:\:1":"":0
1159*62c56f98SSadaf Ebrahimi
1160*62c56f98SSadaf EbrahimiX509 CRT parse CN: IPv6 invalid char
1161*62c56f98SSadaf Ebrahimix509_crt_parse_cn_inet_pton:"\:\:\:1":"":0
1162*62c56f98SSadaf Ebrahimi
1163*62c56f98SSadaf EbrahimiX509 CRT parse CN: IPv6 invalid - char
1164*62c56f98SSadaf Ebrahimix509_crt_parse_cn_inet_pton:"\:\:-1\:1":"":0
1165*62c56f98SSadaf Ebrahimi
1166*62c56f98SSadaf EbrahimiX509 CRT parse CN: IPv6 invalid + char
1167*62c56f98SSadaf Ebrahimix509_crt_parse_cn_inet_pton:"\:\:+1\:1":"":0
1168*62c56f98SSadaf Ebrahimi
1169*62c56f98SSadaf EbrahimiX509 CRT parse CN: IPv6 valid address IPv4-mapped
1170*62c56f98SSadaf Ebrahimix509_crt_parse_cn_inet_pton:"\:\:ffff\:1.2.3.4":"00000000000000000000ffff01020304":16
1171*62c56f98SSadaf Ebrahimi
1172*62c56f98SSadaf EbrahimiX509 CRT parse CN: IPv6 invalid address IPv4-mapped #1
1173*62c56f98SSadaf Ebrahimix509_crt_parse_cn_inet_pton:"\:\:ffff\:999.2.3.4":"":0
1174*62c56f98SSadaf Ebrahimi
1175*62c56f98SSadaf EbrahimiX509 CRT parse CN: IPv6 invalid address IPv4-mapped #2
1176*62c56f98SSadaf Ebrahimix509_crt_parse_cn_inet_pton:"\:\:ffff\:1111.2.3.4":"":0
1177*62c56f98SSadaf Ebrahimi
1178*62c56f98SSadaf EbrahimiX509 CRT parse CN: IPv6 invalid address IPv4-mapped #3
1179*62c56f98SSadaf Ebrahimix509_crt_parse_cn_inet_pton:"\:\:1.2.3.4\:ffff":"":0
1180*62c56f98SSadaf Ebrahimi
1181*62c56f98SSadaf EbrahimiX509 CRT verification with ca callback: failure
1182*62c56f98SSadaf Ebrahimidepends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_MD_CAN_SHA1:MBEDTLS_RSA_C:MBEDTLS_PKCS1_V15:MBEDTLS_X509_TRUSTED_CERTIFICATE_CALLBACK
1183*62c56f98SSadaf Ebrahimix509_verify_ca_cb_failure:"data_files/server1.crt":"data_files/test-ca.crt":"NULL":MBEDTLS_ERR_X509_FATAL_ERROR
1184*62c56f98SSadaf Ebrahimi
1185*62c56f98SSadaf EbrahimiX509 CRT verification callback: bad name
1186*62c56f98SSadaf Ebrahimidepends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_PK_CAN_ECDSA_VERIFY:MBEDTLS_MD_CAN_SHA256:MBEDTLS_ECP_HAVE_SECP256R1:MBEDTLS_ECP_HAVE_SECP384R1
1187*62c56f98SSadaf Ebrahimix509_verify_callback:"data_files/server5.crt":"data_files/test-ca2.crt":"globalhost":MBEDTLS_ERR_X509_CERT_VERIFY_FAILED:"depth 1 - serial C1\:43\:E2\:7E\:62\:43\:CC\:E8 - subject C=NL, O=PolarSSL, CN=Polarssl Test EC CA - flags 0x00000000\ndepth 0 - serial 09 - subject C=NL, O=PolarSSL, CN=localhost - flags 0x00000004\n"
1188*62c56f98SSadaf Ebrahimi
1189*62c56f98SSadaf EbrahimiX509 CRT verification callback: trusted EE cert
1190*62c56f98SSadaf Ebrahimidepends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_PK_CAN_ECDSA_VERIFY:MBEDTLS_MD_CAN_SHA256:MBEDTLS_ECP_HAVE_SECP256R1
1191*62c56f98SSadaf Ebrahimix509_verify_callback:"data_files/server5-selfsigned.crt":"data_files/server5-selfsigned.crt":"NULL":0:"depth 0 - serial 53\:A2\:CB\:4B\:12\:4E\:AD\:83\:7D\:A8\:94\:B2 - subject CN=selfsigned, OU=testing, O=PolarSSL, C=NL - flags 0x00000000\n"
1192*62c56f98SSadaf Ebrahimi
1193*62c56f98SSadaf EbrahimiX509 CRT verification callback: trusted EE cert, expired
1194*62c56f98SSadaf Ebrahimidepends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_PK_CAN_ECDSA_VERIFY:MBEDTLS_MD_CAN_SHA256:MBEDTLS_ECP_HAVE_SECP256R1:MBEDTLS_HAVE_TIME_DATE
1195*62c56f98SSadaf Ebrahimix509_verify_callback:"data_files/server5-ss-expired.crt":"data_files/server5-ss-expired.crt":"NULL":MBEDTLS_ERR_X509_CERT_VERIFY_FAILED:"depth 0 - serial D8\:64\:61\:05\:E3\:A3\:CD\:78 - subject C=UK, O=mbed TLS, OU=testsuite, CN=localhost - flags 0x00000001\n"
1196*62c56f98SSadaf Ebrahimi
1197*62c56f98SSadaf EbrahimiX509 CRT verification callback: simple
1198*62c56f98SSadaf Ebrahimidepends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_MD_CAN_SHA1:MBEDTLS_RSA_C:MBEDTLS_PKCS1_V15
1199*62c56f98SSadaf Ebrahimix509_verify_callback:"data_files/server1.crt":"data_files/test-ca.crt":"NULL":0:"depth 1 - serial 03 - subject C=NL, O=PolarSSL, CN=PolarSSL Test CA - flags 0x00000000\ndepth 0 - serial 01 - subject C=NL, O=PolarSSL, CN=PolarSSL Server 1 - flags 0x00000000\n"
1200*62c56f98SSadaf Ebrahimi
1201*62c56f98SSadaf EbrahimiX509 CRT verification callback: simple, EE expired
1202*62c56f98SSadaf Ebrahimidepends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_MD_CAN_SHA256:MBEDTLS_PK_CAN_ECDSA_VERIFY:MBEDTLS_ECP_HAVE_SECP256R1:MBEDTLS_ECP_HAVE_SECP384R1:MBEDTLS_MD_CAN_SHA1:MBEDTLS_HAVE_TIME_DATE
1203*62c56f98SSadaf Ebrahimix509_verify_callback:"data_files/server5-expired.crt":"data_files/test-ca2.crt":"NULL":MBEDTLS_ERR_X509_CERT_VERIFY_FAILED:"depth 1 - serial C1\:43\:E2\:7E\:62\:43\:CC\:E8 - subject C=NL, O=PolarSSL, CN=Polarssl Test EC CA - flags 0x00000000\ndepth 0 - serial 1E - subject C=NL, O=PolarSSL, CN=localhost - flags 0x00000001\n"
1204*62c56f98SSadaf Ebrahimi
1205*62c56f98SSadaf EbrahimiX509 CRT verification callback: simple, root expired
1206*62c56f98SSadaf Ebrahimidepends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_MD_CAN_SHA256:MBEDTLS_PK_CAN_ECDSA_VERIFY:MBEDTLS_ECP_HAVE_SECP256R1:MBEDTLS_ECP_HAVE_SECP384R1:MBEDTLS_MD_CAN_SHA1:MBEDTLS_HAVE_TIME_DATE
1207*62c56f98SSadaf Ebrahimix509_verify_callback:"data_files/server5.crt":"data_files/test-ca2-expired.crt":"NULL":MBEDTLS_ERR_X509_CERT_VERIFY_FAILED:"depth 1 - serial 01 - subject C=NL, O=PolarSSL, CN=Polarssl Test EC CA - flags 0x00000001\ndepth 0 - serial 09 - subject C=NL, O=PolarSSL, CN=localhost - flags 0x00000000\n"
1208*62c56f98SSadaf Ebrahimi
1209*62c56f98SSadaf EbrahimiX509 CRT verification callback: two trusted roots
1210*62c56f98SSadaf Ebrahimidepends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_MD_CAN_SHA1:MBEDTLS_RSA_C:MBEDTLS_PKCS1_V15:MBEDTLS_PK_CAN_ECDSA_VERIFY:MBEDTLS_ECP_HAVE_SECP384R1:MBEDTLS_MD_CAN_SHA256
1211*62c56f98SSadaf Ebrahimix509_verify_callback:"data_files/server1.crt":"data_files/test-ca_cat12.crt":"NULL":0:"depth 1 - serial 03 - subject C=NL, O=PolarSSL, CN=PolarSSL Test CA - flags 0x00000000\ndepth 0 - serial 01 - subject C=NL, O=PolarSSL, CN=PolarSSL Server 1 - flags 0x00000000\n"
1212*62c56f98SSadaf Ebrahimi
1213*62c56f98SSadaf EbrahimiX509 CRT verification callback: two trusted roots, reversed order
1214*62c56f98SSadaf Ebrahimidepends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_MD_CAN_SHA1:MBEDTLS_RSA_C:MBEDTLS_PKCS1_V15:MBEDTLS_PK_CAN_ECDSA_VERIFY:MBEDTLS_ECP_HAVE_SECP384R1:MBEDTLS_MD_CAN_SHA256
1215*62c56f98SSadaf Ebrahimix509_verify_callback:"data_files/server1.crt":"data_files/test-ca_cat21.crt":"NULL":0:"depth 1 - serial 03 - subject C=NL, O=PolarSSL, CN=PolarSSL Test CA - flags 0x00000000\ndepth 0 - serial 01 - subject C=NL, O=PolarSSL, CN=PolarSSL Server 1 - flags 0x00000000\n"
1216*62c56f98SSadaf Ebrahimi
1217*62c56f98SSadaf EbrahimiX509 CRT verification callback: root included
1218*62c56f98SSadaf Ebrahimidepends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_MD_CAN_SHA1:MBEDTLS_RSA_C:MBEDTLS_PKCS1_V15:MBEDTLS_PK_CAN_ECDSA_VERIFY:MBEDTLS_ECP_HAVE_SECP384R1:MBEDTLS_MD_CAN_SHA256
1219*62c56f98SSadaf Ebrahimix509_verify_callback:"data_files/server1_ca.crt":"data_files/test-ca_cat21.crt":"NULL":0:"depth 1 - serial 03 - subject C=NL, O=PolarSSL, CN=PolarSSL Test CA - flags 0x00000000\ndepth 0 - serial 01 - subject C=NL, O=PolarSSL, CN=PolarSSL Server 1 - flags 0x00000000\n"
1220*62c56f98SSadaf Ebrahimi
1221*62c56f98SSadaf EbrahimiX509 CRT verification callback: intermediate ca
1222*62c56f98SSadaf Ebrahimidepends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_PK_CAN_ECDSA_VERIFY:MBEDTLS_RSA_C:MBEDTLS_ECP_HAVE_SECP256R1:MBEDTLS_ECP_HAVE_SECP384R1:MBEDTLS_RSA_C:MBEDTLS_PKCS1_V15:MBEDTLS_MD_CAN_SHA256:MBEDTLS_MD_CAN_SHA1
1223*62c56f98SSadaf Ebrahimix509_verify_callback:"data_files/server7_int-ca.crt":"data_files/test-ca_cat12.crt":"NULL":0:"depth 2 - serial C1\:43\:E2\:7E\:62\:43\:CC\:E8 - subject C=NL, O=PolarSSL, CN=Polarssl Test EC CA - flags 0x00000000\ndepth 1 - serial 0E - subject C=NL, O=PolarSSL, CN=PolarSSL Test Intermediate CA - flags 0x00000000\ndepth 0 - serial 10 - subject C=NL, O=PolarSSL, CN=localhost - flags 0x00000000\n"
1224*62c56f98SSadaf Ebrahimi
1225*62c56f98SSadaf EbrahimiX509 CRT verification callback: intermediate ca, root included
1226*62c56f98SSadaf Ebrahimidepends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_PK_CAN_ECDSA_VERIFY:MBEDTLS_RSA_C:MBEDTLS_ECP_HAVE_SECP256R1:MBEDTLS_ECP_HAVE_SECP384R1:MBEDTLS_RSA_C:MBEDTLS_PKCS1_V15:MBEDTLS_MD_CAN_SHA256:MBEDTLS_MD_CAN_SHA1
1227*62c56f98SSadaf Ebrahimix509_verify_callback:"data_files/server7_int-ca_ca2.crt":"data_files/test-ca_cat12.crt":"NULL":0:"depth 2 - serial C1\:43\:E2\:7E\:62\:43\:CC\:E8 - subject C=NL, O=PolarSSL, CN=Polarssl Test EC CA - flags 0x00000000\ndepth 1 - serial 0E - subject C=NL, O=PolarSSL, CN=PolarSSL Test Intermediate CA - flags 0x00000000\ndepth 0 - serial 10 - subject C=NL, O=PolarSSL, CN=localhost - flags 0x00000000\n"
1228*62c56f98SSadaf Ebrahimi
1229*62c56f98SSadaf EbrahimiX509 CRT verification callback: intermediate ca trusted
1230*62c56f98SSadaf Ebrahimidepends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_PK_CAN_ECDSA_VERIFY:MBEDTLS_RSA_C:MBEDTLS_ECP_HAVE_SECP256R1:MBEDTLS_ECP_HAVE_SECP384R1:MBEDTLS_RSA_C:MBEDTLS_PKCS1_V15:MBEDTLS_MD_CAN_SHA256
1231*62c56f98SSadaf Ebrahimix509_verify_callback:"data_files/server7_int-ca_ca2.crt":"data_files/test-int-ca.crt":"NULL":0:"depth 1 - serial 0E - subject C=NL, O=PolarSSL, CN=PolarSSL Test Intermediate CA - flags 0x00000000\ndepth 0 - serial 10 - subject C=NL, O=PolarSSL, CN=localhost - flags 0x00000000\n"
1232*62c56f98SSadaf Ebrahimi
1233*62c56f98SSadaf EbrahimiX509 CRT verification callback: intermediate ca, EE expired
1234*62c56f98SSadaf Ebrahimidepends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_PK_CAN_ECDSA_VERIFY:MBEDTLS_RSA_C:MBEDTLS_ECP_HAVE_SECP256R1:MBEDTLS_ECP_HAVE_SECP384R1:MBEDTLS_RSA_C:MBEDTLS_PKCS1_V15:MBEDTLS_MD_CAN_SHA256:MBEDTLS_MD_CAN_SHA1:MBEDTLS_HAVE_TIME_DATE
1235*62c56f98SSadaf Ebrahimix509_verify_callback:"data_files/server7-expired.crt":"data_files/test-ca2.crt":"NULL":MBEDTLS_ERR_X509_CERT_VERIFY_FAILED:"depth 2 - serial C1\:43\:E2\:7E\:62\:43\:CC\:E8 - subject C=NL, O=PolarSSL, CN=Polarssl Test EC CA - flags 0x00000000\ndepth 1 - serial 0E - subject C=NL, O=PolarSSL, CN=PolarSSL Test Intermediate CA - flags 0x00000000\ndepth 0 - serial 10 - subject C=NL, O=PolarSSL, CN=localhost - flags 0x00000001\n"
1236*62c56f98SSadaf Ebrahimi
1237*62c56f98SSadaf EbrahimiX509 CRT verification callback: intermediate ca, int expired
1238*62c56f98SSadaf Ebrahimidepends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_PK_CAN_ECDSA_VERIFY:MBEDTLS_RSA_C:MBEDTLS_ECP_HAVE_SECP256R1:MBEDTLS_ECP_HAVE_SECP384R1:MBEDTLS_RSA_C:MBEDTLS_PKCS1_V15:MBEDTLS_MD_CAN_SHA256:MBEDTLS_MD_CAN_SHA1:MBEDTLS_HAVE_TIME_DATE
1239*62c56f98SSadaf Ebrahimix509_verify_callback:"data_files/server7_int-ca-exp.crt":"data_files/test-ca2.crt":"NULL":MBEDTLS_ERR_X509_CERT_VERIFY_FAILED:"depth 2 - serial C1\:43\:E2\:7E\:62\:43\:CC\:E8 - subject C=NL, O=PolarSSL, CN=Polarssl Test EC CA - flags 0x00000000\ndepth 1 - serial 0E - subject C=NL, O=PolarSSL, CN=PolarSSL Test Intermediate CA - flags 0x00000001\ndepth 0 - serial 10 - subject C=NL, O=PolarSSL, CN=localhost - flags 0x00000000\n"
1240*62c56f98SSadaf Ebrahimi
1241*62c56f98SSadaf EbrahimiX509 CRT verification callback: intermediate ca, root expired
1242*62c56f98SSadaf Ebrahimidepends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_PK_CAN_ECDSA_VERIFY:MBEDTLS_RSA_C:MBEDTLS_ECP_HAVE_SECP256R1:MBEDTLS_ECP_HAVE_SECP384R1:MBEDTLS_RSA_C:MBEDTLS_PKCS1_V15:MBEDTLS_MD_CAN_SHA256:MBEDTLS_MD_CAN_SHA1:MBEDTLS_HAVE_TIME_DATE
1243*62c56f98SSadaf Ebrahimix509_verify_callback:"data_files/server7_int-ca.crt":"data_files/test-ca2-expired.crt":"NULL":MBEDTLS_ERR_X509_CERT_VERIFY_FAILED:"depth 2 - serial 01 - subject C=NL, O=PolarSSL, CN=Polarssl Test EC CA - flags 0x00000001\ndepth 1 - serial 0E - subject C=NL, O=PolarSSL, CN=PolarSSL Test Intermediate CA - flags 0x00000000\ndepth 0 - serial 10 - subject C=NL, O=PolarSSL, CN=localhost - flags 0x00000000\n"
1244*62c56f98SSadaf Ebrahimi
1245*62c56f98SSadaf EbrahimiX509 CRT verification callback: two intermediates
1246*62c56f98SSadaf Ebrahimidepends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_PK_CAN_ECDSA_VERIFY:MBEDTLS_RSA_C:MBEDTLS_ECP_HAVE_SECP256R1:MBEDTLS_ECP_HAVE_SECP384R1:MBEDTLS_RSA_C:MBEDTLS_PKCS1_V15:MBEDTLS_MD_CAN_SHA256:MBEDTLS_MD_CAN_SHA1
1247*62c56f98SSadaf Ebrahimix509_verify_callback:"data_files/server10_int3_int-ca2.crt":"data_files/test-ca_cat21.crt":"NULL":0:"depth 3 - serial 03 - subject C=NL, O=PolarSSL, CN=PolarSSL Test CA - flags 0x00000000\ndepth 2 - serial 0F - subject C=NL, O=PolarSSL, CN=PolarSSL Test Intermediate EC CA - flags 0x00000000\ndepth 1 - serial 4D - subject C=UK, O=mbed TLS, CN=mbed TLS Test intermediate CA 3 - flags 0x00000000\ndepth 0 - serial 4B - subject CN=localhost - flags 0x00000000\n"
1248*62c56f98SSadaf Ebrahimi
1249*62c56f98SSadaf EbrahimiX509 CRT verification callback: two intermediates, root included
1250*62c56f98SSadaf Ebrahimidepends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_PK_CAN_ECDSA_VERIFY:MBEDTLS_RSA_C:MBEDTLS_ECP_HAVE_SECP256R1:MBEDTLS_ECP_HAVE_SECP384R1:MBEDTLS_RSA_C:MBEDTLS_PKCS1_V15:MBEDTLS_MD_CAN_SHA256:MBEDTLS_MD_CAN_SHA1
1251*62c56f98SSadaf Ebrahimix509_verify_callback:"data_files/server10_int3_int-ca2_ca.crt":"data_files/test-ca_cat21.crt":"NULL":0:"depth 3 - serial 03 - subject C=NL, O=PolarSSL, CN=PolarSSL Test CA - flags 0x00000000\ndepth 2 - serial 0F - subject C=NL, O=PolarSSL, CN=PolarSSL Test Intermediate EC CA - flags 0x00000000\ndepth 1 - serial 4D - subject C=UK, O=mbed TLS, CN=mbed TLS Test intermediate CA 3 - flags 0x00000000\ndepth 0 - serial 4B - subject CN=localhost - flags 0x00000000\n"
1252*62c56f98SSadaf Ebrahimi
1253*62c56f98SSadaf EbrahimiX509 CRT verification callback: two intermediates, top int trusted
1254*62c56f98SSadaf Ebrahimidepends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_PK_CAN_ECDSA_VERIFY:MBEDTLS_RSA_C:MBEDTLS_ECP_HAVE_SECP256R1:MBEDTLS_ECP_HAVE_SECP384R1:MBEDTLS_RSA_C:MBEDTLS_PKCS1_V15:MBEDTLS_MD_CAN_SHA256
1255*62c56f98SSadaf Ebrahimix509_verify_callback:"data_files/server10_int3_int-ca2.crt":"data_files/test-int-ca2.crt":"NULL":0:"depth 2 - serial 0F - subject C=NL, O=PolarSSL, CN=PolarSSL Test Intermediate EC CA - flags 0x00000000\ndepth 1 - serial 4D - subject C=UK, O=mbed TLS, CN=mbed TLS Test intermediate CA 3 - flags 0x00000000\ndepth 0 - serial 4B - subject CN=localhost - flags 0x00000000\n"
1256*62c56f98SSadaf Ebrahimi
1257*62c56f98SSadaf EbrahimiX509 CRT verification callback: two intermediates, low int trusted
1258*62c56f98SSadaf Ebrahimidepends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_PK_CAN_ECDSA_VERIFY:MBEDTLS_RSA_C:MBEDTLS_ECP_HAVE_SECP256R1:MBEDTLS_ECP_HAVE_SECP384R1:MBEDTLS_RSA_C:MBEDTLS_PKCS1_V15:MBEDTLS_MD_CAN_SHA256:MBEDTLS_MD_CAN_SHA1
1259*62c56f98SSadaf Ebrahimix509_verify_callback:"data_files/server10_int3_int-ca2_ca.crt":"data_files/test-int-ca3.crt":"NULL":0:"depth 1 - serial 4D - subject C=UK, O=mbed TLS, CN=mbed TLS Test intermediate CA 3 - flags 0x00000000\ndepth 0 - serial 4B - subject CN=localhost - flags 0x00000000\n"
1260*62c56f98SSadaf Ebrahimi
1261*62c56f98SSadaf EbrahimiX509 CRT verification callback: no intermediate, bad signature
1262*62c56f98SSadaf Ebrahimidepends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_PK_CAN_ECDSA_VERIFY:MBEDTLS_MD_CAN_SHA256:MBEDTLS_ECP_HAVE_SECP256R1:MBEDTLS_ECP_HAVE_SECP384R1
1263*62c56f98SSadaf Ebrahimix509_verify_callback:"data_files/server5-badsign.crt":"data_files/test-ca2.crt":"NULL":MBEDTLS_ERR_X509_CERT_VERIFY_FAILED:"depth 0 - serial 09 - subject C=NL, O=PolarSSL, CN=localhost - flags 0x00000008\n"
1264*62c56f98SSadaf Ebrahimi
1265*62c56f98SSadaf EbrahimiX509 CRT verification callback: one intermediate, bad signature
1266*62c56f98SSadaf Ebrahimidepends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_RSA_C:MBEDTLS_PKCS1_V15:MBEDTLS_MD_CAN_SHA1:MBEDTLS_PK_CAN_ECDSA_VERIFY:MBEDTLS_ECP_HAVE_SECP256R1:MBEDTLS_ECP_HAVE_SECP384R1:MBEDTLS_MD_CAN_SHA256
1267*62c56f98SSadaf Ebrahimix509_verify_callback:"data_files/server7-badsign.crt":"data_files/test-ca2.crt":"NULL":MBEDTLS_ERR_X509_CERT_VERIFY_FAILED:"depth 2 - serial C1\:43\:E2\:7E\:62\:43\:CC\:E8 - subject C=NL, O=PolarSSL, CN=Polarssl Test EC CA - flags 0x00000000\ndepth 1 - serial 0E - subject C=NL, O=PolarSSL, CN=PolarSSL Test Intermediate CA - flags 0x00000000\ndepth 0 - serial 10 - subject C=NL, O=PolarSSL, CN=localhost - flags 0x00000008\n"
1268*62c56f98SSadaf Ebrahimi
1269*62c56f98SSadaf EbrahimiX509 CRT ASN1 (Empty Certificate)
1270*62c56f98SSadaf Ebrahimix509parse_crt:"":"":MBEDTLS_ERR_X509_INVALID_FORMAT
1271*62c56f98SSadaf Ebrahimi
1272*62c56f98SSadaf EbrahimiX509 CRT ASN1 (inv Certificate, bad tag)
1273*62c56f98SSadaf Ebrahimix509parse_crt:"0500":"":MBEDTLS_ERR_X509_INVALID_FORMAT
1274*62c56f98SSadaf Ebrahimi
1275*62c56f98SSadaf EbrahimiX509 CRT ASN1 (inv Certificate, no length)
1276*62c56f98SSadaf Ebrahimix509parse_crt:"30":"":MBEDTLS_ERR_X509_INVALID_FORMAT
1277*62c56f98SSadaf Ebrahimi
1278*62c56f98SSadaf EbrahimiX509 CRT ASN1 (inv Certificate, bad length encoding)
1279*62c56f98SSadaf Ebrahimix509parse_crt:"3085":"":MBEDTLS_ERR_X509_INVALID_FORMAT
1280*62c56f98SSadaf Ebrahimi
1281*62c56f98SSadaf EbrahimiX509 CRT ASN1 (inv Certificate, length data incomplete)
1282*62c56f98SSadaf Ebrahimix509parse_crt:"308200":"":MBEDTLS_ERR_X509_INVALID_FORMAT
1283*62c56f98SSadaf Ebrahimi
1284*62c56f98SSadaf EbrahimiX509 CRT ASN1 (inv Certificate, length out of bounds)
1285*62c56f98SSadaf Ebrahimix509parse_crt:"3001":"":MBEDTLS_ERR_X509_INVALID_FORMAT
1286*62c56f98SSadaf Ebrahimi
1287*62c56f98SSadaf EbrahimiX509 CRT ASN1 (inv TBS, invalid tag)
1288*62c56f98SSadaf Ebrahimix509parse_crt:"30020500":"":MBEDTLS_ERR_X509_INVALID_FORMAT + MBEDTLS_ERR_ASN1_UNEXPECTED_TAG
1289*62c56f98SSadaf Ebrahimi
1290*62c56f98SSadaf EbrahimiX509 CRT ASN1 (inv TBS, length missing)
1291*62c56f98SSadaf Ebrahimix509parse_crt:"300130":"":MBEDTLS_ERR_X509_INVALID_FORMAT + MBEDTLS_ERR_ASN1_OUT_OF_DATA
1292*62c56f98SSadaf Ebrahimi
1293*62c56f98SSadaf EbrahimiX509 CRT ASN1 (inv TBS, invalid length encoding)
1294*62c56f98SSadaf Ebrahimix509parse_crt:"30023085":"":MBEDTLS_ERR_X509_INVALID_FORMAT + MBEDTLS_ERR_ASN1_INVALID_LENGTH
1295*62c56f98SSadaf Ebrahimi
1296*62c56f98SSadaf EbrahimiX509 CRT ASN1 (inv TBS, length data incomplete)
1297*62c56f98SSadaf Ebrahimix509parse_crt:"300430839999":"":MBEDTLS_ERR_X509_INVALID_FORMAT + MBEDTLS_ERR_ASN1_OUT_OF_DATA
1298*62c56f98SSadaf Ebrahimi
1299*62c56f98SSadaf EbrahimiX509 CRT ASN1 (inv TBS, length out of bounds)
1300*62c56f98SSadaf Ebrahimix509parse_crt:"30023003":"":MBEDTLS_ERR_X509_INVALID_FORMAT + MBEDTLS_ERR_ASN1_OUT_OF_DATA
1301*62c56f98SSadaf Ebrahimi
1302*62c56f98SSadaf EbrahimiX509 CRT ASN1 (TBS empty)
1303*62c56f98SSadaf Ebrahimidepends_on:MBEDTLS_MD_CAN_SHA256:MBEDTLS_RSA_C
1304*62c56f98SSadaf Ebrahimix509parse_crt:"30153000300d06092a864886f70d01010b0500030200ff":"":MBEDTLS_ERR_X509_INVALID_FORMAT + MBEDTLS_ERR_ASN1_OUT_OF_DATA
1305*62c56f98SSadaf Ebrahimi
1306*62c56f98SSadaf EbrahimiX509 CRT ASN1 (TBS, invalid version tag, serial missing)
1307*62c56f98SSadaf Ebrahimidepends_on:MBEDTLS_MD_CAN_SHA256:MBEDTLS_RSA_C
1308*62c56f98SSadaf Ebrahimix509parse_crt:"301730020500300d06092a864886f70d01010b0500030200ff":"":MBEDTLS_ERR_X509_INVALID_SERIAL + MBEDTLS_ERR_ASN1_UNEXPECTED_TAG
1309*62c56f98SSadaf Ebrahimi
1310*62c56f98SSadaf EbrahimiX509 CRT ASN1 (TBS, valid outer version tag, no outer length)
1311*62c56f98SSadaf Ebrahimidepends_on:MBEDTLS_MD_CAN_SHA256:MBEDTLS_RSA_C
1312*62c56f98SSadaf Ebrahimix509parse_crt:"30163001a0300d06092a864886f70d01010b0500030200ff":"":MBEDTLS_ERR_X509_INVALID_FORMAT + MBEDTLS_ERR_ASN1_OUT_OF_DATA
1313*62c56f98SSadaf Ebrahimi
1314*62c56f98SSadaf EbrahimiX509 CRT ASN1 (TBS, inv inner version tag)
1315*62c56f98SSadaf Ebrahimidepends_on:MBEDTLS_MD_CAN_SHA256:MBEDTLS_RSA_C
1316*62c56f98SSadaf Ebrahimix509parse_crt:"30193004a0020500300d06092a864886f70d01010b0500030200ff":"":MBEDTLS_ERR_X509_INVALID_VERSION + MBEDTLS_ERR_ASN1_UNEXPECTED_TAG
1317*62c56f98SSadaf Ebrahimi
1318*62c56f98SSadaf EbrahimiX509 CRT ASN1 (TBS, valid inner version tag, no inner length)
1319*62c56f98SSadaf Ebrahimidepends_on:MBEDTLS_MD_CAN_SHA256:MBEDTLS_RSA_C
1320*62c56f98SSadaf Ebrahimix509parse_crt:"30183003a00102300d06092a864886f70d01010b0500030200ff":"":MBEDTLS_ERR_X509_INVALID_VERSION + MBEDTLS_ERR_ASN1_OUT_OF_DATA
1321*62c56f98SSadaf Ebrahimi
1322*62c56f98SSadaf EbrahimiX509 CRT ASN1 (TBS, valid inner version tag, inv inner length encoding)
1323*62c56f98SSadaf Ebrahimidepends_on:MBEDTLS_MD_CAN_SHA256:MBEDTLS_RSA_C
1324*62c56f98SSadaf Ebrahimix509parse_crt:"30193004a0020285300d06092a864886f70d01010b0500030200ff":"":MBEDTLS_ERR_X509_INVALID_VERSION + MBEDTLS_ERR_ASN1_INVALID_LENGTH
1325*62c56f98SSadaf Ebrahimi
1326*62c56f98SSadaf EbrahimiX509 CRT ASN1 (TBS, valid inner version tag, inner length too large for int)
1327*62c56f98SSadaf Ebrahimidepends_on:MBEDTLS_MD_CAN_SHA256:MBEDTLS_RSA_C
1328*62c56f98SSadaf Ebrahimi# tbsCertificate.version = 0x01000000000000000000000000000000 rejected by mbedtls_asn1_get_int
1329*62c56f98SSadaf Ebrahimix509parse_crt:"30293014a012021001000000000000000000000000000000300d06092a864886f70d01010b0500030200ff":"":MBEDTLS_ERR_X509_INVALID_VERSION + MBEDTLS_ERR_ASN1_INVALID_LENGTH
1330*62c56f98SSadaf Ebrahimi
1331*62c56f98SSadaf EbrahimiX509 CRT ASN1 (TBS, valid inner version tag, inner vs. outer length mismatch)
1332*62c56f98SSadaf Ebrahimidepends_on:MBEDTLS_MD_CAN_SHA256:MBEDTLS_RSA_C
1333*62c56f98SSadaf Ebrahimix509parse_crt:"301b3006a00402010200300d06092a864886f70d01010b0500030200ff":"":MBEDTLS_ERR_X509_INVALID_VERSION + MBEDTLS_ERR_ASN1_LENGTH_MISMATCH
1334*62c56f98SSadaf Ebrahimi
1335*62c56f98SSadaf EbrahimiX509 CRT ASN1 (TBS, valid version tag, length exceeds TBS)
1336*62c56f98SSadaf Ebrahimidepends_on:MBEDTLS_MD_CAN_SHA256:MBEDTLS_RSA_C
1337*62c56f98SSadaf Ebrahimix509parse_crt:"30293014a012021100000000000000000000000000000000300d06092a864886f70d01010b0500030200ff":"":MBEDTLS_ERR_X509_INVALID_VERSION + MBEDTLS_ERR_ASN1_OUT_OF_DATA
1338*62c56f98SSadaf Ebrahimi
1339*62c56f98SSadaf EbrahimiX509 CRT ASN1 (TBS, valid version tag + length, unknown version number 3)
1340*62c56f98SSadaf Ebrahimidepends_on:MBEDTLS_MD_CAN_SHA256:MBEDTLS_RSA_C
1341*62c56f98SSadaf Ebrahimix509parse_crt:"308196308180a0030201038204deadbeef300d06092a864886f70d01010b0500300c310a30080600130454657374301c170c303930313031303030303030170c303931323331323335393539300c310a30080600130454657374302a300d06092A864886F70D010101050003190030160210ffffffffffffffffffffffffffffffff0202ffff300d06092a864886f70d01010b0500030200ff":"":MBEDTLS_ERR_X509_UNKNOWN_VERSION
1342*62c56f98SSadaf Ebrahimi
1343*62c56f98SSadaf EbrahimiX509 CRT ASN1 (TBS, valid version tag + length, unknown version number 4)
1344*62c56f98SSadaf Ebrahimidepends_on:MBEDTLS_MD_CAN_SHA256:MBEDTLS_RSA_C
1345*62c56f98SSadaf Ebrahimix509parse_crt:"308196308180a0030201048204deadbeef300d06092a864886f70d01010b0500300c310a30080600130454657374301c170c303930313031303030303030170c303931323331323335393539300c310a30080600130454657374302a300d06092A864886F70D010101050003190030160210ffffffffffffffffffffffffffffffff0202ffff300d06092a864886f70d01010b0500030200ff":"":MBEDTLS_ERR_X509_UNKNOWN_VERSION
1346*62c56f98SSadaf Ebrahimi
1347*62c56f98SSadaf EbrahimiX509 CRT ASN1 (TBS, valid version tag + length, version number overflow)
1348*62c56f98SSadaf Ebrahimidepends_on:MBEDTLS_MD_CAN_SHA256:MBEDTLS_RSA_C
1349*62c56f98SSadaf Ebrahimix509parse_crt:"308199308183a00602047FFFFFFF8204deadbeef300d06092a864886f70d01010b0500300c310a30080600130454657374301c170c303930313031303030303030170c303931323331323335393539300c310a30080600130454657374302a300d06092A864886F70D010101050003190030160210ffffffffffffffffffffffffffffffff0202ffff300d06092a864886f70d01010b0500030200ff":"":MBEDTLS_ERR_X509_UNKNOWN_VERSION
1350*62c56f98SSadaf Ebrahimi
1351*62c56f98SSadaf EbrahimiX509 CRT ASN1 (TBS, serial missing)
1352*62c56f98SSadaf Ebrahimidepends_on:MBEDTLS_MD_CAN_SHA256:MBEDTLS_RSA_C
1353*62c56f98SSadaf Ebrahimix509parse_crt:"301a3005a003020102300d06092a864886f70d01010b0500030200ff":"":MBEDTLS_ERR_X509_INVALID_SERIAL + MBEDTLS_ERR_ASN1_OUT_OF_DATA
1354*62c56f98SSadaf Ebrahimi
1355*62c56f98SSadaf EbrahimiX509 CRT ASN1 (TBS, inv serial, tag wrong)
1356*62c56f98SSadaf Ebrahimidepends_on:MBEDTLS_MD_CAN_SHA256:MBEDTLS_RSA_C
1357*62c56f98SSadaf Ebrahimix509parse_crt:"301c3007a0030201020500300d06092a864886f70d01010b0500030200ff":"":MBEDTLS_ERR_X509_INVALID_SERIAL + MBEDTLS_ERR_ASN1_UNEXPECTED_TAG
1358*62c56f98SSadaf Ebrahimi
1359*62c56f98SSadaf EbrahimiX509 CRT ASN1 (TBS, inv serial, length missing)
1360*62c56f98SSadaf Ebrahimidepends_on:MBEDTLS_MD_CAN_SHA256:MBEDTLS_RSA_C
1361*62c56f98SSadaf Ebrahimix509parse_crt:"301b3006a00302010282300d06092a864886f70d01010b0500030200ff":"":MBEDTLS_ERR_X509_INVALID_SERIAL + MBEDTLS_ERR_ASN1_OUT_OF_DATA
1362*62c56f98SSadaf Ebrahimi
1363*62c56f98SSadaf EbrahimiX509 CRT ASN1 (TBS, inv serial, inv length encoding)
1364*62c56f98SSadaf Ebrahimidepends_on:MBEDTLS_MD_CAN_SHA256:MBEDTLS_RSA_C
1365*62c56f98SSadaf Ebrahimix509parse_crt:"301c3007a0030201028285300d06092a864886f70d01010b0500030200ff":"":MBEDTLS_ERR_X509_INVALID_SERIAL + MBEDTLS_ERR_ASN1_INVALID_LENGTH
1366*62c56f98SSadaf Ebrahimi
1367*62c56f98SSadaf EbrahimiX509 CRT ASN1 (TBS, inv serial, length out of bounds)
1368*62c56f98SSadaf Ebrahimidepends_on:MBEDTLS_MD_CAN_SHA256:MBEDTLS_RSA_C
1369*62c56f98SSadaf Ebrahimix509parse_crt:"301c3007a0030201028201300d06092a864886f70d01010b0500030200ff":"":MBEDTLS_ERR_X509_INVALID_SERIAL + MBEDTLS_ERR_ASN1_OUT_OF_DATA
1370*62c56f98SSadaf Ebrahimi
1371*62c56f98SSadaf EbrahimiX509 CRT ASN1 (TBS, AlgID missing)
1372*62c56f98SSadaf Ebrahimidepends_on:MBEDTLS_MD_CAN_SHA256:MBEDTLS_RSA_C
1373*62c56f98SSadaf Ebrahimix509parse_crt:"3020300ba0030201028204deadbeef300d06092a864886f70d01010b0500030200ff":"":MBEDTLS_ERR_X509_INVALID_ALG + MBEDTLS_ERR_ASN1_OUT_OF_DATA
1374*62c56f98SSadaf Ebrahimi
1375*62c56f98SSadaf EbrahimiX509 CRT ASN1 (TBS, inv AlgID, tag wrong)
1376*62c56f98SSadaf Ebrahimidepends_on:MBEDTLS_MD_CAN_SHA256:MBEDTLS_RSA_C
1377*62c56f98SSadaf Ebrahimix509parse_crt:"3022300da0030201028204deadbeef0500300d06092a864886f70d01010b0500030200ff":"":MBEDTLS_ERR_X509_INVALID_ALG + MBEDTLS_ERR_ASN1_UNEXPECTED_TAG
1378*62c56f98SSadaf Ebrahimi
1379*62c56f98SSadaf EbrahimiX509 CRT ASN1 (TBS, inv AlgID, OID missing)
1380*62c56f98SSadaf Ebrahimidepends_on:MBEDTLS_MD_CAN_SHA256:MBEDTLS_RSA_C
1381*62c56f98SSadaf Ebrahimix509parse_crt:"307b3073a0030201008204deadbeef3000300c310a30080600130454657374301c170c303930313031303030303030170c303931323331323335393539300c310a30080600130454657374302a300d06092A864886F70D010101050003190030160210ffffffffffffffffffffffffffffffff0202ffff3000030200ff":"":MBEDTLS_ERR_X509_INVALID_ALG + MBEDTLS_ERR_ASN1_OUT_OF_DATA
1382*62c56f98SSadaf Ebrahimi
1383*62c56f98SSadaf EbrahimiX509 CRT ASN1 (TBS, inv AlgID, OID tag wrong)
1384*62c56f98SSadaf Ebrahimidepends_on:MBEDTLS_MD_CAN_SHA256:MBEDTLS_RSA_C
1385*62c56f98SSadaf Ebrahimix509parse_crt:"307f3075a0030201008204deadbeef30020500300c310a30080600130454657374301c170c303930313031303030303030170c303931323331323335393539300c310a30080600130454657374302a300d06092A864886F70D010101050003190030160210ffffffffffffffffffffffffffffffff0202ffff30020500030200ff":"":MBEDTLS_ERR_X509_INVALID_ALG + MBEDTLS_ERR_ASN1_UNEXPECTED_TAG
1386*62c56f98SSadaf Ebrahimi
1387*62c56f98SSadaf EbrahimiX509 CRT ASN1 (TBS, inv AlgID, OID inv length encoding)
1388*62c56f98SSadaf Ebrahimidepends_on:MBEDTLS_MD_CAN_SHA256:MBEDTLS_RSA_C
1389*62c56f98SSadaf Ebrahimix509parse_crt:"307f3075a0030201008204deadbeef30020685300c310a30080600130454657374301c170c303930313031303030303030170c303931323331323335393539300c310a30080600130454657374302a300d06092A864886F70D010101050003190030160210ffffffffffffffffffffffffffffffff0202ffff30020685030200ff":"":MBEDTLS_ERR_X509_INVALID_ALG + MBEDTLS_ERR_ASN1_INVALID_LENGTH
1390*62c56f98SSadaf Ebrahimi
1391*62c56f98SSadaf EbrahimiX509 CRT ASN1 (TBS, inv AlgID, OID length out of bounds)
1392*62c56f98SSadaf Ebrahimidepends_on:MBEDTLS_MD_CAN_SHA256:MBEDTLS_RSA_C
1393*62c56f98SSadaf Ebrahimix509parse_crt:"307f3075a0030201008204deadbeef30020601300c310a30080600130454657374301c170c303930313031303030303030170c303931323331323335393539300c310a30080600130454657374302a300d06092A864886F70D010101050003190030160210ffffffffffffffffffffffffffffffff0202ffff30020601030200ff":"":MBEDTLS_ERR_X509_INVALID_ALG + MBEDTLS_ERR_ASN1_OUT_OF_DATA
1394*62c56f98SSadaf Ebrahimi
1395*62c56f98SSadaf EbrahimiX509 CRT ASN1 (TBS, inv AlgID, OID empty)
1396*62c56f98SSadaf Ebrahimidepends_on:MBEDTLS_MD_CAN_SHA256:MBEDTLS_RSA_C
1397*62c56f98SSadaf Ebrahimix509parse_crt:"307f3075a0030201008204deadbeef30020600300c310a30080600130454657374301c170c303930313031303030303030170c303931323331323335393539300c310a30080600130454657374302a300d06092A864886F70D010101050003190030160210ffffffffffffffffffffffffffffffff0202ffff30020600030200ff":"":MBEDTLS_ERR_X509_UNKNOWN_SIG_ALG + MBEDTLS_ERR_OID_NOT_FOUND
1398*62c56f98SSadaf Ebrahimi
1399*62c56f98SSadaf EbrahimiX509 CRT ASN1 (TBS, inv AlgID, OID unknown)
1400*62c56f98SSadaf Ebrahimidepends_on:MBEDTLS_MD_CAN_SHA256:MBEDTLS_RSA_C
1401*62c56f98SSadaf Ebrahimix509parse_crt:"3081873079a0030201008204deadbeef30060604deadbeef300c310a30080600130454657374301c170c303930313031303030303030170c303931323331323335393539300c310a30080600130454657374302a300d06092A864886F70D010101050003190030160210ffffffffffffffffffffffffffffffff0202ffff30060604deadbeef030200ff":"":MBEDTLS_ERR_X509_UNKNOWN_SIG_ALG + MBEDTLS_ERR_OID_NOT_FOUND
1402*62c56f98SSadaf Ebrahimi
1403*62c56f98SSadaf EbrahimiX509 CRT ASN1 (TBS, inv AlgID, param inv length encoding)
1404*62c56f98SSadaf Ebrahimidepends_on:MBEDTLS_MD_CAN_SHA256:MBEDTLS_RSA_C
1405*62c56f98SSadaf Ebrahimix509parse_crt:"308196308180a0030201008204deadbeef300d06092a864886f70d01010b0685300c310a30080600130454657374301c170c303930313031303030303030170c303931323331323335393539300c310a30080600130454657374302a300d06092A864886F70D010101050003190030160210ffffffffffffffffffffffffffffffff0202ffff300d06092a864886f70d01010b0685030200ff":"":MBEDTLS_ERR_X509_INVALID_ALG + MBEDTLS_ERR_ASN1_INVALID_LENGTH
1406*62c56f98SSadaf Ebrahimi
1407*62c56f98SSadaf EbrahimiX509 CRT ASN1 (TBS, inv AlgID, param length out of bounds)
1408*62c56f98SSadaf Ebrahimidepends_on:MBEDTLS_MD_CAN_SHA256:MBEDTLS_RSA_C
1409*62c56f98SSadaf Ebrahimix509parse_crt:"308196308180a0030201008204deadbeef300d06092a864886f70d01010b0601300c310a30080600130454657374301c170c303930313031303030303030170c303931323331323335393539300c310a30080600130454657374302a300d06092A864886F70D010101050003190030160210ffffffffffffffffffffffffffffffff0202ffff300d06092a864886f70d01010b0601030200ff":"":MBEDTLS_ERR_X509_INVALID_ALG + MBEDTLS_ERR_ASN1_OUT_OF_DATA
1410*62c56f98SSadaf Ebrahimi
1411*62c56f98SSadaf EbrahimiX509 CRT ASN1 (TBS, inv AlgID, param length mismatch)
1412*62c56f98SSadaf Ebrahimidepends_on:MBEDTLS_MD_CAN_SHA256:MBEDTLS_RSA_C
1413*62c56f98SSadaf Ebrahimix509parse_crt:"30819a308182a0030201008204deadbeef300f06092a864886f70d01010b06010000300c310a30080600130454657374301c170c303930313031303030303030170c303931323331323335393539300c310a30080600130454657374302a300d06092A864886F70D010101050003190030160210ffffffffffffffffffffffffffffffff0202ffff300f06092a864886f70d01010b06010000030200ff":"":MBEDTLS_ERR_X509_INVALID_ALG + MBEDTLS_ERR_ASN1_LENGTH_MISMATCH
1414*62c56f98SSadaf Ebrahimi
1415*62c56f98SSadaf EbrahimiX509 CRT ASN1 (TBS, inv AlgID, params present but empty)
1416*62c56f98SSadaf Ebrahimidepends_on:MBEDTLS_MD_CAN_SHA256:MBEDTLS_RSA_C
1417*62c56f98SSadaf Ebrahimix509parse_crt:"308196308180a0030201008204deadbeef300d06092a864886f70d01010b0600300c310a30080600130454657374301c170c303930313031303030303030170c303931323331323335393539300c310a30080600130454657374302a300d06092A864886F70D010101050003190030160210ffffffffffffffffffffffffffffffff0202ffff300d06092a864886f70d01010b0600030200ff":"":MBEDTLS_ERR_X509_INVALID_ALG
1418*62c56f98SSadaf Ebrahimi
1419*62c56f98SSadaf EbrahimiX509 CRT ASN1 (TBS, inv AlgID, bad RSASSA-PSS params)
1420*62c56f98SSadaf Ebrahimidepends_on:MBEDTLS_MD_CAN_SHA256:MBEDTLS_X509_RSASSA_PSS_SUPPORT
1421*62c56f98SSadaf Ebrahimix509parse_crt:"308196308180a0030201008204deadbeef300d06092a864886f70d01010a3100300c310a30080600130454657374301c170c303930313031303030303030170c303931323331323335393539300c310a30080600130454657374302a300d06092A864886F70D010101050003190030160210ffffffffffffffffffffffffffffffff0202ffff300d06092a864886f70d01010a3100030200ff":"":MBEDTLS_ERR_X509_INVALID_ALG + MBEDTLS_ERR_ASN1_UNEXPECTED_TAG
1422*62c56f98SSadaf Ebrahimi
1423*62c56f98SSadaf EbrahimiX509 CRT ASN1 (TBS, Issuer missing)
1424*62c56f98SSadaf Ebrahimidepends_on:MBEDTLS_MD_CAN_SHA256:MBEDTLS_RSA_C
1425*62c56f98SSadaf Ebrahimix509parse_crt:"302f301aa0030201008204deadbeef300d06092a864886f70d01010b0500300d06092a864886f70d01010b0500030200ff":"":MBEDTLS_ERR_X509_INVALID_FORMAT + MBEDTLS_ERR_ASN1_OUT_OF_DATA
1426*62c56f98SSadaf Ebrahimi
1427*62c56f98SSadaf EbrahimiX509 CRT ASN1 (TBS, inv Issuer, RDNSequence inv tag)
1428*62c56f98SSadaf Ebrahimidepends_on:MBEDTLS_MD_CAN_SHA256:MBEDTLS_RSA_C
1429*62c56f98SSadaf Ebrahimix509parse_crt:"3031301ca0030201008204deadbeef300d06092a864886f70d01010b05000500300d06092a864886f70d01010b0500030200ff":"":MBEDTLS_ERR_X509_INVALID_FORMAT + MBEDTLS_ERR_ASN1_UNEXPECTED_TAG
1430*62c56f98SSadaf Ebrahimi
1431*62c56f98SSadaf EbrahimiX509 CRT ASN1 (TBS, inv Issuer, RDNSequence length missing)
1432*62c56f98SSadaf Ebrahimidepends_on:MBEDTLS_MD_CAN_SHA256:MBEDTLS_RSA_C
1433*62c56f98SSadaf Ebrahimix509parse_crt:"3030301ba0030201008204deadbeef300d06092a864886f70d01010b050030300d06092a864886f70d01010b0500030200ff":"":MBEDTLS_ERR_X509_INVALID_FORMAT + MBEDTLS_ERR_ASN1_OUT_OF_DATA
1434*62c56f98SSadaf Ebrahimi
1435*62c56f98SSadaf EbrahimiX509 CRT ASN1 (TBS, inv Issuer, RDNSequence inv length encoding)
1436*62c56f98SSadaf Ebrahimidepends_on:MBEDTLS_MD_CAN_SHA256:MBEDTLS_RSA_C
1437*62c56f98SSadaf Ebrahimix509parse_crt:"3031301ca0030201008204deadbeef300d06092a864886f70d01010b05003085300d06092a864886f70d01010b0500030200ff":"":MBEDTLS_ERR_X509_INVALID_FORMAT + MBEDTLS_ERR_ASN1_INVALID_LENGTH
1438*62c56f98SSadaf Ebrahimi
1439*62c56f98SSadaf EbrahimiX509 CRT ASN1 (TBS, inv Issuer, RDNSequence length out of bounds)
1440*62c56f98SSadaf Ebrahimidepends_on:MBEDTLS_MD_CAN_SHA256:MBEDTLS_RSA_C
1441*62c56f98SSadaf Ebrahimix509parse_crt:"3031301ca0030201008204deadbeef300d06092a864886f70d01010b05003001300d06092a864886f70d01010b0500030200ff":"":MBEDTLS_ERR_X509_INVALID_FORMAT + MBEDTLS_ERR_ASN1_OUT_OF_DATA
1442*62c56f98SSadaf Ebrahimi
1443*62c56f98SSadaf EbrahimiX509 CRT ASN1 (TBS, inv Issuer, RDNSequence empty)
1444*62c56f98SSadaf Ebrahimidepends_on:MBEDTLS_RSA_C:MBEDTLS_MD_CAN_SHA256
1445*62c56f98SSadaf Ebrahimix509parse_crt:"3081893074a0030201028204deadbeef300d06092a864886f70d01010b05003000301c170c303930313031303030303030170c303931323331323335393539300c310a30080600130454657374302a300d06092A864886F70D010101050003190030160210ffffffffffffffffffffffffffffffff0202ffff300d06092a864886f70d01010b0500030200ff":"":MBEDTLS_ERR_X509_INVALID_NAME + MBEDTLS_ERR_ASN1_OUT_OF_DATA
1446*62c56f98SSadaf Ebrahimi
1447*62c56f98SSadaf EbrahimiX509 CRT ASN1 (TBS, inv Issuer, RDN inv tag)
1448*62c56f98SSadaf Ebrahimidepends_on:MBEDTLS_RSA_C:MBEDTLS_MD_CAN_SHA256
1449*62c56f98SSadaf Ebrahimix509parse_crt:"30818b3076a0030201028204deadbeef300d06092a864886f70d01010b050030020500301c170c303930313031303030303030170c303931323331323335393539300c310a30080600130454657374302a300d06092A864886F70D010101050003190030160210ffffffffffffffffffffffffffffffff0202ffff300d06092a864886f70d01010b0500030200ff":"":MBEDTLS_ERR_X509_INVALID_NAME + MBEDTLS_ERR_ASN1_UNEXPECTED_TAG
1450*62c56f98SSadaf Ebrahimi
1451*62c56f98SSadaf EbrahimiX509 CRT ASN1 (TBS, inv Issuer, RDN inv length encoding)
1452*62c56f98SSadaf Ebrahimidepends_on:MBEDTLS_RSA_C:MBEDTLS_MD_CAN_SHA256
1453*62c56f98SSadaf Ebrahimix509parse_crt:"30818b3076a0030201028204deadbeef300d06092a864886f70d01010b050030023185301c170c303930313031303030303030170c303931323331323335393539300c310a30080600130454657374302a300d06092A864886F70D010101050003190030160210ffffffffffffffffffffffffffffffff0202ffff300d06092a864886f70d01010b0500030200ff":"":MBEDTLS_ERR_X509_INVALID_NAME + MBEDTLS_ERR_ASN1_INVALID_LENGTH
1454*62c56f98SSadaf Ebrahimi
1455*62c56f98SSadaf EbrahimiX509 CRT ASN1 (TBS, inv Issuer, RDN length out of bounds)
1456*62c56f98SSadaf Ebrahimidepends_on:MBEDTLS_RSA_C:MBEDTLS_MD_CAN_SHA256
1457*62c56f98SSadaf Ebrahimix509parse_crt:"30818b3076a0030201028204deadbeef300d06092a864886f70d01010b050030023101301c170c303930313031303030303030170c303931323331323335393539300c310a30080600130454657374302a300d06092A864886F70D010101050003190030160210ffffffffffffffffffffffffffffffff0202ffff300d06092a864886f70d01010b0500030200ff":"":MBEDTLS_ERR_X509_INVALID_NAME + MBEDTLS_ERR_ASN1_OUT_OF_DATA
1458*62c56f98SSadaf Ebrahimi
1459*62c56f98SSadaf EbrahimiX509 CRT ASN1 (TBS, inv Issuer, RDN empty)
1460*62c56f98SSadaf Ebrahimidepends_on:MBEDTLS_RSA_C:MBEDTLS_MD_CAN_SHA256
1461*62c56f98SSadaf Ebrahimix509parse_crt:"30818b3076a0030201028204deadbeef300d06092a864886f70d01010b050030023100301c170c303930313031303030303030170c303931323331323335393539300c310a30080600130454657374302a300d06092A864886F70D010101050003190030160210ffffffffffffffffffffffffffffffff0202ffff300d06092a864886f70d01010b0500030200ff":"":MBEDTLS_ERR_X509_INVALID_NAME + MBEDTLS_ERR_ASN1_OUT_OF_DATA
1462*62c56f98SSadaf Ebrahimi
1463*62c56f98SSadaf EbrahimiX509 CRT ASN1 (TBS, inv Issuer, AttrTypeAndValue inv tag)
1464*62c56f98SSadaf Ebrahimidepends_on:MBEDTLS_RSA_C:MBEDTLS_MD_CAN_SHA256
1465*62c56f98SSadaf Ebrahimix509parse_crt:"30818d3078a0030201028204deadbeef300d06092a864886f70d01010b0500300431020500301c170c303930313031303030303030170c303931323331323335393539300c310a30080600130454657374302a300d06092A864886F70D010101050003190030160210ffffffffffffffffffffffffffffffff0202ffff300d06092a864886f70d01010b0500030200ff":"":MBEDTLS_ERR_X509_INVALID_NAME + MBEDTLS_ERR_ASN1_UNEXPECTED_TAG
1466*62c56f98SSadaf Ebrahimi
1467*62c56f98SSadaf EbrahimiX509 CRT ASN1 (TBS, inv Issuer, AttrTypeAndValue inv length encoding)
1468*62c56f98SSadaf Ebrahimidepends_on:MBEDTLS_RSA_C:MBEDTLS_MD_CAN_SHA256
1469*62c56f98SSadaf Ebrahimix509parse_crt:"30818d3078a0030201028204deadbeef300d06092a864886f70d01010b0500300431023085301c170c303930313031303030303030170c303931323331323335393539300c310a30080600130454657374302a300d06092A864886F70D010101050003190030160210ffffffffffffffffffffffffffffffff0202ffff300d06092a864886f70d01010b0500030200ff":"":MBEDTLS_ERR_X509_INVALID_NAME + MBEDTLS_ERR_ASN1_INVALID_LENGTH
1470*62c56f98SSadaf Ebrahimi
1471*62c56f98SSadaf EbrahimiX509 CRT ASN1 (TBS, inv Issuer, AttrTypeAndValue length out of bounds)
1472*62c56f98SSadaf Ebrahimidepends_on:MBEDTLS_RSA_C:MBEDTLS_MD_CAN_SHA256
1473*62c56f98SSadaf Ebrahimix509parse_crt:"30818d3078a0030201028204deadbeef300d06092a864886f70d01010b0500300431023001301c170c303930313031303030303030170c303931323331323335393539300c310a30080600130454657374302a300d06092A864886F70D010101050003190030160210ffffffffffffffffffffffffffffffff0202ffff300d06092a864886f70d01010b0500030200ff":"":MBEDTLS_ERR_X509_INVALID_NAME + MBEDTLS_ERR_ASN1_OUT_OF_DATA
1474*62c56f98SSadaf Ebrahimi
1475*62c56f98SSadaf EbrahimiX509 CRT ASN1 (TBS, inv Issuer, AttrTypeAndValue empty)
1476*62c56f98SSadaf Ebrahimidepends_on:MBEDTLS_RSA_C:MBEDTLS_MD_CAN_SHA256
1477*62c56f98SSadaf Ebrahimix509parse_crt:"30818d3078a0030201028204deadbeef300d06092a864886f70d01010b0500300431023000301c170c303930313031303030303030170c303931323331323335393539300c310a30080600130454657374302a300d06092A864886F70D010101050003190030160210ffffffffffffffffffffffffffffffff0202ffff300d06092a864886f70d01010b0500030200ff":"":MBEDTLS_ERR_X509_INVALID_NAME + MBEDTLS_ERR_ASN1_OUT_OF_DATA
1478*62c56f98SSadaf Ebrahimi
1479*62c56f98SSadaf EbrahimiX509 CRT ASN1 (TBS, inv Issuer, AttrTypeAndValue type inv tag)
1480*62c56f98SSadaf Ebrahimidepends_on:MBEDTLS_RSA_C:MBEDTLS_MD_CAN_SHA256
1481*62c56f98SSadaf Ebrahimix509parse_crt:"30818f307aa0030201028204deadbeef300d06092a864886f70d01010b05003006310430020500301c170c303930313031303030303030170c303931323331323335393539300c310a30080600130454657374302a300d06092A864886F70D010101050003190030160210ffffffffffffffffffffffffffffffff0202ffff300d06092a864886f70d01010b0500030200ff":"":MBEDTLS_ERR_X509_INVALID_NAME + MBEDTLS_ERR_ASN1_UNEXPECTED_TAG
1482*62c56f98SSadaf Ebrahimi
1483*62c56f98SSadaf EbrahimiX509 CRT ASN1 (TBS, inv Issuer, AttrTypeAndValue type inv no length data)
1484*62c56f98SSadaf Ebrahimidepends_on:MBEDTLS_RSA_C:MBEDTLS_MD_CAN_SHA256
1485*62c56f98SSadaf Ebrahimix509parse_crt:"30818e3079a0030201028204deadbeef300d06092a864886f70d01010b050030053103300106301c170c303930313031303030303030170c303931323331323335393539300c310a30080600130454657374302a300d06092A864886F70D010101050003190030160210ffffffffffffffffffffffffffffffff0202ffff300d06092a864886f70d01010b0500030200ff":"":MBEDTLS_ERR_X509_INVALID_NAME + MBEDTLS_ERR_ASN1_OUT_OF_DATA
1486*62c56f98SSadaf Ebrahimi
1487*62c56f98SSadaf EbrahimiX509 CRT ASN1 (TBS, inv Issuer, AttrTypeAndValue type inv length encoding)
1488*62c56f98SSadaf Ebrahimidepends_on:MBEDTLS_RSA_C:MBEDTLS_MD_CAN_SHA256
1489*62c56f98SSadaf Ebrahimix509parse_crt:"30818f307aa0030201028204deadbeef300d06092a864886f70d01010b05003006310430020685301c170c303930313031303030303030170c303931323331323335393539300c310a30080600130454657374302a300d06092A864886F70D010101050003190030160210ffffffffffffffffffffffffffffffff0202ffff300d06092a864886f70d01010b0500030200ff":"":MBEDTLS_ERR_X509_INVALID_NAME + MBEDTLS_ERR_ASN1_INVALID_LENGTH
1490*62c56f98SSadaf Ebrahimi
1491*62c56f98SSadaf EbrahimiX509 CRT ASN1 (TBS, inv Issuer, AttrTypeAndValue type length out of bounds)
1492*62c56f98SSadaf Ebrahimidepends_on:MBEDTLS_RSA_C:MBEDTLS_MD_CAN_SHA256
1493*62c56f98SSadaf Ebrahimix509parse_crt:"30818f307aa0030201028204deadbeef300d06092a864886f70d01010b05003006310430020601301c170c303930313031303030303030170c303931323331323335393539300c310a30080600130454657374302a300d06092A864886F70D010101050003190030160210ffffffffffffffffffffffffffffffff0202ffff300d06092a864886f70d01010b0500030200ff":"":MBEDTLS_ERR_X509_INVALID_NAME + MBEDTLS_ERR_ASN1_OUT_OF_DATA
1494*62c56f98SSadaf Ebrahimi
1495*62c56f98SSadaf EbrahimiX509 CRT ASN1 (TBS, inv Issuer, AttrTypeAndValue value missing)
1496*62c56f98SSadaf Ebrahimidepends_on:MBEDTLS_RSA_C:MBEDTLS_MD_CAN_SHA256
1497*62c56f98SSadaf Ebrahimix509parse_crt:"30818f307aa0030201028204deadbeef300d06092a864886f70d01010b05003006310430020600301c170c303930313031303030303030170c303931323331323335393539300c310a30080600130454657374302a300d06092A864886F70D010101050003190030160210ffffffffffffffffffffffffffffffff0202ffff300d06092a864886f70d01010b0500030200ff":"":MBEDTLS_ERR_X509_INVALID_NAME + MBEDTLS_ERR_ASN1_OUT_OF_DATA
1498*62c56f98SSadaf Ebrahimi
1499*62c56f98SSadaf EbrahimiX509 CRT ASN1 (TBS, inv Issuer, AttrTypeAndValue value inv tag)
1500*62c56f98SSadaf Ebrahimidepends_on:MBEDTLS_RSA_C:MBEDTLS_MD_CAN_SHA256
1501*62c56f98SSadaf Ebrahimix509parse_crt:"308191307ca0030201028204deadbeef300d06092a864886f70d01010b050030083106300406000500301c170c303930313031303030303030170c303931323331323335393539300c310a30080600130454657374302a300d06092A864886F70D010101050003190030160210ffffffffffffffffffffffffffffffff0202ffff300d06092a864886f70d01010b0500030200ff":"":MBEDTLS_ERR_X509_INVALID_NAME + MBEDTLS_ERR_ASN1_UNEXPECTED_TAG;
1502*62c56f98SSadaf Ebrahimi
1503*62c56f98SSadaf EbrahimiX509 CRT ASN1 (TBS, inv Issuer, AttrTypeAndValue value length missing)
1504*62c56f98SSadaf Ebrahimidepends_on:MBEDTLS_RSA_C:MBEDTLS_MD_CAN_SHA256
1505*62c56f98SSadaf Ebrahimix509parse_crt:"308190307ba0030201028204deadbeef300d06092a864886f70d01010b050030073105300306000c301c170c303930313031303030303030170c303931323331323335393539300c310a30080600130454657374302a300d06092A864886F70D010101050003190030160210ffffffffffffffffffffffffffffffff0202ffff300d06092a864886f70d01010b0500030200ff":"":MBEDTLS_ERR_X509_INVALID_NAME + MBEDTLS_ERR_ASN1_OUT_OF_DATA
1506*62c56f98SSadaf Ebrahimi
1507*62c56f98SSadaf EbrahimiX509 CRT ASN1 (TBS, inv Issuer, AttrTypeAndValue value inv length encoding)
1508*62c56f98SSadaf Ebrahimidepends_on:MBEDTLS_RSA_C:MBEDTLS_MD_CAN_SHA256
1509*62c56f98SSadaf Ebrahimix509parse_crt:"308191307ca0030201028204deadbeef300d06092a864886f70d01010b050030083106300406000C85301c170c303930313031303030303030170c303931323331323335393539300c310a30080600130454657374302a300d06092A864886F70D010101050003190030160210ffffffffffffffffffffffffffffffff0202ffff300d06092a864886f70d01010b0500030200ff":"":MBEDTLS_ERR_X509_INVALID_NAME + MBEDTLS_ERR_ASN1_INVALID_LENGTH
1510*62c56f98SSadaf Ebrahimi
1511*62c56f98SSadaf EbrahimiX509 CRT ASN1 (TBS, inv Issuer, AttrTypeAndValue value length out of bounds)
1512*62c56f98SSadaf Ebrahimidepends_on:MBEDTLS_RSA_C:MBEDTLS_MD_CAN_SHA256
1513*62c56f98SSadaf Ebrahimix509parse_crt:"308191307ca0030201028204deadbeef300d06092a864886f70d01010b050030083106300406000c01301c170c303930313031303030303030170c303931323331323335393539300c310a30080600130454657374302a300d06092A864886F70D010101050003190030160210ffffffffffffffffffffffffffffffff0202ffff300d06092a864886f70d01010b0500030200ff":"":MBEDTLS_ERR_X509_INVALID_NAME + MBEDTLS_ERR_ASN1_OUT_OF_DATA
1514*62c56f98SSadaf Ebrahimi
1515*62c56f98SSadaf EbrahimiX509 CRT ASN1 (TBS, inv Issuer, AttrTypeAndValue value length mismatch)
1516*62c56f98SSadaf Ebrahimidepends_on:MBEDTLS_RSA_C:MBEDTLS_MD_CAN_SHA256
1517*62c56f98SSadaf Ebrahimix509parse_crt:"308193307ea0030201028204deadbeef300d06092a864886f70d01010b0500300a3108300606000c010000301c170c303930313031303030303030170c303931323331323335393539300c310a30080600130454657374302a300d06092A864886F70D010101050003190030160210ffffffffffffffffffffffffffffffff0202ffff300d06092a864886f70d01010b0500030200ff":"":MBEDTLS_ERR_X509_INVALID_NAME + MBEDTLS_ERR_ASN1_LENGTH_MISMATCH
1518*62c56f98SSadaf Ebrahimi
1519*62c56f98SSadaf EbrahimiX509 CRT ASN1 (TBS, inv Issuer, 2nd AttributeTypeValue empty)
1520*62c56f98SSadaf Ebrahimidepends_on:MBEDTLS_RSA_C:MBEDTLS_MD_CAN_SHA256
1521*62c56f98SSadaf Ebrahimix509parse_crt:"308198308182a0030201028204deadbeef300d06092a864886f70d01010b0500300e310c300806000c04546573743000301c170c303930313031303030303030170c303931323331323335393539300c310a30080600130454657374302a300d06092A864886F70D010101050003190030160210ffffffffffffffffffffffffffffffff0202ffff300d06092a864886f70d01010b0500030200ff":"":MBEDTLS_ERR_X509_INVALID_NAME + MBEDTLS_ERR_ASN1_OUT_OF_DATA
1522*62c56f98SSadaf Ebrahimi
1523*62c56f98SSadaf EbrahimiX509 CRT ASN1 (TBS, Validity missing)
1524*62c56f98SSadaf Ebrahimidepends_on:MBEDTLS_RSA_C:MBEDTLS_MD_CAN_SHA256
1525*62c56f98SSadaf Ebrahimix509parse_crt:"303d3028a0030201028204deadbeef300d06092a864886f70d01010b0500300c310a300806000c0454657374300d06092a864886f70d01010b0500030200ff":"":MBEDTLS_ERR_X509_INVALID_DATE + MBEDTLS_ERR_ASN1_OUT_OF_DATA
1526*62c56f98SSadaf Ebrahimi
1527*62c56f98SSadaf EbrahimiX509 CRT ASN1 (TBS, inv Validity, inv tag)
1528*62c56f98SSadaf Ebrahimidepends_on:MBEDTLS_RSA_C:MBEDTLS_MD_CAN_SHA256
1529*62c56f98SSadaf Ebrahimix509parse_crt:"303f302aa0030201028204deadbeef300d06092a864886f70d01010b0500300c310a300806000c04546573740500300d06092a864886f70d01010b0500030200ff":"":MBEDTLS_ERR_X509_INVALID_DATE + MBEDTLS_ERR_ASN1_UNEXPECTED_TAG
1530*62c56f98SSadaf Ebrahimi
1531*62c56f98SSadaf EbrahimiX509 CRT ASN1 (TBS, inv Validity, length field missing)
1532*62c56f98SSadaf Ebrahimidepends_on:MBEDTLS_RSA_C:MBEDTLS_MD_CAN_SHA256
1533*62c56f98SSadaf Ebrahimix509parse_crt:"303e3029a0030201028204deadbeef300d06092a864886f70d01010b0500300c310a300806000c045465737430300d06092a864886f70d01010b0500030200ff":"":MBEDTLS_ERR_X509_INVALID_DATE + MBEDTLS_ERR_ASN1_OUT_OF_DATA
1534*62c56f98SSadaf Ebrahimi
1535*62c56f98SSadaf EbrahimiX509 CRT ASN1 (TBS, inv Validity, inv length encoding)
1536*62c56f98SSadaf Ebrahimidepends_on:MBEDTLS_RSA_C:MBEDTLS_MD_CAN_SHA256
1537*62c56f98SSadaf Ebrahimix509parse_crt:"303f302aa0030201028204deadbeef300d06092a864886f70d01010b0500300c310a300806000c04546573743085300d06092a864886f70d01010b0500030200ff":"":MBEDTLS_ERR_X509_INVALID_DATE + MBEDTLS_ERR_ASN1_INVALID_LENGTH
1538*62c56f98SSadaf Ebrahimi
1539*62c56f98SSadaf EbrahimiX509 CRT ASN1 (TBS, inv Validity, length out of bounds)
1540*62c56f98SSadaf Ebrahimidepends_on:MBEDTLS_RSA_C:MBEDTLS_MD_CAN_SHA256
1541*62c56f98SSadaf Ebrahimix509parse_crt:"303f302aa0030201028204deadbeef300d06092a864886f70d01010b0500300c310a300806000c04546573743001300d06092a864886f70d01010b0500030200ff":"":MBEDTLS_ERR_X509_INVALID_DATE + MBEDTLS_ERR_ASN1_OUT_OF_DATA
1542*62c56f98SSadaf Ebrahimi
1543*62c56f98SSadaf EbrahimiX509 CRT ASN1 (TBS, inv Validity, notBefore missing)
1544*62c56f98SSadaf Ebrahimidepends_on:MBEDTLS_RSA_C:MBEDTLS_MD_CAN_SHA256
1545*62c56f98SSadaf Ebrahimix509parse_crt:"30793064a0030201028204deadbeef300d06092a864886f70d01010b0500300c310a300806000c04546573743000300c310a30080600130454657374302a300d06092A864886F70D010101050003190030160210ffffffffffffffffffffffffffffffff0202ffff300d06092a864886f70d01010b0500030200ff":"":MBEDTLS_ERR_X509_INVALID_DATE + MBEDTLS_ERR_ASN1_OUT_OF_DATA
1546*62c56f98SSadaf Ebrahimi
1547*62c56f98SSadaf EbrahimiX509 CRT ASN1 (TBS, inv Validity, notBefore inv tag)
1548*62c56f98SSadaf Ebrahimidepends_on:MBEDTLS_RSA_C:MBEDTLS_MD_CAN_SHA256
1549*62c56f98SSadaf Ebrahimix509parse_crt:"307b3066a0030201028204deadbeef300d06092a864886f70d01010b0500300c310a300806000c045465737430020500300c310a30080600130454657374302a300d06092A864886F70D010101050003190030160210ffffffffffffffffffffffffffffffff0202ffff300d06092a864886f70d01010b0500030200ff":"":MBEDTLS_ERR_X509_INVALID_DATE + MBEDTLS_ERR_ASN1_UNEXPECTED_TAG
1550*62c56f98SSadaf Ebrahimi
1551*62c56f98SSadaf EbrahimiX509 CRT ASN1 (TBS, inv Validity, notBefore no length)
1552*62c56f98SSadaf Ebrahimidepends_on:MBEDTLS_RSA_C:MBEDTLS_MD_CAN_SHA256
1553*62c56f98SSadaf Ebrahimix509parse_crt:"307a3065a0030201028204deadbeef300d06092a864886f70d01010b0500300c310a300806000c0454657374300117300c310a30080600130454657374302a300d06092A864886F70D010101050003190030160210ffffffffffffffffffffffffffffffff0202ffff300d06092a864886f70d01010b0500030200ff":"":MBEDTLS_ERR_X509_INVALID_DATE + MBEDTLS_ERR_ASN1_OUT_OF_DATA
1554*62c56f98SSadaf Ebrahimi
1555*62c56f98SSadaf EbrahimiX509 CRT ASN1 (TBS, inv Validity, notBefore inv length encoding)
1556*62c56f98SSadaf Ebrahimidepends_on:MBEDTLS_RSA_C:MBEDTLS_MD_CAN_SHA256
1557*62c56f98SSadaf Ebrahimix509parse_crt:"307b3066a0030201028204deadbeef300d06092a864886f70d01010b0500300c310a300806000c04546573743002178f300c310a30080600130454657374302a300d06092A864886F70D010101050003190030160210ffffffffffffffffffffffffffffffff0202ffff300d06092a864886f70d01010b0500030200ff":"":MBEDTLS_ERR_X509_INVALID_DATE + MBEDTLS_ERR_ASN1_INVALID_LENGTH
1558*62c56f98SSadaf Ebrahimi
1559*62c56f98SSadaf EbrahimiX509 CRT ASN1 (TBS, inv Validity, notBefore length out of bounds)
1560*62c56f98SSadaf Ebrahimidepends_on:MBEDTLS_RSA_C:MBEDTLS_MD_CAN_SHA256
1561*62c56f98SSadaf Ebrahimix509parse_crt:"307b3066a0030201028204deadbeef300d06092a864886f70d01010b0500300c310a300806000c045465737430021701300c310a30080600130454657374302a300d06092A864886F70D010101050003190030160210ffffffffffffffffffffffffffffffff0202ffff300d06092a864886f70d01010b0500030200ff":"":MBEDTLS_ERR_X509_INVALID_DATE + MBEDTLS_ERR_ASN1_OUT_OF_DATA
1562*62c56f98SSadaf Ebrahimi
1563*62c56f98SSadaf EbrahimiX509 CRT ASN1 (TBS, inv Validity, notBefore empty)
1564*62c56f98SSadaf Ebrahimidepends_on:MBEDTLS_RSA_C:MBEDTLS_MD_CAN_SHA256
1565*62c56f98SSadaf Ebrahimix509parse_crt:"3081893074a0030201008204deadbeef300d06092a864886f70d01010b0500300c310a3008060013045465737430101700170c303931323331323335393539300c310a30080600130454657374302a300d06092A864886F70D010101050003190030160210ffffffffffffffffffffffffffffffff0202ffff300d06092a864886f70d01010b0500030200ff":"":MBEDTLS_ERR_X509_INVALID_DATE
1566*62c56f98SSadaf Ebrahimi
1567*62c56f98SSadaf EbrahimiX509 CRT ASN1 (TBS, inv Validity, notBefore invalid)
1568*62c56f98SSadaf Ebrahimidepends_on:MBEDTLS_RSA_C:MBEDTLS_MD_CAN_SHA256
1569*62c56f98SSadaf Ebrahimix509parse_crt:"308196308180a0030201008204deadbeef300d06092a864886f70d01010b0500300c310a30080600130454657374301c170c303930313031303000000000170c303931323331323335393539300c310a30080600130454657374302a300d06092A864886F70D010101050003190030160210ffffffffffffffffffffffffffffffff0202ffff300d06092a864886f70d01010b0500030200ff":"":MBEDTLS_ERR_X509_INVALID_DATE
1570*62c56f98SSadaf Ebrahimi
1571*62c56f98SSadaf EbrahimiX509 CRT ASN1 (TBS, inv Validity, notAfter missing)
1572*62c56f98SSadaf Ebrahimidepends_on:MBEDTLS_RSA_C:MBEDTLS_MD_CAN_SHA256
1573*62c56f98SSadaf Ebrahimix509parse_crt:"3081873072a0030201008204deadbeef300d06092a864886f70d01010b0500300c310a30080600130454657374300e170c303931323331323335393539300c310a30080600130454657374302a300d06092A864886F70D010101050003190030160210ffffffffffffffffffffffffffffffff0202ffff300d06092a864886f70d01010b0500030200ff":"":MBEDTLS_ERR_X509_INVALID_DATE + MBEDTLS_ERR_ASN1_OUT_OF_DATA
1574*62c56f98SSadaf Ebrahimi
1575*62c56f98SSadaf EbrahimiX509 CRT ASN1 (TBS, inv Validity, notAfter inv tag)
1576*62c56f98SSadaf Ebrahimidepends_on:MBEDTLS_RSA_C:MBEDTLS_MD_CAN_SHA256
1577*62c56f98SSadaf Ebrahimix509parse_crt:"3081893074a0030201008204deadbeef300d06092a864886f70d01010b0500300c310a300806001304546573743010170c3039313233313233353935390500300c310a30080600130454657374302a300d06092A864886F70D010101050003190030160210ffffffffffffffffffffffffffffffff0202ffff300d06092a864886f70d01010b0500030200ff":"":MBEDTLS_ERR_X509_INVALID_DATE + MBEDTLS_ERR_ASN1_UNEXPECTED_TAG
1578*62c56f98SSadaf Ebrahimi
1579*62c56f98SSadaf EbrahimiX509 CRT ASN1 (TBS, inv Validity, notAfter length missing)
1580*62c56f98SSadaf Ebrahimidepends_on:MBEDTLS_RSA_C:MBEDTLS_MD_CAN_SHA256
1581*62c56f98SSadaf Ebrahimix509parse_crt:"3081883073a0030201008204deadbeef300d06092a864886f70d01010b0500300c310a30080600130454657374300f170c30393132333132333539353917300c310a30080600130454657374302a300d06092A864886F70D010101050003190030160210ffffffffffffffffffffffffffffffff0202ffff300d06092a864886f70d01010b0500030200ff":"":MBEDTLS_ERR_X509_INVALID_DATE + MBEDTLS_ERR_ASN1_OUT_OF_DATA
1582*62c56f98SSadaf Ebrahimi
1583*62c56f98SSadaf EbrahimiX509 CRT ASN1 (TBS, inv Validity, notAfter inv length encoding)
1584*62c56f98SSadaf Ebrahimidepends_on:MBEDTLS_RSA_C:MBEDTLS_MD_CAN_SHA256
1585*62c56f98SSadaf Ebrahimix509parse_crt:"3081893074a0030201008204deadbeef300d06092a864886f70d01010b0500300c310a300806001304546573743010170c3039313233313233353935391785300c310a30080600130454657374302a300d06092A864886F70D010101050003190030160210ffffffffffffffffffffffffffffffff0202ffff300d06092a864886f70d01010b0500030200ff":"":MBEDTLS_ERR_X509_INVALID_DATE + MBEDTLS_ERR_ASN1_INVALID_LENGTH
1586*62c56f98SSadaf Ebrahimi
1587*62c56f98SSadaf EbrahimiX509 CRT ASN1 (TBS, inv Validity, notAfter length out of bounds)
1588*62c56f98SSadaf Ebrahimidepends_on:MBEDTLS_RSA_C:MBEDTLS_MD_CAN_SHA256
1589*62c56f98SSadaf Ebrahimix509parse_crt:"3081893074a0030201008204deadbeef300d06092a864886f70d01010b0500300c310a300806001304546573743010170c3039313233313233353935391701300c310a30080600130454657374302a300d06092A864886F70D010101050003190030160210ffffffffffffffffffffffffffffffff0202ffff300d06092a864886f70d01010b0500030200ff":"":MBEDTLS_ERR_X509_INVALID_DATE + MBEDTLS_ERR_ASN1_OUT_OF_DATA
1590*62c56f98SSadaf Ebrahimi
1591*62c56f98SSadaf EbrahimiX509 CRT ASN1 (TBS, inv Validity, notAfter empty)
1592*62c56f98SSadaf Ebrahimidepends_on:MBEDTLS_RSA_C:MBEDTLS_MD_CAN_SHA256
1593*62c56f98SSadaf Ebrahimix509parse_crt:"3081893074a0030201008204deadbeef300d06092a864886f70d01010b0500300c310a300806001304546573743010170c3039313233313233353935391700300c310a30080600130454657374302a300d06092A864886F70D010101050003190030160210ffffffffffffffffffffffffffffffff0202ffff300d06092a864886f70d01010b0500030200ff":"":MBEDTLS_ERR_X509_INVALID_DATE
1594*62c56f98SSadaf Ebrahimi
1595*62c56f98SSadaf EbrahimiX509 CRT ASN1 (TBS, inv Validity, notAfter invalid)
1596*62c56f98SSadaf Ebrahimidepends_on:MBEDTLS_RSA_C:MBEDTLS_MD_CAN_SHA256
1597*62c56f98SSadaf Ebrahimix509parse_crt:"308196308180a0030201008204deadbeef300d06092a864886f70d01010b0500300c310a30080600130454657374301c170c303931323331323335393539170c303930313031303000000000300c310a30080600130454657374302a300d06092A864886F70D010101050003190030160210ffffffffffffffffffffffffffffffff0202ffff300d06092a864886f70d01010b0500030200ff":"":MBEDTLS_ERR_X509_INVALID_DATE
1598*62c56f98SSadaf Ebrahimi
1599*62c56f98SSadaf EbrahimiX509 CRT ASN1 (TBS, inv Validity, data remaining after 'notAfter')
1600*62c56f98SSadaf Ebrahimidepends_on:MBEDTLS_RSA_C:MBEDTLS_MD_CAN_SHA256
1601*62c56f98SSadaf Ebrahimix509parse_crt:"308198308182a0030201008204deadbeef300d06092a864886f70d01010b0500300c310a30080600130454657374301e170c303930313031303030303030170c3039313233313233353935391700300c310a30080600130454657374302a300d06092A864886F70D010101050003190030160210ffffffffffffffffffffffffffffffff0202ffff300d06092a864886f70d01010b0500030200ff":"":MBEDTLS_ERR_X509_INVALID_DATE + MBEDTLS_ERR_ASN1_LENGTH_MISMATCH
1602*62c56f98SSadaf Ebrahimi
1603*62c56f98SSadaf EbrahimiX509 CRT ASN1 (TBS, Subject missing)
1604*62c56f98SSadaf Ebrahimidepends_on:MBEDTLS_RSA_C:MBEDTLS_MD_CAN_SHA256
1605*62c56f98SSadaf Ebrahimix509parse_crt:"305b3046a0030201008204deadbeef300d06092a864886f70d01010b0500300c310a30080600130454657374301c170c303930313031303030303030170c303931323331323335393539300d06092a864886f70d01010b0500030200ff":"":MBEDTLS_ERR_X509_INVALID_FORMAT + MBEDTLS_ERR_ASN1_OUT_OF_DATA
1606*62c56f98SSadaf Ebrahimi
1607*62c56f98SSadaf EbrahimiX509 CRT ASN1 (TBS, inv Subject, RDNSequence inv tag)
1608*62c56f98SSadaf Ebrahimidepends_on:MBEDTLS_RSA_C:MBEDTLS_MD_CAN_SHA256
1609*62c56f98SSadaf Ebrahimix509parse_crt:"305c3047a0030201008204deadbeef300d06092a864886f70d01010b0500300c310a30080600130454657374301c170c303930313031303030303030170c30393132333132333539353900300d06092a864886f70d01010b0500030200ff":"":MBEDTLS_ERR_X509_INVALID_FORMAT + MBEDTLS_ERR_ASN1_UNEXPECTED_TAG
1610*62c56f98SSadaf Ebrahimi
1611*62c56f98SSadaf EbrahimiX509 CRT ASN1 (TBS, inv Subject, RDNSequence length missing)
1612*62c56f98SSadaf Ebrahimidepends_on:MBEDTLS_RSA_C:MBEDTLS_MD_CAN_SHA256
1613*62c56f98SSadaf Ebrahimix509parse_crt:"305c3047a0030201008204deadbeef300d06092a864886f70d01010b0500300c310a30080600130454657374301c170c303930313031303030303030170c30393132333132333539353930300d06092a864886f70d01010b0500030200ff":"":MBEDTLS_ERR_X509_INVALID_FORMAT + MBEDTLS_ERR_ASN1_OUT_OF_DATA
1614*62c56f98SSadaf Ebrahimi
1615*62c56f98SSadaf EbrahimiX509 CRT ASN1 (TBS, inv Subject, RDNSequence inv length encoding)
1616*62c56f98SSadaf Ebrahimidepends_on:MBEDTLS_RSA_C:MBEDTLS_MD_CAN_SHA256
1617*62c56f98SSadaf Ebrahimix509parse_crt:"305d3048a0030201008204deadbeef300d06092a864886f70d01010b0500300c310a30080600130454657374301c170c303930313031303030303030170c3039313233313233353935393085300d06092a864886f70d01010b0500030200ff":"":MBEDTLS_ERR_X509_INVALID_FORMAT + MBEDTLS_ERR_ASN1_INVALID_LENGTH
1618*62c56f98SSadaf Ebrahimi
1619*62c56f98SSadaf EbrahimiX509 CRT ASN1 (TBS, inv Subject, RDNSequence length out of bounds)
1620*62c56f98SSadaf Ebrahimidepends_on:MBEDTLS_RSA_C:MBEDTLS_MD_CAN_SHA256
1621*62c56f98SSadaf Ebrahimix509parse_crt:"305d3048a0030201008204deadbeef300d06092a864886f70d01010b0500300c310a30080600130454657374301c170c303930313031303030303030170c3039313233313233353935393001300d06092a864886f70d01010b0500030200ff":"":MBEDTLS_ERR_X509_INVALID_FORMAT + MBEDTLS_ERR_ASN1_OUT_OF_DATA
1622*62c56f98SSadaf Ebrahimi
1623*62c56f98SSadaf EbrahimiX509 CRT ASN1 (TBS, inv Subject, RDN inv tag)
1624*62c56f98SSadaf Ebrahimidepends_on:MBEDTLS_RSA_C:MBEDTLS_MD_CAN_SHA256
1625*62c56f98SSadaf Ebrahimix509parse_crt:"30818b3076a0030201028204deadbeef300d06092a864886f70d01010b0500300c310a30080600130454657374301c170c303930313031303030303030170c30393132333132333539353930020500302a300d06092A864886F70D010101050003190030160210ffffffffffffffffffffffffffffffff0202ffff300d06092a864886f70d01010b0500030200ff":"":MBEDTLS_ERR_X509_INVALID_NAME + MBEDTLS_ERR_ASN1_UNEXPECTED_TAG
1626*62c56f98SSadaf Ebrahimi
1627*62c56f98SSadaf EbrahimiX509 CRT ASN1 (TBS, inv Subject, RDN inv length encoding)
1628*62c56f98SSadaf Ebrahimidepends_on:MBEDTLS_RSA_C:MBEDTLS_MD_CAN_SHA256
1629*62c56f98SSadaf Ebrahimix509parse_crt:"30818b3076a0030201028204deadbeef300d06092a864886f70d01010b0500300c310a30080600130454657374301c170c303930313031303030303030170c30393132333132333539353930023185302a300d06092A864886F70D010101050003190030160210ffffffffffffffffffffffffffffffff0202ffff300d06092a864886f70d01010b0500030200ff":"":MBEDTLS_ERR_X509_INVALID_NAME + MBEDTLS_ERR_ASN1_INVALID_LENGTH
1630*62c56f98SSadaf Ebrahimi
1631*62c56f98SSadaf EbrahimiX509 CRT ASN1 (TBS, inv Subject, RDN length out of bounds)
1632*62c56f98SSadaf Ebrahimidepends_on:MBEDTLS_RSA_C:MBEDTLS_MD_CAN_SHA256
1633*62c56f98SSadaf Ebrahimix509parse_crt:"30818b3076a0030201028204deadbeef300d06092a864886f70d01010b0500300c310a30080600130454657374301c170c303930313031303030303030170c30393132333132333539353930023101302a300d06092A864886F70D010101050003190030160210ffffffffffffffffffffffffffffffff0202ffff300d06092a864886f70d01010b0500030200ff":"":MBEDTLS_ERR_X509_INVALID_NAME + MBEDTLS_ERR_ASN1_OUT_OF_DATA
1634*62c56f98SSadaf Ebrahimi
1635*62c56f98SSadaf EbrahimiX509 CRT ASN1 (TBS, inv Subject, RDN empty)
1636*62c56f98SSadaf Ebrahimidepends_on:MBEDTLS_RSA_C:MBEDTLS_MD_CAN_SHA256
1637*62c56f98SSadaf Ebrahimix509parse_crt:"30818b3076a0030201028204deadbeef300d06092a864886f70d01010b0500300c310a30080600130454657374301c170c303930313031303030303030170c30393132333132333539353930023100302a300d06092A864886F70D010101050003190030160210ffffffffffffffffffffffffffffffff0202ffff300d06092a864886f70d01010b0500030200ff":"":MBEDTLS_ERR_X509_INVALID_NAME + MBEDTLS_ERR_ASN1_OUT_OF_DATA
1638*62c56f98SSadaf Ebrahimi
1639*62c56f98SSadaf EbrahimiX509 CRT ASN1 (TBS, inv Subject, AttrTypeAndValue inv tag)
1640*62c56f98SSadaf Ebrahimidepends_on:MBEDTLS_RSA_C:MBEDTLS_MD_CAN_SHA256
1641*62c56f98SSadaf Ebrahimix509parse_crt:"30818d3078a0030201028204deadbeef300d06092a864886f70d01010b0500300c310a30080600130454657374301c170c303930313031303030303030170c303931323331323335393539300431020500302a300d06092A864886F70D010101050003190030160210ffffffffffffffffffffffffffffffff0202ffff300d06092a864886f70d01010b0500030200ff":"":MBEDTLS_ERR_X509_INVALID_NAME + MBEDTLS_ERR_ASN1_UNEXPECTED_TAG
1642*62c56f98SSadaf Ebrahimi
1643*62c56f98SSadaf EbrahimiX509 CRT ASN1 (TBS, inv Subject, AttrTypeAndValue inv length encoding)
1644*62c56f98SSadaf Ebrahimidepends_on:MBEDTLS_RSA_C:MBEDTLS_MD_CAN_SHA256
1645*62c56f98SSadaf Ebrahimix509parse_crt:"30818d3078a0030201028204deadbeef300d06092a864886f70d01010b0500300c310a30080600130454657374301c170c303930313031303030303030170c303931323331323335393539300431023085302a300d06092A864886F70D010101050003190030160210ffffffffffffffffffffffffffffffff0202ffff300d06092a864886f70d01010b0500030200ff":"":MBEDTLS_ERR_X509_INVALID_NAME + MBEDTLS_ERR_ASN1_INVALID_LENGTH
1646*62c56f98SSadaf Ebrahimi
1647*62c56f98SSadaf EbrahimiX509 CRT ASN1 (TBS, inv Subject, AttrTypeAndValue length out of bounds)
1648*62c56f98SSadaf Ebrahimidepends_on:MBEDTLS_RSA_C:MBEDTLS_MD_CAN_SHA256
1649*62c56f98SSadaf Ebrahimix509parse_crt:"30818d3078a0030201028204deadbeef300d06092a864886f70d01010b0500300c310a30080600130454657374301c170c303930313031303030303030170c303931323331323335393539300431023001302a300d06092A864886F70D010101050003190030160210ffffffffffffffffffffffffffffffff0202ffff300d06092a864886f70d01010b0500030200ff":"":MBEDTLS_ERR_X509_INVALID_NAME + MBEDTLS_ERR_ASN1_OUT_OF_DATA
1650*62c56f98SSadaf Ebrahimi
1651*62c56f98SSadaf EbrahimiX509 CRT ASN1 (TBS, inv Subject, AttrTypeAndValue empty)
1652*62c56f98SSadaf Ebrahimidepends_on:MBEDTLS_RSA_C:MBEDTLS_MD_CAN_SHA256
1653*62c56f98SSadaf Ebrahimix509parse_crt:"30818d3078a0030201028204deadbeef300d06092a864886f70d01010b0500300c310a30080600130454657374301c170c303930313031303030303030170c303931323331323335393539300431023000302a300d06092A864886F70D010101050003190030160210ffffffffffffffffffffffffffffffff0202ffff300d06092a864886f70d01010b0500030200ff":"":MBEDTLS_ERR_X509_INVALID_NAME + MBEDTLS_ERR_ASN1_OUT_OF_DATA
1654*62c56f98SSadaf Ebrahimi
1655*62c56f98SSadaf EbrahimiX509 CRT ASN1 (TBS, inv Subject, AttrTypeAndValue type inv tag)
1656*62c56f98SSadaf Ebrahimidepends_on:MBEDTLS_RSA_C:MBEDTLS_MD_CAN_SHA256
1657*62c56f98SSadaf Ebrahimix509parse_crt:"30818f307aa0030201028204deadbeef300d06092a864886f70d01010b0500300c310a30080600130454657374301c170c303930313031303030303030170c3039313233313233353935393006310430020500302a300d06092A864886F70D010101050003190030160210ffffffffffffffffffffffffffffffff0202ffff300d06092a864886f70d01010b0500030200ff":"":MBEDTLS_ERR_X509_INVALID_NAME + MBEDTLS_ERR_ASN1_UNEXPECTED_TAG
1658*62c56f98SSadaf Ebrahimi
1659*62c56f98SSadaf EbrahimiX509 CRT ASN1 (TBS, inv Subject, AttrTypeAndValue type inv no length data)
1660*62c56f98SSadaf Ebrahimidepends_on:MBEDTLS_RSA_C:MBEDTLS_MD_CAN_SHA256
1661*62c56f98SSadaf Ebrahimix509parse_crt:"30818e3079a0030201028204deadbeef300d06092a864886f70d01010b0500300c310a30080600130454657374301c170c303930313031303030303030170c30393132333132333539353930053103300106302a300d06092A864886F70D010101050003190030160210ffffffffffffffffffffffffffffffff0202ffff300d06092a864886f70d01010b0500030200ff":"":MBEDTLS_ERR_X509_INVALID_NAME + MBEDTLS_ERR_ASN1_OUT_OF_DATA
1662*62c56f98SSadaf Ebrahimi
1663*62c56f98SSadaf EbrahimiX509 CRT ASN1 (TBS, inv Subject, AttrTypeAndValue type inv length encoding)
1664*62c56f98SSadaf Ebrahimidepends_on:MBEDTLS_RSA_C:MBEDTLS_MD_CAN_SHA256
1665*62c56f98SSadaf Ebrahimix509parse_crt:"30818f307aa0030201028204deadbeef300d06092a864886f70d01010b0500300c310a30080600130454657374301c170c303930313031303030303030170c3039313233313233353935393006310430020685302a300d06092A864886F70D010101050003190030160210ffffffffffffffffffffffffffffffff0202ffff300d06092a864886f70d01010b0500030200ff":"":MBEDTLS_ERR_X509_INVALID_NAME + MBEDTLS_ERR_ASN1_INVALID_LENGTH
1666*62c56f98SSadaf Ebrahimi
1667*62c56f98SSadaf EbrahimiX509 CRT ASN1 (TBS, inv Subject, AttrTypeAndValue type length out of bounds )
1668*62c56f98SSadaf Ebrahimidepends_on:MBEDTLS_RSA_C:MBEDTLS_MD_CAN_SHA256
1669*62c56f98SSadaf Ebrahimix509parse_crt:"30818f307aa0030201028204deadbeef300d06092a864886f70d01010b0500300c310a30080600130454657374301c170c303930313031303030303030170c3039313233313233353935393006310430020601302a300d06092A864886F70D010101050003190030160210ffffffffffffffffffffffffffffffff0202ffff300d06092a864886f70d01010b0500030200ff":"":MBEDTLS_ERR_X509_INVALID_NAME + MBEDTLS_ERR_ASN1_OUT_OF_DATA
1670*62c56f98SSadaf Ebrahimi
1671*62c56f98SSadaf EbrahimiX509 CRT ASN1 (TBS, inv Subject, AttrTypeAndValue value missing)
1672*62c56f98SSadaf Ebrahimidepends_on:MBEDTLS_RSA_C:MBEDTLS_MD_CAN_SHA256
1673*62c56f98SSadaf Ebrahimix509parse_crt:"30818f307aa0030201028204deadbeef300d06092a864886f70d01010b0500300c310a30080600130454657374301c170c303930313031303030303030170c3039313233313233353935393006310430020600302a300d06092A864886F70D010101050003190030160210ffffffffffffffffffffffffffffffff0202ffff300d06092a864886f70d01010b0500030200ff":"":MBEDTLS_ERR_X509_INVALID_NAME + MBEDTLS_ERR_ASN1_OUT_OF_DATA
1674*62c56f98SSadaf Ebrahimi
1675*62c56f98SSadaf EbrahimiX509 CRT ASN1 (TBS, inv Subject, AttrTypeAndValue value inv tag)
1676*62c56f98SSadaf Ebrahimidepends_on:MBEDTLS_RSA_C:MBEDTLS_MD_CAN_SHA256
1677*62c56f98SSadaf Ebrahimix509parse_crt:"308191307ca0030201028204deadbeef300d06092a864886f70d01010b0500300c310a30080600130454657374301c170c303930313031303030303030170c30393132333132333539353930083106300406000500302a300d06092A864886F70D010101050003190030160210ffffffffffffffffffffffffffffffff0202ffff300d06092a864886f70d01010b0500030200ff":"":MBEDTLS_ERR_X509_INVALID_NAME + MBEDTLS_ERR_ASN1_UNEXPECTED_TAG;
1678*62c56f98SSadaf Ebrahimi
1679*62c56f98SSadaf EbrahimiX509 CRT ASN1 (TBS, inv Subject, AttrTypeAndValue value length missing)
1680*62c56f98SSadaf Ebrahimidepends_on:MBEDTLS_RSA_C:MBEDTLS_MD_CAN_SHA256
1681*62c56f98SSadaf Ebrahimix509parse_crt:"308190307ba0030201028204deadbeef300d06092a864886f70d01010b0500300c310a30080600130454657374301c170c303930313031303030303030170c30393132333132333539353930073105300306000c302a300d06092A864886F70D010101050003190030160210ffffffffffffffffffffffffffffffff0202ffff300d06092a864886f70d01010b0500030200ff":"":MBEDTLS_ERR_X509_INVALID_NAME + MBEDTLS_ERR_ASN1_OUT_OF_DATA
1682*62c56f98SSadaf Ebrahimi
1683*62c56f98SSadaf EbrahimiX509 CRT ASN1 (TBS, inv Subject, AttrTypeAndValue value inv length encoding)
1684*62c56f98SSadaf Ebrahimidepends_on:MBEDTLS_RSA_C:MBEDTLS_MD_CAN_SHA256
1685*62c56f98SSadaf Ebrahimix509parse_crt:"308191307ca0030201028204deadbeef300d06092a864886f70d01010b0500300c310a30080600130454657374301c170c303930313031303030303030170c30393132333132333539353930083106300406000C85302a300d06092A864886F70D010101050003190030160210ffffffffffffffffffffffffffffffff0202ffff300d06092a864886f70d01010b0500030200ff":"":MBEDTLS_ERR_X509_INVALID_NAME + MBEDTLS_ERR_ASN1_INVALID_LENGTH
1686*62c56f98SSadaf Ebrahimi
1687*62c56f98SSadaf EbrahimiX509 CRT ASN1 (TBS, inv Subject, AttrTypeAndValue value length out of bounds)
1688*62c56f98SSadaf Ebrahimidepends_on:MBEDTLS_RSA_C:MBEDTLS_MD_CAN_SHA256
1689*62c56f98SSadaf Ebrahimix509parse_crt:"308191307ca0030201028204deadbeef300d06092a864886f70d01010b0500300c310a30080600130454657374301c170c303930313031303030303030170c30393132333132333539353930083106300406000c01302a300d06092A864886F70D010101050003190030160210ffffffffffffffffffffffffffffffff0202ffff300d06092a864886f70d01010b0500030200ff":"":MBEDTLS_ERR_X509_INVALID_NAME + MBEDTLS_ERR_ASN1_OUT_OF_DATA
1690*62c56f98SSadaf Ebrahimi
1691*62c56f98SSadaf EbrahimiX509 CRT ASN1 (TBS, inv Subject, AttrTypeAndValue value length mismatch)
1692*62c56f98SSadaf Ebrahimidepends_on:MBEDTLS_RSA_C:MBEDTLS_MD_CAN_SHA256
1693*62c56f98SSadaf Ebrahimix509parse_crt:"308193307ea0030201028204deadbeef300d06092a864886f70d01010b0500300c310a30080600130454657374301c170c303930313031303030303030170c303931323331323335393539300a3108300606000c010000302a300d06092A864886F70D010101050003190030160210ffffffffffffffffffffffffffffffff0202ffff300d06092a864886f70d01010b0500030200ff":"":MBEDTLS_ERR_X509_INVALID_NAME + MBEDTLS_ERR_ASN1_LENGTH_MISMATCH
1694*62c56f98SSadaf Ebrahimi
1695*62c56f98SSadaf EbrahimiX509 CRT ASN1 (TBS, inv Subject, 2nd AttributeTypeValue empty)
1696*62c56f98SSadaf Ebrahimidepends_on:MBEDTLS_RSA_C:MBEDTLS_MD_CAN_SHA256
1697*62c56f98SSadaf Ebrahimix509parse_crt:"308198308182a0030201028204deadbeef300d06092a864886f70d01010b0500300c310a30080600130454657374301c170c303930313031303030303030170c303931323331323335393539300e310c300806000c04546573743000302a300d06092A864886F70D010101050003190030160210ffffffffffffffffffffffffffffffff0202ffff300d06092a864886f70d01010b0500030200ff":"":MBEDTLS_ERR_X509_INVALID_NAME + MBEDTLS_ERR_ASN1_OUT_OF_DATA
1698*62c56f98SSadaf Ebrahimi
1699*62c56f98SSadaf EbrahimiX509 CRT ASN1 (TBS, SubPubKeyInfo missing)
1700*62c56f98SSadaf Ebrahimidepends_on:MBEDTLS_RSA_C:MBEDTLS_MD_CAN_SHA256
1701*62c56f98SSadaf Ebrahimix509parse_crt:"30693054a0030201008204deadbeef300d06092a864886f70d01010b0500300c310a30080600130454657374301c170c303930313031303030303030170c303931323331323335393539300c310a30080600130454657374300d06092a864886f70d01010b0500030200ff":"":MBEDTLS_ERR_PK_KEY_INVALID_FORMAT + MBEDTLS_ERR_ASN1_OUT_OF_DATA
1702*62c56f98SSadaf Ebrahimi
1703*62c56f98SSadaf EbrahimiX509 CRT ASN1 (TBS, inv SubPubKeyInfo, inv tag)
1704*62c56f98SSadaf Ebrahimidepends_on:MBEDTLS_RSA_C:MBEDTLS_MD_CAN_SHA256
1705*62c56f98SSadaf Ebrahimix509parse_crt:"306b3056a0030201008204deadbeef300d06092a864886f70d01010b0500300c310a30080600130454657374301c170c303930313031303030303030170c303931323331323335393539300c310a300806001304546573740500300d06092a864886f70d01010b0500030200ff":"":MBEDTLS_ERR_PK_KEY_INVALID_FORMAT + MBEDTLS_ERR_ASN1_UNEXPECTED_TAG
1706*62c56f98SSadaf Ebrahimi
1707*62c56f98SSadaf EbrahimiX509 CRT ASN1 (TBS, inv SubPubKeyInfo, length missing)
1708*62c56f98SSadaf Ebrahimidepends_on:MBEDTLS_RSA_C:MBEDTLS_MD_CAN_SHA256
1709*62c56f98SSadaf Ebrahimix509parse_crt:"306a3055a0030201008204deadbeef300d06092a864886f70d01010b0500300c310a30080600130454657374301c170c303930313031303030303030170c303931323331323335393539300c310a3008060013045465737430300d06092a864886f70d01010b0500030200ff":"":MBEDTLS_ERR_PK_KEY_INVALID_FORMAT + MBEDTLS_ERR_ASN1_OUT_OF_DATA
1710*62c56f98SSadaf Ebrahimi
1711*62c56f98SSadaf EbrahimiX509 CRT ASN1 (TBS, inv SubPubKeyInfo, inv length encoding)
1712*62c56f98SSadaf Ebrahimidepends_on:MBEDTLS_RSA_C:MBEDTLS_MD_CAN_SHA256
1713*62c56f98SSadaf Ebrahimix509parse_crt:"306b3056a0030201008204deadbeef300d06092a864886f70d01010b0500300c310a30080600130454657374301c170c303930313031303030303030170c303931323331323335393539300c310a300806001304546573743085300d06092a864886f70d01010b0500030200ff":"":MBEDTLS_ERR_PK_KEY_INVALID_FORMAT + MBEDTLS_ERR_ASN1_INVALID_LENGTH
1714*62c56f98SSadaf Ebrahimi
1715*62c56f98SSadaf EbrahimiX509 CRT ASN1 (TBS, inv SubPubKeyInfo, length out of bounds)
1716*62c56f98SSadaf Ebrahimidepends_on:MBEDTLS_RSA_C:MBEDTLS_MD_CAN_SHA256
1717*62c56f98SSadaf Ebrahimix509parse_crt:"306b3056a0030201008204deadbeef300d06092a864886f70d01010b0500300c310a30080600130454657374301c170c303930313031303030303030170c303931323331323335393539300c310a300806001304546573743001300d06092a864886f70d01010b0500030200ff":"":MBEDTLS_ERR_PK_KEY_INVALID_FORMAT + MBEDTLS_ERR_ASN1_OUT_OF_DATA
1718*62c56f98SSadaf Ebrahimi
1719*62c56f98SSadaf EbrahimiX509 CRT ASN1 (TBS, inv SubPubKeyInfo, empty)
1720*62c56f98SSadaf Ebrahimidepends_on:MBEDTLS_RSA_C:MBEDTLS_MD_CAN_SHA256
1721*62c56f98SSadaf Ebrahimix509parse_crt:"306b3056a0030201008204deadbeef300d06092a864886f70d01010b0500300c310a30080600130454657374301c170c303930313031303030303030170c303931323331323335393539300c310a300806001304546573743000300d06092a864886f70d01010b0500030200ff":"":MBEDTLS_ERR_PK_INVALID_ALG + MBEDTLS_ERR_ASN1_OUT_OF_DATA
1722*62c56f98SSadaf Ebrahimi
1723*62c56f98SSadaf EbrahimiX509 CRT ASN1 (TBS, inv SubPubKeyInfo, inv algorithm tag)
1724*62c56f98SSadaf Ebrahimidepends_on:MBEDTLS_RSA_C:MBEDTLS_MD_CAN_SHA256
1725*62c56f98SSadaf Ebrahimix509parse_crt:"306d3058a0030201008204deadbeef300d06092a864886f70d01010b0500300c310a30080600130454657374301c170c303930313031303030303030170c303931323331323335393539300c310a3008060013045465737430020500300d06092a864886f70d01010b0500030200ff":"":MBEDTLS_ERR_PK_INVALID_ALG + MBEDTLS_ERR_ASN1_UNEXPECTED_TAG
1726*62c56f98SSadaf Ebrahimi
1727*62c56f98SSadaf EbrahimiX509 CRT ASN1 (TBS, inv SubPubKeyInfo, algorithm length missing)
1728*62c56f98SSadaf Ebrahimidepends_on:MBEDTLS_RSA_C:MBEDTLS_MD_CAN_SHA256
1729*62c56f98SSadaf Ebrahimix509parse_crt:"306c3057a0030201008204deadbeef300d06092a864886f70d01010b0500300c310a30080600130454657374301c170c303930313031303030303030170c303931323331323335393539300c310a30080600130454657374300130300d06092a864886f70d01010b0500030200ff":"":MBEDTLS_ERR_PK_INVALID_ALG + MBEDTLS_ERR_ASN1_OUT_OF_DATA
1730*62c56f98SSadaf Ebrahimi
1731*62c56f98SSadaf EbrahimiX509 CRT ASN1 (TBS, inv SubPubKeyInfo, algorithm inv length encoding)
1732*62c56f98SSadaf Ebrahimidepends_on:MBEDTLS_RSA_C:MBEDTLS_MD_CAN_SHA256
1733*62c56f98SSadaf Ebrahimix509parse_crt:"306d3058a0030201008204deadbeef300d06092a864886f70d01010b0500300c310a30080600130454657374301c170c303930313031303030303030170c303931323331323335393539300c310a3008060013045465737430023085300d06092a864886f70d01010b0500030200ff":"":MBEDTLS_ERR_PK_INVALID_ALG + MBEDTLS_ERR_ASN1_INVALID_LENGTH
1734*62c56f98SSadaf Ebrahimi
1735*62c56f98SSadaf EbrahimiX509 CRT ASN1 (TBS, inv SubPubKeyInfo, algorithm length out of bounds)
1736*62c56f98SSadaf Ebrahimidepends_on:MBEDTLS_RSA_C:MBEDTLS_MD_CAN_SHA256
1737*62c56f98SSadaf Ebrahimix509parse_crt:"306d3058a0030201008204deadbeef300d06092a864886f70d01010b0500300c310a30080600130454657374301c170c303930313031303030303030170c303931323331323335393539300c310a3008060013045465737430023001300d06092a864886f70d01010b0500030200ff":"":MBEDTLS_ERR_PK_INVALID_ALG + MBEDTLS_ERR_ASN1_OUT_OF_DATA
1738*62c56f98SSadaf Ebrahimi
1739*62c56f98SSadaf EbrahimiX509 CRT ASN1 (TBS, inv SubPubKeyInfo, algorithm empty)
1740*62c56f98SSadaf Ebrahimidepends_on:MBEDTLS_RSA_C:MBEDTLS_MD_CAN_SHA256
1741*62c56f98SSadaf Ebrahimix509parse_crt:"3081883073a0030201008204deadbeef300d06092a864886f70d01010b0500300c310a30080600130454657374301c170c303930313031303030303030170c303931323331323335393539300c310a30080600130454657374301d300003190030160210ffffffffffffffffffffffffffffffff0202ffff300d06092a864886f70d01010b0500030200ff":"":MBEDTLS_ERR_PK_INVALID_ALG + MBEDTLS_ERR_ASN1_OUT_OF_DATA
1742*62c56f98SSadaf Ebrahimi
1743*62c56f98SSadaf EbrahimiX509 CRT ASN1 (TBS, inv SubPubKeyInfo, algorithm unknown)
1744*62c56f98SSadaf Ebrahimidepends_on:MBEDTLS_RSA_C:MBEDTLS_MD_CAN_SHA256
1745*62c56f98SSadaf Ebrahimix509parse_crt:"308196308180a0030201008204deadbeef300d06092a864886f70d01010b0500300c310a30080600130454657374301c170c303930313031303030303030170c303931323331323335393539300c310a30080600130454657374302a300d06092A864886F70D010100050003190030160210ffffffffffffffffffffffffffffffff0202ffff300d06092a864886f70d01010b0500030200ff":"":MBEDTLS_ERR_PK_UNKNOWN_PK_ALG
1746*62c56f98SSadaf Ebrahimi
1747*62c56f98SSadaf EbrahimiX509 CRT ASN1 (TBS, inv SubPubKeyInfo, bitstring missing)
1748*62c56f98SSadaf Ebrahimidepends_on:MBEDTLS_RSA_C:MBEDTLS_MD_CAN_SHA256
1749*62c56f98SSadaf Ebrahimix509parse_crt:"307a3065a0030201008204deadbeef300d06092a864886f70d01010b0500300c310a30080600130454657374301c170c303930313031303030303030170c303931323331323335393539300c310a30080600130454657374300f300d06092A864886F70D0101010500300d06092a864886f70d01010b0500030200ff":"":MBEDTLS_ERR_PK_INVALID_PUBKEY + MBEDTLS_ERR_ASN1_OUT_OF_DATA
1750*62c56f98SSadaf Ebrahimi
1751*62c56f98SSadaf EbrahimiX509 CRT ASN1 (TBS, inv SubPubKeyInfo, bitstring inv tag)
1752*62c56f98SSadaf Ebrahimidepends_on:MBEDTLS_RSA_C:MBEDTLS_MD_CAN_SHA256
1753*62c56f98SSadaf Ebrahimix509parse_crt:"307c3067a0030201008204deadbeef300d06092a864886f70d01010b0500300c310a30080600130454657374301c170c303930313031303030303030170c303931323331323335393539300c310a300806001304546573743011300d06092A864886F70D01010105000500300d06092a864886f70d01010b0500030200ff":"":MBEDTLS_ERR_PK_INVALID_PUBKEY + MBEDTLS_ERR_ASN1_UNEXPECTED_TAG
1754*62c56f98SSadaf Ebrahimi
1755*62c56f98SSadaf EbrahimiX509 CRT ASN1 (TBS, inv SubPubKeyInfo, bitstring length missing)
1756*62c56f98SSadaf Ebrahimidepends_on:MBEDTLS_RSA_C:MBEDTLS_MD_CAN_SHA256
1757*62c56f98SSadaf Ebrahimix509parse_crt:"307b3066a0030201008204deadbeef300d06092a864886f70d01010b0500300c310a30080600130454657374301c170c303930313031303030303030170c303931323331323335393539300c310a300806001304546573743010300d06092A864886F70D010101050003300d06092a864886f70d01010b0500030200ff":"":MBEDTLS_ERR_PK_INVALID_PUBKEY + MBEDTLS_ERR_ASN1_OUT_OF_DATA
1758*62c56f98SSadaf Ebrahimi
1759*62c56f98SSadaf EbrahimiX509 CRT ASN1 (TBS, inv SubPubKeyInfo, bitstring inv length encoding)
1760*62c56f98SSadaf Ebrahimidepends_on:MBEDTLS_RSA_C:MBEDTLS_MD_CAN_SHA256
1761*62c56f98SSadaf Ebrahimix509parse_crt:"307c3067a0030201008204deadbeef300d06092a864886f70d01010b0500300c310a30080600130454657374301c170c303930313031303030303030170c303931323331323335393539300c310a300806001304546573743011300d06092A864886F70D01010105000385300d06092a864886f70d01010b0500030200ff":"":MBEDTLS_ERR_PK_INVALID_PUBKEY + MBEDTLS_ERR_ASN1_INVALID_LENGTH
1762*62c56f98SSadaf Ebrahimi
1763*62c56f98SSadaf EbrahimiX509 CRT ASN1 (TBS, inv SubPubKeyInfo, bitstring length out of bounds)
1764*62c56f98SSadaf Ebrahimidepends_on:MBEDTLS_RSA_C:MBEDTLS_MD_CAN_SHA256
1765*62c56f98SSadaf Ebrahimix509parse_crt:"307c3067a0030201008204deadbeef300d06092a864886f70d01010b0500300c310a30080600130454657374301c170c303930313031303030303030170c303931323331323335393539300c310a300806001304546573743011300d06092A864886F70D01010105000301300d06092a864886f70d01010b0500030200ff":"":MBEDTLS_ERR_PK_INVALID_PUBKEY + MBEDTLS_ERR_ASN1_OUT_OF_DATA
1766*62c56f98SSadaf Ebrahimi
1767*62c56f98SSadaf EbrahimiX509 CRT ASN1 (TBS, inv SubPubKeyInfo, no bitstring data)
1768*62c56f98SSadaf Ebrahimidepends_on:MBEDTLS_RSA_C:MBEDTLS_MD_CAN_SHA256
1769*62c56f98SSadaf Ebrahimix509parse_crt:"307c3067a0030201008204deadbeef300d06092a864886f70d01010b0500300c310a30080600130454657374301c170c303930313031303030303030170c303931323331323335393539300c310a300806001304546573743011300d06092A864886F70D01010105000300300d06092a864886f70d01010b0500030200ff":"":MBEDTLS_ERR_PK_INVALID_PUBKEY + MBEDTLS_ERR_ASN1_INVALID_DATA
1770*62c56f98SSadaf Ebrahimi
1771*62c56f98SSadaf EbrahimiX509 CRT ASN1 (TBS, inv SubPubKeyInfo, inv bitstring start)
1772*62c56f98SSadaf Ebrahimidepends_on:MBEDTLS_RSA_C:MBEDTLS_MD_CAN_SHA256
1773*62c56f98SSadaf Ebrahimix509parse_crt:"307d3068a0030201008204deadbeef300d06092a864886f70d01010b0500300c310a30080600130454657374301c170c303930313031303030303030170c303931323331323335393539300c310a300806001304546573743012300d06092A864886F70D0101010500030101300d06092a864886f70d01010b0500030200ff":"":MBEDTLS_ERR_PK_INVALID_PUBKEY + MBEDTLS_ERR_ASN1_INVALID_DATA
1774*62c56f98SSadaf Ebrahimi
1775*62c56f98SSadaf EbrahimiX509 CRT ASN1 (TBS, inv SubPubKeyInfo, inv internal bitstring length)
1776*62c56f98SSadaf Ebrahimidepends_on:MBEDTLS_RSA_C:MBEDTLS_MD_CAN_SHA256
1777*62c56f98SSadaf Ebrahimix509parse_crt:"308180306ba0030201008204deadbeef300d06092a864886f70d01010b0500300c310a30080600130454657374301c170c303930313031303030303030170c303931323331323335393539300c310a300806001304546573743015300d06092A864886F70D0101010500030400300000300d06092a864886f70d01010b0500030200ff":"":MBEDTLS_ERR_PK_INVALID_PUBKEY + MBEDTLS_ERR_ASN1_LENGTH_MISMATCH
1778*62c56f98SSadaf Ebrahimi
1779*62c56f98SSadaf EbrahimiX509 CRT ASN1 (TBS, inv SubPubKeyInfo, inv internal bitstring tag)
1780*62c56f98SSadaf Ebrahimidepends_on:MBEDTLS_RSA_C:MBEDTLS_MD_CAN_SHA256
1781*62c56f98SSadaf Ebrahimix509parse_crt:"308180306ba0030201008204deadbeef300d06092a864886f70d01010b0500300c310a30080600130454657374301c170c303930313031303030303030170c303931323331323335393539300c310a300806001304546573743015300d06092A864886F70D0101010500030400310000300d06092a864886f70d01010b0500030200ff":"":MBEDTLS_ERR_PK_INVALID_PUBKEY + MBEDTLS_ERR_ASN1_UNEXPECTED_TAG
1782*62c56f98SSadaf Ebrahimi
1783*62c56f98SSadaf EbrahimiX509 CRT ASN1 (TBS, inv SubPubKeyInfo, inv RSA modulus)
1784*62c56f98SSadaf Ebrahimidepends_on:MBEDTLS_RSA_C:MBEDTLS_MD_CAN_SHA256
1785*62c56f98SSadaf Ebrahimix509parse_crt:"3081873072a0030201008204deadbeef300d06092a864886f70d01010b0500300c310a30080600130454657374301c170c303930313031303030303030170c303931323331323335393539300c310a30080600130454657374301c300d06092A864886F70D0101010500030b0030080202ffff0302ffff300d06092a864886f70d01010b0500030200ff":"":MBEDTLS_ERR_PK_INVALID_PUBKEY + MBEDTLS_ERR_ASN1_UNEXPECTED_TAG
1786*62c56f98SSadaf Ebrahimi
1787*62c56f98SSadaf EbrahimiX509 CRT ASN1 (TBS, inv SubPubKeyInfo, total length mismatch)
1788*62c56f98SSadaf Ebrahimidepends_on:MBEDTLS_RSA_C:MBEDTLS_MD_CAN_SHA256
1789*62c56f98SSadaf Ebrahimix509parse_crt:"3081893074a0030201008204deadbeef300d06092a864886f70d01010b0500300c310a30080600130454657374301c170c303930313031303030303030170c303931323331323335393539300c310a30080600130454657374301e300d06092A864886F70D0101010500030b0030080202ffff0202ffff0500300d06092a864886f70d01010b0500030200ff":"":MBEDTLS_ERR_PK_INVALID_PUBKEY + MBEDTLS_ERR_ASN1_LENGTH_MISMATCH
1790*62c56f98SSadaf Ebrahimi
1791*62c56f98SSadaf EbrahimiX509 CRT ASN1 (TBS, inv SubPubKeyInfo, check failed)
1792*62c56f98SSadaf Ebrahimidepends_on:MBEDTLS_RSA_C:MBEDTLS_MD_CAN_SHA256
1793*62c56f98SSadaf Ebrahimix509parse_crt:"3081873072a0030201008204deadbeef300d06092a864886f70d01010b0500300c310a30080600130454657374301c170c303930313031303030303030170c303931323331323335393539300c310a30080600130454657374301c300d06092A864886F70D0101010500030b0030080202ffff0202ffff300d06092a864886f70d01010b0500030200ff":"":MBEDTLS_ERR_PK_INVALID_PUBKEY
1794*62c56f98SSadaf Ebrahimi
1795*62c56f98SSadaf EbrahimiX509 CRT ASN1 (TBS, inv SubPubKeyInfo, check failed, expanded length notation)
1796*62c56f98SSadaf Ebrahimidepends_on:MBEDTLS_RSA_C:MBEDTLS_MD_CAN_SHA256
1797*62c56f98SSadaf Ebrahimix509parse_crt:"308196308180a0030201008204deadbeef300d06092a864886f70d01010b0500300c310a30080600130454657374301c170c303930313031303030303030170c303931323331323335393539300c310a30080600130454657374302a300d06092A864886F70D010101050003190030160210fffffffffffffffffffffffffffffffe0202ffff300d06092a864886f70d01010b0500030200ff":"":MBEDTLS_ERR_PK_INVALID_PUBKEY
1798*62c56f98SSadaf Ebrahimi
1799*62c56f98SSadaf Ebrahimi# We expect an extension parsing error here because the IssuerID is optional.
1800*62c56f98SSadaf Ebrahimi# Hence, if we find an ASN.1 tag doesn't match the IssuerID, we assume the
1801*62c56f98SSadaf Ebrahimi# IssuerID is skipped and that the tag should hence belong to the next field,
1802*62c56f98SSadaf Ebrahimi# namely the v3 extensions. However, the tag the test exercises is a NULL tag,
1803*62c56f98SSadaf Ebrahimi# and hence we obtain an INVALID_TAG error during extension parsing.
1804*62c56f98SSadaf EbrahimiX509 CRT ASN1 (TBS, inv IssuerID, inv tag)
1805*62c56f98SSadaf Ebrahimidepends_on:MBEDTLS_RSA_C:MBEDTLS_MD_CAN_SHA256
1806*62c56f98SSadaf Ebrahimix509parse_crt:"308198308182a0030201028204deadbeef300d06092a864886f70d01010b0500300c310a30080600130454657374301c170c303930313031303030303030170c303931323331323335393539300c310a30080600130454657374302a300d06092A864886F70D010101050003190030160210ffffffffffffffffffffffffffffffff0202ffff0500300d06092a864886f70d01010b0500030200ff":"":MBEDTLS_ERR_X509_INVALID_EXTENSIONS + MBEDTLS_ERR_ASN1_UNEXPECTED_TAG
1807*62c56f98SSadaf Ebrahimi
1808*62c56f98SSadaf EbrahimiX509 CRT ASN1 (TBS, inv IssuerID, length missing)
1809*62c56f98SSadaf Ebrahimidepends_on:MBEDTLS_RSA_C:MBEDTLS_MD_CAN_SHA256
1810*62c56f98SSadaf Ebrahimix509parse_crt:"308197308181a0030201028204deadbeef300d06092a864886f70d01010b0500300c310a30080600130454657374301c170c303930313031303030303030170c303931323331323335393539300c310a30080600130454657374302a300d06092A864886F70D010101050003190030160210ffffffffffffffffffffffffffffffff0202ffffa1300d06092a864886f70d01010b0500030200ff":"":MBEDTLS_ERR_X509_INVALID_FORMAT + MBEDTLS_ERR_ASN1_OUT_OF_DATA
1811*62c56f98SSadaf Ebrahimi
1812*62c56f98SSadaf EbrahimiX509 CRT ASN1 (TBS, inv IssuerID, inv length encoding)
1813*62c56f98SSadaf Ebrahimidepends_on:MBEDTLS_RSA_C:MBEDTLS_MD_CAN_SHA256
1814*62c56f98SSadaf Ebrahimix509parse_crt:"308198308182a0030201028204deadbeef300d06092a864886f70d01010b0500300c310a30080600130454657374301c170c303930313031303030303030170c303931323331323335393539300c310a30080600130454657374302a300d06092A864886F70D010101050003190030160210ffffffffffffffffffffffffffffffff0202ffffa185300d06092a864886f70d01010b0500030200ff":"":MBEDTLS_ERR_X509_INVALID_FORMAT + MBEDTLS_ERR_ASN1_INVALID_LENGTH
1815*62c56f98SSadaf Ebrahimi
1816*62c56f98SSadaf EbrahimiX509 CRT ASN1 (TBS, inv IssuerID, length out of bounds)
1817*62c56f98SSadaf Ebrahimidepends_on:MBEDTLS_RSA_C:MBEDTLS_MD_CAN_SHA256
1818*62c56f98SSadaf Ebrahimix509parse_crt:"308198308182a0030201028204deadbeef300d06092a864886f70d01010b0500300c310a30080600130454657374301c170c303930313031303030303030170c303931323331323335393539300c310a30080600130454657374302a300d06092A864886F70D010101050003190030160210ffffffffffffffffffffffffffffffff0202ffffa101300d06092a864886f70d01010b0500030200ff":"":MBEDTLS_ERR_X509_INVALID_FORMAT + MBEDTLS_ERR_ASN1_OUT_OF_DATA
1819*62c56f98SSadaf Ebrahimi
1820*62c56f98SSadaf EbrahimiX509 CRT ASN1 (TBS, no IssuerID, inv SubjectID, length missing)
1821*62c56f98SSadaf Ebrahimidepends_on:MBEDTLS_RSA_C:MBEDTLS_MD_CAN_SHA256
1822*62c56f98SSadaf Ebrahimix509parse_crt:"308197308181a0030201028204deadbeef300d06092a864886f70d01010b0500300c310a30080600130454657374301c170c303930313031303030303030170c303931323331323335393539300c310a30080600130454657374302a300d06092A864886F70D010101050003190030160210ffffffffffffffffffffffffffffffff0202ffffa2300d06092a864886f70d01010b0500030200ff":"":MBEDTLS_ERR_X509_INVALID_FORMAT + MBEDTLS_ERR_ASN1_OUT_OF_DATA
1823*62c56f98SSadaf Ebrahimi
1824*62c56f98SSadaf EbrahimiX509 CRT ASN1 (TBS, no IssuerID, inv SubjectID, inv length encoding)
1825*62c56f98SSadaf Ebrahimidepends_on:MBEDTLS_RSA_C:MBEDTLS_MD_CAN_SHA256
1826*62c56f98SSadaf Ebrahimix509parse_crt:"308198308182a0030201028204deadbeef300d06092a864886f70d01010b0500300c310a30080600130454657374301c170c303930313031303030303030170c303931323331323335393539300c310a30080600130454657374302a300d06092A864886F70D010101050003190030160210ffffffffffffffffffffffffffffffff0202ffffa285300d06092a864886f70d01010b0500030200ff":"":MBEDTLS_ERR_X509_INVALID_FORMAT + MBEDTLS_ERR_ASN1_INVALID_LENGTH
1827*62c56f98SSadaf Ebrahimi
1828*62c56f98SSadaf EbrahimiX509 CRT ASN1 (TBS, no IssuerID, inv SubjectID, length out of bounds)
1829*62c56f98SSadaf Ebrahimidepends_on:MBEDTLS_RSA_C:MBEDTLS_MD_CAN_SHA256
1830*62c56f98SSadaf Ebrahimix509parse_crt:"308198308182a0030201028204deadbeef300d06092a864886f70d01010b0500300c310a30080600130454657374301c170c303930313031303030303030170c303931323331323335393539300c310a30080600130454657374302a300d06092A864886F70D010101050003190030160210ffffffffffffffffffffffffffffffff0202ffffa201300d06092a864886f70d01010b0500030200ff":"":MBEDTLS_ERR_X509_INVALID_FORMAT + MBEDTLS_ERR_ASN1_OUT_OF_DATA
1831*62c56f98SSadaf Ebrahimi
1832*62c56f98SSadaf EbrahimiX509 CRT ASN1 (TBS, valid IssuerID, inv SubjectID, inv tag)
1833*62c56f98SSadaf Ebrahimidepends_on:MBEDTLS_RSA_C:MBEDTLS_MD_CAN_SHA256
1834*62c56f98SSadaf Ebrahimix509parse_crt:"30819a308184a0030201008204deadbeef300d06092a864886f70d01010b0500300c310a30080600130454657374301c170c303930313031303030303030170c303931323331323335393539300c310a30080600130454657374302a300d06092A864886F70D010101050003190030160210ffffffffffffffffffffffffffffffff0202ffffa1000500300d06092a864886f70d01010b0500030200ff":"":MBEDTLS_ERR_X509_INVALID_FORMAT + MBEDTLS_ERR_ASN1_LENGTH_MISMATCH
1835*62c56f98SSadaf Ebrahimi
1836*62c56f98SSadaf EbrahimiX509 CRT ASN1 (TBS, valid IssuerID, inv SubjectID, length missing)
1837*62c56f98SSadaf Ebrahimidepends_on:MBEDTLS_RSA_C:MBEDTLS_MD_CAN_SHA256
1838*62c56f98SSadaf Ebrahimix509parse_crt:"308199308183a0030201028204deadbeef300d06092a864886f70d01010b0500300c310a30080600130454657374301c170c303930313031303030303030170c303931323331323335393539300c310a30080600130454657374302a300d06092A864886F70D010101050003190030160210ffffffffffffffffffffffffffffffff0202ffffa100a2300d06092a864886f70d01010b0500030200ff":"":MBEDTLS_ERR_X509_INVALID_FORMAT + MBEDTLS_ERR_ASN1_OUT_OF_DATA
1839*62c56f98SSadaf Ebrahimi
1840*62c56f98SSadaf EbrahimiX509 CRT ASN1 (TBS, valid IssuerID, inv SubjectID, inv length encoding)
1841*62c56f98SSadaf Ebrahimidepends_on:MBEDTLS_RSA_C:MBEDTLS_MD_CAN_SHA256
1842*62c56f98SSadaf Ebrahimix509parse_crt:"30819a308184a0030201028204deadbeef300d06092a864886f70d01010b0500300c310a30080600130454657374301c170c303930313031303030303030170c303931323331323335393539300c310a30080600130454657374302a300d06092A864886F70D010101050003190030160210ffffffffffffffffffffffffffffffff0202ffffa100a285300d06092a864886f70d01010b0500030200ff":"":MBEDTLS_ERR_X509_INVALID_FORMAT + MBEDTLS_ERR_ASN1_INVALID_LENGTH
1843*62c56f98SSadaf Ebrahimi
1844*62c56f98SSadaf EbrahimiX509 CRT ASN1 (TBS, valid IssuerID, inv SubjectID, length out of bounds)
1845*62c56f98SSadaf Ebrahimidepends_on:MBEDTLS_RSA_C:MBEDTLS_MD_CAN_SHA256
1846*62c56f98SSadaf Ebrahimix509parse_crt:"30819a308184a0030201028204deadbeef300d06092a864886f70d01010b0500300c310a30080600130454657374301c170c303930313031303030303030170c303931323331323335393539300c310a30080600130454657374302a300d06092A864886F70D010101050003190030160210ffffffffffffffffffffffffffffffff0202ffffa100a201300d06092a864886f70d01010b0500030200ff":"":MBEDTLS_ERR_X509_INVALID_FORMAT + MBEDTLS_ERR_ASN1_OUT_OF_DATA
1847*62c56f98SSadaf Ebrahimi
1848*62c56f98SSadaf EbrahimiX509 CRT ASN1 (TBS, IssuerID unsupported in v1 CRT)
1849*62c56f98SSadaf Ebrahimidepends_on:MBEDTLS_RSA_C:MBEDTLS_MD_CAN_SHA256
1850*62c56f98SSadaf Ebrahimix509parse_crt:"30819a308184a0030201008204deadbeef300d06092a864886f70d01010b0500300c310a30080600130454657374301c170c303930313031303030303030170c303931323331323335393539300c310a30080600130454657374302a300d06092A864886F70D010101050003190030160210ffffffffffffffffffffffffffffffff0202ffffa100a201300d06092a864886f70d01010b0500030200ff":"":MBEDTLS_ERR_X509_INVALID_FORMAT + MBEDTLS_ERR_ASN1_LENGTH_MISMATCH
1851*62c56f98SSadaf Ebrahimi
1852*62c56f98SSadaf EbrahimiX509 CRT ASN1 (TBS, SubjectID unsupported in v1 CRT)
1853*62c56f98SSadaf Ebrahimidepends_on:MBEDTLS_RSA_C:MBEDTLS_MD_CAN_SHA256
1854*62c56f98SSadaf Ebrahimix509parse_crt:"30819a308184a0030201008204deadbeef300d06092a864886f70d01010b0500300c310a30080600130454657374301c170c303930313031303030303030170c303931323331323335393539300c310a30080600130454657374302a300d06092A864886F70D010101050003190030160210ffffffffffffffffffffffffffffffff0202ffffa200a201300d06092a864886f70d01010b0500030200ff":"":MBEDTLS_ERR_X509_INVALID_FORMAT + MBEDTLS_ERR_ASN1_LENGTH_MISMATCH
1855*62c56f98SSadaf Ebrahimi
1856*62c56f98SSadaf EbrahimiX509 CRT ASN1 (TBS, inv v3Ext, inv tag)
1857*62c56f98SSadaf Ebrahimidepends_on:MBEDTLS_RSA_C:MBEDTLS_MD_CAN_SHA256
1858*62c56f98SSadaf Ebrahimix509parse_crt:"30819c308186a0030201028204deadbeef300d06092a864886f70d01010b0500300c310a30080600130454657374301c170c303930313031303030303030170c303931323331323335393539300c310a30080600130454657374302a300d06092A864886F70D010101050003190030160210ffffffffffffffffffffffffffffffff0202ffffa100a2000500300d06092a864886f70d01010b0500030200ff":"":MBEDTLS_ERR_X509_INVALID_EXTENSIONS + MBEDTLS_ERR_ASN1_UNEXPECTED_TAG
1859*62c56f98SSadaf Ebrahimi
1860*62c56f98SSadaf EbrahimiX509 CRT ASN1 (TBS, inv v3Ext, outer length missing)
1861*62c56f98SSadaf Ebrahimidepends_on:MBEDTLS_RSA_C:MBEDTLS_MD_CAN_SHA256
1862*62c56f98SSadaf Ebrahimix509parse_crt:"30819b308185a0030201028204deadbeef300d06092a864886f70d01010b0500300c310a30080600130454657374301c170c303930313031303030303030170c303931323331323335393539300c310a30080600130454657374302a300d06092A864886F70D010101050003190030160210ffffffffffffffffffffffffffffffff0202ffffa100a200a3300d06092a864886f70d01010b0500030200ff":"":MBEDTLS_ERR_X509_INVALID_EXTENSIONS + MBEDTLS_ERR_ASN1_OUT_OF_DATA
1863*62c56f98SSadaf Ebrahimi
1864*62c56f98SSadaf EbrahimiX509 CRT ASN1 (TBS, inv v3Ext, outer length inv encoding)
1865*62c56f98SSadaf Ebrahimidepends_on:MBEDTLS_RSA_C:MBEDTLS_MD_CAN_SHA256
1866*62c56f98SSadaf Ebrahimix509parse_crt:"30819c308186a0030201028204deadbeef300d06092a864886f70d01010b0500300c310a30080600130454657374301c170c303930313031303030303030170c303931323331323335393539300c310a30080600130454657374302a300d06092A864886F70D010101050003190030160210ffffffffffffffffffffffffffffffff0202ffffa100a200a385300d06092a864886f70d01010b0500030200ff":"":MBEDTLS_ERR_X509_INVALID_EXTENSIONS + MBEDTLS_ERR_ASN1_INVALID_LENGTH
1867*62c56f98SSadaf Ebrahimi
1868*62c56f98SSadaf EbrahimiX509 CRT ASN1 (TBS, inv v3Ext, outer length out of bounds)
1869*62c56f98SSadaf Ebrahimidepends_on:MBEDTLS_RSA_C:MBEDTLS_MD_CAN_SHA256
1870*62c56f98SSadaf Ebrahimix509parse_crt:"30819c308186a0030201028204deadbeef300d06092a864886f70d01010b0500300c310a30080600130454657374301c170c303930313031303030303030170c303931323331323335393539300c310a30080600130454657374302a300d06092A864886F70D010101050003190030160210ffffffffffffffffffffffffffffffff0202ffffa100a200a301300d06092a864886f70d01010b0500030200ff":"":MBEDTLS_ERR_X509_INVALID_EXTENSIONS + MBEDTLS_ERR_ASN1_OUT_OF_DATA
1871*62c56f98SSadaf Ebrahimi
1872*62c56f98SSadaf EbrahimiX509 CRT ASN1 (TBS, inv v3Ext, outer length 0)
1873*62c56f98SSadaf Ebrahimidepends_on:MBEDTLS_RSA_C:MBEDTLS_MD_CAN_SHA256
1874*62c56f98SSadaf Ebrahimix509parse_crt:"30819c308186a0030201028204deadbeef300d06092a864886f70d01010b0500300c310a30080600130454657374301c170c303930313031303030303030170c303931323331323335393539300c310a30080600130454657374302a300d06092A864886F70D010101050003190030160210ffffffffffffffffffffffffffffffff0202ffffa100a200a300300d06092a864886f70d01010b0500030200ff":"":MBEDTLS_ERR_X509_INVALID_EXTENSIONS + MBEDTLS_ERR_ASN1_OUT_OF_DATA
1875*62c56f98SSadaf Ebrahimi
1876*62c56f98SSadaf EbrahimiX509 CRT ASN1 (TBS, inv v3Ext, inner tag invalid)
1877*62c56f98SSadaf Ebrahimidepends_on:MBEDTLS_RSA_C:MBEDTLS_MD_CAN_SHA256
1878*62c56f98SSadaf Ebrahimix509parse_crt:"30819e308188a0030201028204deadbeef300d06092a864886f70d01010b0500300c310a30080600130454657374301c170c303930313031303030303030170c303931323331323335393539300c310a30080600130454657374302a300d06092A864886F70D010101050003190030160210ffffffffffffffffffffffffffffffff0202ffffa100a200a3020500300d06092a864886f70d01010b0500030200ff":"":MBEDTLS_ERR_X509_INVALID_EXTENSIONS + MBEDTLS_ERR_ASN1_UNEXPECTED_TAG
1879*62c56f98SSadaf Ebrahimi
1880*62c56f98SSadaf EbrahimiX509 CRT ASN1 (TBS, inv v3Ext, inner length missing)
1881*62c56f98SSadaf Ebrahimidepends_on:MBEDTLS_RSA_C:MBEDTLS_MD_CAN_SHA256
1882*62c56f98SSadaf Ebrahimix509parse_crt:"30819d308187a0030201028204deadbeef300d06092a864886f70d01010b0500300c310a30080600130454657374301c170c303930313031303030303030170c303931323331323335393539300c310a30080600130454657374302a300d06092A864886F70D010101050003190030160210ffffffffffffffffffffffffffffffff0202ffffa100a200a30130300d06092a864886f70d01010b0500030200ff":"":MBEDTLS_ERR_X509_INVALID_EXTENSIONS + MBEDTLS_ERR_ASN1_OUT_OF_DATA
1883*62c56f98SSadaf Ebrahimi
1884*62c56f98SSadaf EbrahimiX509 CRT ASN1 (TBS, inv v3Ext, inner length inv encoding)
1885*62c56f98SSadaf Ebrahimidepends_on:MBEDTLS_RSA_C:MBEDTLS_MD_CAN_SHA256
1886*62c56f98SSadaf Ebrahimix509parse_crt:"30819e308188a0030201028204deadbeef300d06092a864886f70d01010b0500300c310a30080600130454657374301c170c303930313031303030303030170c303931323331323335393539300c310a30080600130454657374302a300d06092A864886F70D010101050003190030160210ffffffffffffffffffffffffffffffff0202ffffa100a200a3023085300d06092a864886f70d01010b0500030200ff":"":MBEDTLS_ERR_X509_INVALID_EXTENSIONS + MBEDTLS_ERR_ASN1_INVALID_LENGTH
1887*62c56f98SSadaf Ebrahimi
1888*62c56f98SSadaf EbrahimiX509 CRT ASN1 (TBS, inv v3Ext, inner length out of bounds)
1889*62c56f98SSadaf Ebrahimidepends_on:MBEDTLS_RSA_C:MBEDTLS_MD_CAN_SHA256
1890*62c56f98SSadaf Ebrahimix509parse_crt:"30819e308188a0030201028204deadbeef300d06092a864886f70d01010b0500300c310a30080600130454657374301c170c303930313031303030303030170c303931323331323335393539300c310a30080600130454657374302a300d06092A864886F70D010101050003190030160210ffffffffffffffffffffffffffffffff0202ffffa100a200a3023001300d06092a864886f70d01010b0500030200ff":"":MBEDTLS_ERR_X509_INVALID_EXTENSIONS + MBEDTLS_ERR_ASN1_OUT_OF_DATA
1891*62c56f98SSadaf Ebrahimi
1892*62c56f98SSadaf EbrahimiX509 CRT ASN1 (TBS, inv v3Ext, inner/outer length mismatch)
1893*62c56f98SSadaf Ebrahimidepends_on:MBEDTLS_RSA_C:MBEDTLS_MD_CAN_SHA256
1894*62c56f98SSadaf Ebrahimix509parse_crt:"30819f308189a0030201028204deadbeef300d06092a864886f70d01010b0500300c310a30080600130454657374301c170c303930313031303030303030170c303931323331323335393539300c310a30080600130454657374302a300d06092A864886F70D010101050003190030160210ffffffffffffffffffffffffffffffff0202ffffa100a200a303300000300d06092a864886f70d01010b0500030200ff":"":MBEDTLS_ERR_X509_INVALID_EXTENSIONS + MBEDTLS_ERR_ASN1_LENGTH_MISMATCH
1895*62c56f98SSadaf Ebrahimi
1896*62c56f98SSadaf EbrahimiX509 CRT ASN1 (TBS, inv v3Ext, first ext inv tag)
1897*62c56f98SSadaf Ebrahimidepends_on:MBEDTLS_RSA_C:MBEDTLS_MD_CAN_SHA256
1898*62c56f98SSadaf Ebrahimix509parse_crt:"3081a030818aa0030201028204deadbeef300d06092a864886f70d01010b0500300c310a30080600130454657374301c170c303930313031303030303030170c303931323331323335393539300c310a30080600130454657374302a300d06092A864886F70D010101050003190030160210ffffffffffffffffffffffffffffffff0202ffffa100a200a30430020500300d06092a864886f70d01010b0500030200ff":"":MBEDTLS_ERR_X509_INVALID_EXTENSIONS + MBEDTLS_ERR_ASN1_UNEXPECTED_TAG
1899*62c56f98SSadaf Ebrahimi
1900*62c56f98SSadaf EbrahimiX509 CRT ASN1 (TBS, inv v3Ext, first ext length missing)
1901*62c56f98SSadaf Ebrahimidepends_on:MBEDTLS_RSA_C:MBEDTLS_MD_CAN_SHA256
1902*62c56f98SSadaf Ebrahimix509parse_crt:"30819f308189a0030201028204deadbeef300d06092a864886f70d01010b0500300c310a30080600130454657374301c170c303930313031303030303030170c303931323331323335393539300c310a30080600130454657374302a300d06092A864886F70D010101050003190030160210ffffffffffffffffffffffffffffffff0202ffffa100a200a303300130300d06092a864886f70d01010b0500030200ff":"":MBEDTLS_ERR_X509_INVALID_EXTENSIONS + MBEDTLS_ERR_ASN1_OUT_OF_DATA
1903*62c56f98SSadaf Ebrahimi
1904*62c56f98SSadaf EbrahimiX509 CRT ASN1 (TBS, inv v3Ext, inv first ext length encoding)
1905*62c56f98SSadaf Ebrahimidepends_on:MBEDTLS_RSA_C:MBEDTLS_MD_CAN_SHA256
1906*62c56f98SSadaf Ebrahimix509parse_crt:"3081a030818aa0030201028204deadbeef300d06092a864886f70d01010b0500300c310a30080600130454657374301c170c303930313031303030303030170c303931323331323335393539300c310a30080600130454657374302a300d06092A864886F70D010101050003190030160210ffffffffffffffffffffffffffffffff0202ffffa100a200a30430023085300d06092a864886f70d01010b0500030200ff":"":MBEDTLS_ERR_X509_INVALID_EXTENSIONS + MBEDTLS_ERR_ASN1_INVALID_LENGTH
1907*62c56f98SSadaf Ebrahimi
1908*62c56f98SSadaf EbrahimiX509 CRT ASN1 (TBS, inv v3Ext, first ext length out of bounds)
1909*62c56f98SSadaf Ebrahimidepends_on:MBEDTLS_RSA_C:MBEDTLS_MD_CAN_SHA256
1910*62c56f98SSadaf Ebrahimix509parse_crt:"3081a030818aa0030201028204deadbeef300d06092a864886f70d01010b0500300c310a30080600130454657374301c170c303930313031303030303030170c303931323331323335393539300c310a30080600130454657374302a300d06092A864886F70D010101050003190030160210ffffffffffffffffffffffffffffffff0202ffffa100a200a30430023001300d06092a864886f70d01010b0500030200ff":"":MBEDTLS_ERR_X509_INVALID_EXTENSIONS + MBEDTLS_ERR_ASN1_OUT_OF_DATA
1911*62c56f98SSadaf Ebrahimi
1912*62c56f98SSadaf EbrahimiX509 CRT ASN1 (TBS, inv v3Ext, first ext empty)
1913*62c56f98SSadaf Ebrahimidepends_on:MBEDTLS_RSA_C:MBEDTLS_MD_CAN_SHA256
1914*62c56f98SSadaf Ebrahimix509parse_crt:"3081a030818aa0030201028204deadbeef300d06092a864886f70d01010b0500300c310a30080600130454657374301c170c303930313031303030303030170c303931323331323335393539300c310a30080600130454657374302a300d06092A864886F70D010101050003190030160210ffffffffffffffffffffffffffffffff0202ffffa100a200a30430023000300d06092a864886f70d01010b0500030200ff":"":MBEDTLS_ERR_X509_INVALID_EXTENSIONS + MBEDTLS_ERR_ASN1_OUT_OF_DATA
1915*62c56f98SSadaf Ebrahimi
1916*62c56f98SSadaf EbrahimiX509 CRT ASN1 (TBS, inv v3Ext, first ext extnID inv tag)
1917*62c56f98SSadaf Ebrahimidepends_on:MBEDTLS_RSA_C:MBEDTLS_MD_CAN_SHA256
1918*62c56f98SSadaf Ebrahimix509parse_crt:"3081a230818ca0030201028204deadbeef300d06092a864886f70d01010b0500300c310a30080600130454657374301c170c303930313031303030303030170c303931323331323335393539300c310a30080600130454657374302a300d06092A864886F70D010101050003190030160210ffffffffffffffffffffffffffffffff0202ffffa100a200a306300430020500300d06092a864886f70d01010b0500030200ff":"":MBEDTLS_ERR_X509_INVALID_EXTENSIONS + MBEDTLS_ERR_ASN1_UNEXPECTED_TAG
1919*62c56f98SSadaf Ebrahimi
1920*62c56f98SSadaf EbrahimiX509 CRT ASN1 (TBS, inv v3Ext, first ext extnID length missing)
1921*62c56f98SSadaf Ebrahimidepends_on:MBEDTLS_RSA_C:MBEDTLS_MD_CAN_SHA256
1922*62c56f98SSadaf Ebrahimix509parse_crt:"3081a130818ba0030201028204deadbeef300d06092a864886f70d01010b0500300c310a30080600130454657374301c170c303930313031303030303030170c303931323331323335393539300c310a30080600130454657374302a300d06092A864886F70D010101050003190030160210ffffffffffffffffffffffffffffffff0202ffffa100a200a3053003300106300d06092a864886f70d01010b0500030200ff":"":MBEDTLS_ERR_X509_INVALID_EXTENSIONS + MBEDTLS_ERR_ASN1_OUT_OF_DATA
1923*62c56f98SSadaf Ebrahimi
1924*62c56f98SSadaf EbrahimiX509 CRT ASN1 (TBS, inv v3Ext, first ext extnID inv length encoding)
1925*62c56f98SSadaf Ebrahimidepends_on:MBEDTLS_RSA_C:MBEDTLS_MD_CAN_SHA256
1926*62c56f98SSadaf Ebrahimix509parse_crt:"3081a230818ca0030201028204deadbeef300d06092a864886f70d01010b0500300c310a30080600130454657374301c170c303930313031303030303030170c303931323331323335393539300c310a30080600130454657374302a300d06092A864886F70D010101050003190030160210ffffffffffffffffffffffffffffffff0202ffffa100a200a306300430020685300d06092a864886f70d01010b0500030200ff":"":MBEDTLS_ERR_X509_INVALID_EXTENSIONS + MBEDTLS_ERR_ASN1_INVALID_LENGTH
1927*62c56f98SSadaf Ebrahimi
1928*62c56f98SSadaf EbrahimiX509 CRT ASN1 (TBS, inv v3Ext, first ext extnID length out of bounds)
1929*62c56f98SSadaf Ebrahimidepends_on:MBEDTLS_RSA_C:MBEDTLS_MD_CAN_SHA256
1930*62c56f98SSadaf Ebrahimix509parse_crt:"3081a230818ca0030201028204deadbeef300d06092a864886f70d01010b0500300c310a30080600130454657374301c170c303930313031303030303030170c303931323331323335393539300c310a30080600130454657374302a300d06092A864886F70D010101050003190030160210ffffffffffffffffffffffffffffffff0202ffffa100a200a306300430020601300d06092a864886f70d01010b0500030200ff":"":MBEDTLS_ERR_X509_INVALID_EXTENSIONS + MBEDTLS_ERR_ASN1_OUT_OF_DATA
1931*62c56f98SSadaf Ebrahimi
1932*62c56f98SSadaf EbrahimiX509 CRT ASN1 (TBS, inv v3Ext, no extnValue)
1933*62c56f98SSadaf Ebrahimidepends_on:MBEDTLS_RSA_C:MBEDTLS_MD_CAN_SHA256
1934*62c56f98SSadaf Ebrahimix509parse_crt:"3081a230818ca0030201028204deadbeef300d06092a864886f70d01010b0500300c310a30080600130454657374301c170c303930313031303030303030170c303931323331323335393539300c310a30080600130454657374302a300d06092A864886F70D010101050003190030160210ffffffffffffffffffffffffffffffff0202ffffa100a200a306300430020600300d06092a864886f70d01010b0500030200ff":"":MBEDTLS_ERR_X509_INVALID_EXTENSIONS + MBEDTLS_ERR_ASN1_OUT_OF_DATA
1935*62c56f98SSadaf Ebrahimi
1936*62c56f98SSadaf EbrahimiX509 CRT ASN1 (TBS, inv v3Ext, inv critical tag)
1937*62c56f98SSadaf Ebrahimidepends_on:MBEDTLS_RSA_C:MBEDTLS_MD_CAN_SHA256
1938*62c56f98SSadaf Ebrahimix509parse_crt:"3081a430818ea0030201028204deadbeef300d06092a864886f70d01010b0500300c310a30080600130454657374301c170c303930313031303030303030170c303931323331323335393539300c310a30080600130454657374302a300d06092A864886F70D010101050003190030160210ffffffffffffffffffffffffffffffff0202ffffa100a200a3083006300406000500300d06092a864886f70d01010b0500030200ff":"":MBEDTLS_ERR_X509_INVALID_EXTENSIONS + MBEDTLS_ERR_ASN1_UNEXPECTED_TAG
1939*62c56f98SSadaf Ebrahimi
1940*62c56f98SSadaf EbrahimiX509 CRT ASN1 (TBS, inv v3Ext, critical length missing)
1941*62c56f98SSadaf Ebrahimidepends_on:MBEDTLS_RSA_C:MBEDTLS_MD_CAN_SHA256
1942*62c56f98SSadaf Ebrahimix509parse_crt:"3081a330818da0030201028204deadbeef300d06092a864886f70d01010b0500300c310a30080600130454657374301c170c303930313031303030303030170c303931323331323335393539300c310a30080600130454657374302a300d06092A864886F70D010101050003190030160210ffffffffffffffffffffffffffffffff0202ffffa100a200a30730053003060001300d06092a864886f70d01010b0500030200ff":"":MBEDTLS_ERR_X509_INVALID_EXTENSIONS + MBEDTLS_ERR_ASN1_OUT_OF_DATA
1943*62c56f98SSadaf Ebrahimi
1944*62c56f98SSadaf EbrahimiX509 CRT ASN1 (TBS, inv v3Ext, critical inv length encoding)
1945*62c56f98SSadaf Ebrahimidepends_on:MBEDTLS_RSA_C:MBEDTLS_MD_CAN_SHA256
1946*62c56f98SSadaf Ebrahimix509parse_crt:"3081a430818ea0030201028204deadbeef300d06092a864886f70d01010b0500300c310a30080600130454657374301c170c303930313031303030303030170c303931323331323335393539300c310a30080600130454657374302a300d06092A864886F70D010101050003190030160210ffffffffffffffffffffffffffffffff0202ffffa100a200a3083006300406000185300d06092a864886f70d01010b0500030200ff":"":MBEDTLS_ERR_X509_INVALID_EXTENSIONS + MBEDTLS_ERR_ASN1_INVALID_LENGTH
1947*62c56f98SSadaf Ebrahimi
1948*62c56f98SSadaf EbrahimiX509 CRT ASN1 (TBS, inv v3Ext, critical length out of bounds)
1949*62c56f98SSadaf Ebrahimidepends_on:MBEDTLS_RSA_C:MBEDTLS_MD_CAN_SHA256
1950*62c56f98SSadaf Ebrahimix509parse_crt:"3081a430818ea0030201028204deadbeef300d06092a864886f70d01010b0500300c310a30080600130454657374301c170c303930313031303030303030170c303931323331323335393539300c310a30080600130454657374302a300d06092A864886F70D010101050003190030160210ffffffffffffffffffffffffffffffff0202ffffa100a200a3083006300406000101300d06092a864886f70d01010b0500030200ff":"":MBEDTLS_ERR_X509_INVALID_EXTENSIONS + MBEDTLS_ERR_ASN1_OUT_OF_DATA
1951*62c56f98SSadaf Ebrahimi
1952*62c56f98SSadaf EbrahimiX509 CRT ASN1 (TBS, inv v3Ext, critical length 0)
1953*62c56f98SSadaf Ebrahimidepends_on:MBEDTLS_RSA_C:MBEDTLS_MD_CAN_SHA256
1954*62c56f98SSadaf Ebrahimix509parse_crt:"3081a430818ea0030201028204deadbeef300d06092a864886f70d01010b0500300c310a30080600130454657374301c170c303930313031303030303030170c303931323331323335393539300c310a30080600130454657374302a300d06092A864886F70D010101050003190030160210ffffffffffffffffffffffffffffffff0202ffffa100a200a3083006300406000100300d06092a864886f70d01010b0500030200ff":"":MBEDTLS_ERR_X509_INVALID_EXTENSIONS + MBEDTLS_ERR_ASN1_INVALID_LENGTH
1955*62c56f98SSadaf Ebrahimi
1956*62c56f98SSadaf EbrahimiX509 CRT ASN1 (TBS, inv v3Ext, critical length 2)
1957*62c56f98SSadaf Ebrahimidepends_on:MBEDTLS_RSA_C:MBEDTLS_MD_CAN_SHA256
1958*62c56f98SSadaf Ebrahimix509parse_crt:"3081a6308190a0030201028204deadbeef300d06092a864886f70d01010b0500300c310a30080600130454657374301c170c303930313031303030303030170c303931323331323335393539300c310a30080600130454657374302a300d06092A864886F70D010101050003190030160210ffffffffffffffffffffffffffffffff0202ffffa100a200a30a30083006060001020000300d06092a864886f70d01010b0500030200ff":"":MBEDTLS_ERR_X509_INVALID_EXTENSIONS + MBEDTLS_ERR_ASN1_INVALID_LENGTH
1959*62c56f98SSadaf Ebrahimi
1960*62c56f98SSadaf EbrahimiX509 CRT ASN1 (TBS, inv v3Ext, extnValue inv tag)
1961*62c56f98SSadaf Ebrahimidepends_on:MBEDTLS_RSA_C:MBEDTLS_MD_CAN_SHA256
1962*62c56f98SSadaf Ebrahimix509parse_crt:"3081a7308191a0030201028204deadbeef300d06092a864886f70d01010b0500300c310a30080600130454657374301c170c303930313031303030303030170c303931323331323335393539300c310a30080600130454657374302a300d06092A864886F70D010101050003190030160210ffffffffffffffffffffffffffffffff0202ffffa100a200a30b3009300706000101000500300d06092a864886f70d01010b0500030200ff":"":MBEDTLS_ERR_X509_INVALID_EXTENSIONS + MBEDTLS_ERR_ASN1_UNEXPECTED_TAG
1963*62c56f98SSadaf Ebrahimi
1964*62c56f98SSadaf EbrahimiX509 CRT ASN1 (TBS, inv v3Ext, extnValue length missing)
1965*62c56f98SSadaf Ebrahimidepends_on:MBEDTLS_RSA_C:MBEDTLS_MD_CAN_SHA256
1966*62c56f98SSadaf Ebrahimix509parse_crt:"3081a6308190a0030201028204deadbeef300d06092a864886f70d01010b0500300c310a30080600130454657374301c170c303930313031303030303030170c303931323331323335393539300c310a30080600130454657374302a300d06092A864886F70D010101050003190030160210ffffffffffffffffffffffffffffffff0202ffffa100a200a30a30083006060001010004300d06092a864886f70d01010b0500030200ff":"":MBEDTLS_ERR_X509_INVALID_EXTENSIONS + MBEDTLS_ERR_ASN1_OUT_OF_DATA
1967*62c56f98SSadaf Ebrahimi
1968*62c56f98SSadaf EbrahimiX509 CRT ASN1 (TBS, inv v3Ext, extnValue length inv encoding)
1969*62c56f98SSadaf Ebrahimidepends_on:MBEDTLS_RSA_C:MBEDTLS_MD_CAN_SHA256
1970*62c56f98SSadaf Ebrahimix509parse_crt:"3081a7308191a0030201028204deadbeef300d06092a864886f70d01010b0500300c310a30080600130454657374301c170c303930313031303030303030170c303931323331323335393539300c310a30080600130454657374302a300d06092A864886F70D010101050003190030160210ffffffffffffffffffffffffffffffff0202ffffa100a200a30b3009300706000101000485300d06092a864886f70d01010b0500030200ff":"":MBEDTLS_ERR_X509_INVALID_EXTENSIONS + MBEDTLS_ERR_ASN1_INVALID_LENGTH
1971*62c56f98SSadaf Ebrahimi
1972*62c56f98SSadaf EbrahimiX509 CRT ASN1 (TBS, inv v3Ext, extnValue length out of bounds)
1973*62c56f98SSadaf Ebrahimidepends_on:MBEDTLS_RSA_C:MBEDTLS_MD_CAN_SHA256
1974*62c56f98SSadaf Ebrahimix509parse_crt:"3081a7308191a0030201028204deadbeef300d06092a864886f70d01010b0500300c310a30080600130454657374301c170c303930313031303030303030170c303931323331323335393539300c310a30080600130454657374302a300d06092A864886F70D010101050003190030160210ffffffffffffffffffffffffffffffff0202ffffa100a200a30b3009300706000101000401300d06092a864886f70d01010b0500030200ff":"":MBEDTLS_ERR_X509_INVALID_EXTENSIONS + MBEDTLS_ERR_ASN1_OUT_OF_DATA
1975*62c56f98SSadaf Ebrahimi
1976*62c56f98SSadaf EbrahimiX509 CRT ASN1 (TBS, inv v3Ext, data remaining after extnValue)
1977*62c56f98SSadaf Ebrahimidepends_on:MBEDTLS_RSA_C:MBEDTLS_MD_CAN_SHA256
1978*62c56f98SSadaf Ebrahimix509parse_crt:"3081a9308193a0030201028204deadbeef300d06092a864886f70d01010b0500300c310a30080600130454657374301c170c303930313031303030303030170c303931323331323335393539300c310a30080600130454657374302a300d06092A864886F70D010101050003190030160210ffffffffffffffffffffffffffffffff0202ffffa100a200a30d300b3009060001010004000500300d06092a864886f70d01010b0500030200ff":"":MBEDTLS_ERR_X509_INVALID_EXTENSIONS + MBEDTLS_ERR_ASN1_LENGTH_MISMATCH
1979*62c56f98SSadaf Ebrahimi
1980*62c56f98SSadaf EbrahimiX509 CRT ASN1 (TBSCertificate v3, inv CertificatePolicies, data missing)
1981*62c56f98SSadaf Ebrahimidepends_on:MBEDTLS_RSA_C:MBEDTLS_MD_CAN_SHA256
1982*62c56f98SSadaf Ebrahimix509parse_crt:"3081a7308191a0030201028204deadbeef300d06092a864886f70d01010b0500300c310a30080600130454657374301c170c303930313031303030303030170c303931323331323335393539300c310a30080600130454657374302a300d06092a864886f70d010101050003190030160210ffffffffffffffffffffffffffffffff0202ffffa100a200a30b300930070603551d200400300d06092a864886f70d01010b0500030200ff":"":MBEDTLS_ERR_X509_INVALID_EXTENSIONS + MBEDTLS_ERR_ASN1_OUT_OF_DATA
1983*62c56f98SSadaf Ebrahimi
1984*62c56f98SSadaf EbrahimiX509 CRT ASN1 (TBSCertificate v3, inv CertificatePolicies, invalid outer tag)
1985*62c56f98SSadaf Ebrahimidepends_on:MBEDTLS_RSA_C:MBEDTLS_MD_CAN_SHA256
1986*62c56f98SSadaf Ebrahimix509parse_crt:"3081a9308193a0030201028204deadbeef300d06092a864886f70d01010b0500300c310a30080600130454657374301c170c303930313031303030303030170c303931323331323335393539300c310a30080600130454657374302a300d06092a864886f70d010101050003190030160210ffffffffffffffffffffffffffffffff0202ffffa100a200a30d300b30090603551d2004020500300d06092a864886f70d01010b0500030200ff":"":MBEDTLS_ERR_X509_INVALID_EXTENSIONS + MBEDTLS_ERR_ASN1_UNEXPECTED_TAG
1987*62c56f98SSadaf Ebrahimi
1988*62c56f98SSadaf EbrahimiX509 CRT ASN1 (TBSCertificate v3, inv CertificatePolicies, outer length missing)
1989*62c56f98SSadaf Ebrahimidepends_on:MBEDTLS_RSA_C:MBEDTLS_MD_CAN_SHA256
1990*62c56f98SSadaf Ebrahimix509parse_crt:"3081a8308192a0030201028204deadbeef300d06092a864886f70d01010b0500300c310a30080600130454657374301c170c303930313031303030303030170c303931323331323335393539300c310a30080600130454657374302a300d06092a864886f70d010101050003190030160210ffffffffffffffffffffffffffffffff0202ffffa100a200a30c300a30080603551d20040130300d06092a864886f70d01010b0500030200ff":"":MBEDTLS_ERR_X509_INVALID_EXTENSIONS + MBEDTLS_ERR_ASN1_OUT_OF_DATA
1991*62c56f98SSadaf Ebrahimi
1992*62c56f98SSadaf EbrahimiX509 CRT ASN1 (TBSCertificate v3, inv CertificatePolicies, outer length inv encoding)
1993*62c56f98SSadaf Ebrahimidepends_on:MBEDTLS_RSA_C:MBEDTLS_MD_CAN_SHA256
1994*62c56f98SSadaf Ebrahimix509parse_crt:"3081a9308193a0030201028204deadbeef300d06092a864886f70d01010b0500300c310a30080600130454657374301c170c303930313031303030303030170c303931323331323335393539300c310a30080600130454657374302a300d06092a864886f70d010101050003190030160210ffffffffffffffffffffffffffffffff0202ffffa100a200a30d300b30090603551d2004023085300d06092a864886f70d01010b0500030200ff":"":MBEDTLS_ERR_X509_INVALID_EXTENSIONS + MBEDTLS_ERR_ASN1_INVALID_LENGTH
1995*62c56f98SSadaf Ebrahimi
1996*62c56f98SSadaf EbrahimiX509 CRT ASN1 (TBSCertificate v3, inv CertificatePolicies, outer length out of bounds)
1997*62c56f98SSadaf Ebrahimidepends_on:MBEDTLS_RSA_C:MBEDTLS_MD_CAN_SHA256
1998*62c56f98SSadaf Ebrahimix509parse_crt:"3081a9308193a0030201028204deadbeef300d06092a864886f70d01010b0500300c310a30080600130454657374301c170c303930313031303030303030170c303931323331323335393539300c310a30080600130454657374302a300d06092a864886f70d010101050003190030160210ffffffffffffffffffffffffffffffff0202ffffa100a200a30d300b30090603551d2004023001300d06092a864886f70d01010b0500030200ff":"":MBEDTLS_ERR_X509_INVALID_EXTENSIONS + MBEDTLS_ERR_ASN1_OUT_OF_DATA
1999*62c56f98SSadaf Ebrahimi
2000*62c56f98SSadaf EbrahimiX509 CRT ASN1 (TBSCertificate v3, inv CertificatePolicies, no policies)
2001*62c56f98SSadaf Ebrahimidepends_on:MBEDTLS_RSA_C:MBEDTLS_MD_CAN_SHA256
2002*62c56f98SSadaf Ebrahimix509parse_crt:"3081a9308193a0030201028204deadbeef300d06092a864886f70d01010b0500300c310a30080600130454657374301c170c303930313031303030303030170c303931323331323335393539300c310a30080600130454657374302a300d06092a864886f70d010101050003190030160210ffffffffffffffffffffffffffffffff0202ffffa100a200a30d300b30090603551d2004023000300d06092a864886f70d01010b0500030200ff":"":MBEDTLS_ERR_X509_INVALID_EXTENSIONS + MBEDTLS_ERR_ASN1_LENGTH_MISMATCH
2003*62c56f98SSadaf Ebrahimi
2004*62c56f98SSadaf EbrahimiX509 CRT ASN1 (TBSCertificate v3, inv CertificatePolicies, policy invalid tag)
2005*62c56f98SSadaf Ebrahimidepends_on:MBEDTLS_RSA_C:MBEDTLS_MD_CAN_SHA256
2006*62c56f98SSadaf Ebrahimix509parse_crt:"3081ab308195a0030201028204deadbeef300d06092a864886f70d01010b0500300c310a30080600130454657374301c170c303930313031303030303030170c303931323331323335393539300c310a30080600130454657374302a300d06092a864886f70d010101050003190030160210ffffffffffffffffffffffffffffffff0202ffffa100a200a30f300d300b0603551d20040430020500300d06092a864886f70d01010b0500030200ff":"":MBEDTLS_ERR_X509_INVALID_EXTENSIONS + MBEDTLS_ERR_ASN1_UNEXPECTED_TAG
2007*62c56f98SSadaf Ebrahimi
2008*62c56f98SSadaf EbrahimiX509 CRT ASN1 (TBSCertificate v3, inv CertificatePolicies, policy length missing)
2009*62c56f98SSadaf Ebrahimidepends_on:MBEDTLS_RSA_C:MBEDTLS_MD_CAN_SHA256
2010*62c56f98SSadaf Ebrahimix509parse_crt:"3081aa308194a0030201028204deadbeef300d06092a864886f70d01010b0500300c310a30080600130454657374301c170c303930313031303030303030170c303931323331323335393539300c310a30080600130454657374302a300d06092a864886f70d010101050003190030160210ffffffffffffffffffffffffffffffff0202ffffa100a200a30e300c300a0603551d200403300130300d06092a864886f70d01010b0500030200ff":"":MBEDTLS_ERR_X509_INVALID_EXTENSIONS + MBEDTLS_ERR_ASN1_OUT_OF_DATA
2011*62c56f98SSadaf Ebrahimi
2012*62c56f98SSadaf EbrahimiX509 CRT ASN1 (TBSCertificate v3, inv CertificatePolicies, policy length inv encoding)
2013*62c56f98SSadaf Ebrahimidepends_on:MBEDTLS_RSA_C:MBEDTLS_MD_CAN_SHA256
2014*62c56f98SSadaf Ebrahimix509parse_crt:"3081ab308195a0030201028204deadbeef300d06092a864886f70d01010b0500300c310a30080600130454657374301c170c303930313031303030303030170c303931323331323335393539300c310a30080600130454657374302a300d06092a864886f70d010101050003190030160210ffffffffffffffffffffffffffffffff0202ffffa100a200a30f300d300b0603551d20040430023085300d06092a864886f70d01010b0500030200ff":"":MBEDTLS_ERR_X509_INVALID_EXTENSIONS + MBEDTLS_ERR_ASN1_INVALID_LENGTH
2015*62c56f98SSadaf Ebrahimi
2016*62c56f98SSadaf EbrahimiX509 CRT ASN1 (TBSCertificate v3, inv CertificatePolicies, policy length out of bounds)
2017*62c56f98SSadaf Ebrahimidepends_on:MBEDTLS_RSA_C:MBEDTLS_MD_CAN_SHA256
2018*62c56f98SSadaf Ebrahimix509parse_crt:"3081ab308195a0030201028204deadbeef300d06092a864886f70d01010b0500300c310a30080600130454657374301c170c303930313031303030303030170c303931323331323335393539300c310a30080600130454657374302a300d06092a864886f70d010101050003190030160210ffffffffffffffffffffffffffffffff0202ffffa100a200a30f300d300b0603551d20040430023001300d06092a864886f70d01010b0500030200ff":"":MBEDTLS_ERR_X509_INVALID_EXTENSIONS + MBEDTLS_ERR_ASN1_OUT_OF_DATA
2019*62c56f98SSadaf Ebrahimi
2020*62c56f98SSadaf EbrahimiX509 CRT ASN1 (TBSCertificate v3, inv CertificatePolicies, empty policy)
2021*62c56f98SSadaf Ebrahimidepends_on:MBEDTLS_RSA_C:MBEDTLS_MD_CAN_SHA256
2022*62c56f98SSadaf Ebrahimix509parse_crt:"3081ab308195a0030201028204deadbeef300d06092a864886f70d01010b0500300c310a30080600130454657374301c170c303930313031303030303030170c303931323331323335393539300c310a30080600130454657374302a300d06092a864886f70d010101050003190030160210ffffffffffffffffffffffffffffffff0202ffffa100a200a30f300d300b0603551d20040430023000300d06092a864886f70d01010b0500030200ff":"":MBEDTLS_ERR_X509_INVALID_EXTENSIONS + MBEDTLS_ERR_ASN1_OUT_OF_DATA
2023*62c56f98SSadaf Ebrahimi
2024*62c56f98SSadaf EbrahimiX509 CRT ASN1 (TBSCertificate v3, inv CertificatePolicies, policy invalid OID tag)
2025*62c56f98SSadaf Ebrahimidepends_on:MBEDTLS_RSA_C:MBEDTLS_MD_CAN_SHA256
2026*62c56f98SSadaf Ebrahimix509parse_crt:"3081ad308197a0030201028204deadbeef300d06092a864886f70d01010b0500300c310a30080600130454657374301c170c303930313031303030303030170c303931323331323335393539300c310a30080600130454657374302a300d06092a864886f70d010101050003190030160210ffffffffffffffffffffffffffffffff0202ffffa100a200a311300f300d0603551d200406300430020500300d06092a864886f70d01010b0500030200ff":"":MBEDTLS_ERR_X509_INVALID_EXTENSIONS + MBEDTLS_ERR_ASN1_UNEXPECTED_TAG
2027*62c56f98SSadaf Ebrahimi
2028*62c56f98SSadaf EbrahimiX509 CRT ASN1 (TBSCertificate v3, inv CertificatePolicies, policy no OID length)
2029*62c56f98SSadaf Ebrahimidepends_on:MBEDTLS_RSA_C:MBEDTLS_MD_CAN_SHA256
2030*62c56f98SSadaf Ebrahimix509parse_crt:"3081ac308196a0030201028204deadbeef300d06092a864886f70d01010b0500300c310a30080600130454657374301c170c303930313031303030303030170c303931323331323335393539300c310a30080600130454657374302a300d06092a864886f70d010101050003190030160210ffffffffffffffffffffffffffffffff0202ffffa100a200a310300e300c0603551d2004053003300106300d06092a864886f70d01010b0500030200ff":"":MBEDTLS_ERR_X509_INVALID_EXTENSIONS + MBEDTLS_ERR_ASN1_OUT_OF_DATA
2031*62c56f98SSadaf Ebrahimi
2032*62c56f98SSadaf EbrahimiX509 CRT ASN1 (TBSCertificate v3, inv CertificatePolicies, policy OID length inv encoding)
2033*62c56f98SSadaf Ebrahimidepends_on:MBEDTLS_RSA_C:MBEDTLS_MD_CAN_SHA256
2034*62c56f98SSadaf Ebrahimix509parse_crt:"3081ad308197a0030201028204deadbeef300d06092a864886f70d01010b0500300c310a30080600130454657374301c170c303930313031303030303030170c303931323331323335393539300c310a30080600130454657374302a300d06092a864886f70d010101050003190030160210ffffffffffffffffffffffffffffffff0202ffffa100a200a311300f300d0603551d200406300430020685300d06092a864886f70d01010b0500030200ff":"":MBEDTLS_ERR_X509_INVALID_EXTENSIONS + MBEDTLS_ERR_ASN1_INVALID_LENGTH
2035*62c56f98SSadaf Ebrahimi
2036*62c56f98SSadaf EbrahimiX509 CRT ASN1 (TBSCertificate v3, inv CertificatePolicies, policy OID length out of bounds)
2037*62c56f98SSadaf Ebrahimidepends_on:MBEDTLS_RSA_C:MBEDTLS_MD_CAN_SHA256
2038*62c56f98SSadaf Ebrahimix509parse_crt:"3081ad308197a0030201028204deadbeef300d06092a864886f70d01010b0500300c310a30080600130454657374301c170c303930313031303030303030170c303931323331323335393539300c310a30080600130454657374302a300d06092a864886f70d010101050003190030160210ffffffffffffffffffffffffffffffff0202ffffa100a200a311300f300d0603551d200406300430020601300d06092a864886f70d01010b0500030200ff":"":MBEDTLS_ERR_X509_INVALID_EXTENSIONS + MBEDTLS_ERR_ASN1_OUT_OF_DATA
2039*62c56f98SSadaf Ebrahimi
2040*62c56f98SSadaf EbrahimiX509 CRT ASN1 (TBSCertificate v3, inv CertificatePolicies, unknown critical policy)
2041*62c56f98SSadaf Ebrahimidepends_on:MBEDTLS_RSA_C:MBEDTLS_MD_CAN_SHA256
2042*62c56f98SSadaf Ebrahimix509parse_crt:"3081b130819ba0030201028204deadbeef300d06092a864886f70d01010b0500300c310a30080600130454657374301c170c303930313031303030303030170c303931323331323335393539300c310a30080600130454657374302a300d06092a864886f70d010101050003190030160210ffffffffffffffffffffffffffffffff0202ffffa100a200a315301330110603551d20010101040730053003060100300d06092a864886f70d01010b0500030200ff":"":MBEDTLS_ERR_X509_FEATURE_UNAVAILABLE
2043*62c56f98SSadaf Ebrahimi
2044*62c56f98SSadaf EbrahimiX509 CRT ASN1 (TBSCertificate v3, inv CertificatePolicies, policy qualifier invalid tag)
2045*62c56f98SSadaf Ebrahimidepends_on:MBEDTLS_RSA_C:MBEDTLS_MD_CAN_SHA256
2046*62c56f98SSadaf Ebrahimix509parse_crt:"3081b030819aa0030201028204deadbeef300d06092a864886f70d01010b0500300c310a30080600130454657374301c170c303930313031303030303030170c303931323331323335393539300c310a30080600130454657374302a300d06092a864886f70d010101050003190030160210ffffffffffffffffffffffffffffffff0202ffffa100a200a314301230100603551d200409300730050601000500300d06092a864886f70d01010b0500030200ff":"":MBEDTLS_ERR_X509_INVALID_EXTENSIONS + MBEDTLS_ERR_ASN1_UNEXPECTED_TAG
2047*62c56f98SSadaf Ebrahimi
2048*62c56f98SSadaf EbrahimiX509 CRT ASN1 (TBSCertificate v3, inv CertificatePolicies, policy qualifier no length)
2049*62c56f98SSadaf Ebrahimidepends_on:MBEDTLS_RSA_C:MBEDTLS_MD_CAN_SHA256
2050*62c56f98SSadaf Ebrahimix509parse_crt:"3081af308199a0030201028204deadbeef300d06092a864886f70d01010b0500300c310a30080600130454657374301c170c303930313031303030303030170c303931323331323335393539300c310a30080600130454657374302a300d06092a864886f70d010101050003190030160210ffffffffffffffffffffffffffffffff0202ffffa100a200a3133011300f0603551d2004083006300406010030300d06092a864886f70d01010b0500030200ff":"":MBEDTLS_ERR_X509_INVALID_EXTENSIONS + MBEDTLS_ERR_ASN1_OUT_OF_DATA
2051*62c56f98SSadaf Ebrahimi
2052*62c56f98SSadaf EbrahimiX509 CRT ASN1 (TBSCertificate v3, inv CertificatePolicies, policy qualifier inv length encoding)
2053*62c56f98SSadaf Ebrahimidepends_on:MBEDTLS_RSA_C:MBEDTLS_MD_CAN_SHA256
2054*62c56f98SSadaf Ebrahimix509parse_crt:"3081b030819aa0030201028204deadbeef300d06092a864886f70d01010b0500300c310a30080600130454657374301c170c303930313031303030303030170c303931323331323335393539300c310a30080600130454657374302a300d06092a864886f70d010101050003190030160210ffffffffffffffffffffffffffffffff0202ffffa100a200a314301230100603551d200409300730050601003085300d06092a864886f70d01010b0500030200ff":"":MBEDTLS_ERR_X509_INVALID_EXTENSIONS + MBEDTLS_ERR_ASN1_INVALID_LENGTH
2055*62c56f98SSadaf Ebrahimi
2056*62c56f98SSadaf EbrahimiX509 CRT ASN1 (TBSCertificate v3, inv CertificatePolicies, policy qualifier length out of bounds)
2057*62c56f98SSadaf Ebrahimidepends_on:MBEDTLS_RSA_C:MBEDTLS_MD_CAN_SHA256
2058*62c56f98SSadaf Ebrahimix509parse_crt:"3081b030819aa0030201028204deadbeef300d06092a864886f70d01010b0500300c310a30080600130454657374301c170c303930313031303030303030170c303931323331323335393539300c310a30080600130454657374302a300d06092a864886f70d010101050003190030160210ffffffffffffffffffffffffffffffff0202ffffa100a200a314301230100603551d200409300730050601003001300d06092a864886f70d01010b0500030200ff":"":MBEDTLS_ERR_X509_INVALID_EXTENSIONS + MBEDTLS_ERR_ASN1_OUT_OF_DATA
2059*62c56f98SSadaf Ebrahimi
2060*62c56f98SSadaf EbrahimiX509 CRT ASN1 (TBS, inv extBasicConstraint, no pathlen length)
2061*62c56f98SSadaf Ebrahimidepends_on:MBEDTLS_RSA_C:MBEDTLS_MD_CAN_SHA256
2062*62c56f98SSadaf Ebrahimix509parse_crt:"3081b030819aa0030201028204deadbeef300d06092a864886f70d01010b0500300c310a30080600130454657374301c170c303930313031303030303030170c303931323331323335393539300c310a30080600130454657374302a300d06092A864886F70D010101050003190030160210ffffffffffffffffffffffffffffffff0202ffffa100a200a314301230100603551d130101010406300402010102300d06092a864886f70d01010b0500030200ff":"":MBEDTLS_ERR_X509_INVALID_EXTENSIONS + MBEDTLS_ERR_ASN1_OUT_OF_DATA
2063*62c56f98SSadaf Ebrahimi
2064*62c56f98SSadaf EbrahimiX509 CRT ASN1 (inv extBasicConstraint, pathlen is INT_MAX)
2065*62c56f98SSadaf Ebrahimidepends_on:MBEDTLS_RSA_C:MBEDTLS_MD_CAN_SHA256:MBEDTLS_MD_CAN_SHA1
2066*62c56f98SSadaf Ebrahimimbedtls_x509_crt_parse_file:"data_files/parse_input/server1_pathlen_int_max.crt":MBEDTLS_ERR_X509_INVALID_EXTENSIONS + MBEDTLS_ERR_ASN1_INVALID_LENGTH:0
2067*62c56f98SSadaf Ebrahimi
2068*62c56f98SSadaf EbrahimiX509 CRT ASN1 (pathlen is INT_MAX-1)
2069*62c56f98SSadaf Ebrahimidepends_on:MBEDTLS_RSA_C:MBEDTLS_MD_CAN_SHA256:MBEDTLS_MD_CAN_SHA1
2070*62c56f98SSadaf Ebrahimimbedtls_x509_crt_parse_file:"data_files/parse_input/server1_pathlen_int_max-1.crt":0:1
2071*62c56f98SSadaf Ebrahimi
2072*62c56f98SSadaf EbrahimiX509 CRT ASN1 (TBS, inv extBasicConstraint, pathlen inv length encoding)
2073*62c56f98SSadaf Ebrahimidepends_on:MBEDTLS_RSA_C:MBEDTLS_MD_CAN_SHA256
2074*62c56f98SSadaf Ebrahimix509parse_crt:"3081b130819ba0030201028204deadbeef300d06092a864886f70d01010b0500300c310a30080600130454657374301c170c303930313031303030303030170c303931323331323335393539300c310a30080600130454657374302a300d06092A864886F70D010101050003190030160210ffffffffffffffffffffffffffffffff0202ffffa100a200a315301330110603551d13010101040730050201010285300d06092a864886f70d01010b0500030200ff":"":MBEDTLS_ERR_X509_INVALID_EXTENSIONS + MBEDTLS_ERR_ASN1_INVALID_LENGTH
2075*62c56f98SSadaf Ebrahimi
2076*62c56f98SSadaf EbrahimiX509 CRT ASN1 (TBS, inv extBasicConstraint, pathlen length out of bounds)
2077*62c56f98SSadaf Ebrahimidepends_on:MBEDTLS_RSA_C:MBEDTLS_MD_CAN_SHA256
2078*62c56f98SSadaf Ebrahimix509parse_crt:"3081b130819ba0030201028204deadbeef300d06092a864886f70d01010b0500300c310a30080600130454657374301c170c303930313031303030303030170c303931323331323335393539300c310a30080600130454657374302a300d06092A864886F70D010101050003190030160210ffffffffffffffffffffffffffffffff0202ffffa100a200a315301330110603551d13010101040730050201010201300d06092a864886f70d01010b0500030200ff":"":MBEDTLS_ERR_X509_INVALID_EXTENSIONS + MBEDTLS_ERR_ASN1_OUT_OF_DATA
2079*62c56f98SSadaf Ebrahimi
2080*62c56f98SSadaf EbrahimiX509 CRT ASN1 (TBS, inv extBasicConstraint, pathlen empty)
2081*62c56f98SSadaf Ebrahimidepends_on:MBEDTLS_RSA_C:MBEDTLS_MD_CAN_SHA256
2082*62c56f98SSadaf Ebrahimix509parse_crt:"3081b130819ba0030201028204deadbeef300d06092a864886f70d01010b0500300c310a30080600130454657374301c170c303930313031303030303030170c303931323331323335393539300c310a30080600130454657374302a300d06092A864886F70D010101050003190030160210ffffffffffffffffffffffffffffffff0202ffffa100a200a315301330110603551d13010101040730050201010200300d06092a864886f70d01010b0500030200ff":"":MBEDTLS_ERR_X509_INVALID_EXTENSIONS + MBEDTLS_ERR_ASN1_INVALID_LENGTH
2083*62c56f98SSadaf Ebrahimi
2084*62c56f98SSadaf EbrahimiX509 CRT ASN1 (TBS, inv extBasicConstraint, pathlen length mismatch)
2085*62c56f98SSadaf Ebrahimidepends_on:MBEDTLS_RSA_C:MBEDTLS_MD_CAN_SHA256
2086*62c56f98SSadaf Ebrahimix509parse_crt:"3081b430819ea0030201028204deadbeef300d06092a864886f70d01010b0500300c310a30080600130454657374301c170c303930313031303030303030170c303931323331323335393539300c310a30080600130454657374302a300d06092A864886F70D010101050003190030160210ffffffffffffffffffffffffffffffff0202ffffa100a200a318301630140603551d13010101040a30080201010201010500300d06092a864886f70d01010b0500030200ff":"":MBEDTLS_ERR_X509_INVALID_EXTENSIONS + MBEDTLS_ERR_ASN1_LENGTH_MISMATCH
2087*62c56f98SSadaf Ebrahimi
2088*62c56f98SSadaf EbrahimiX509 CRT ASN1 (TBS, inv v3Ext, ExtKeyUsage bad second tag)
2089*62c56f98SSadaf Ebrahimidepends_on:MBEDTLS_RSA_C:MBEDTLS_MD_CAN_SHA256
2090*62c56f98SSadaf Ebrahimix509parse_crt:"3081bd3081a7a0030201028204deadbeef300d06092a864886f70d01010b0500300c310a30080600130454657374301c170c303930313031303030303030170c303931323331323335393539300c310a30080600130454657374302a300d06092A864886F70D010101050003190030160210ffffffffffffffffffffffffffffffff0202ffffa100a200a321301f301d0603551d250416301406082b0601050507030107082b06010505070302300d06092a864886f70d01010b0500030200ff":"":MBEDTLS_ERR_X509_INVALID_EXTENSIONS + MBEDTLS_ERR_ASN1_UNEXPECTED_TAG
2091*62c56f98SSadaf Ebrahimi
2092*62c56f98SSadaf EbrahimiX509 CRT ASN1 (TBS, inv SubjectAltName, empty)
2093*62c56f98SSadaf Ebrahimidepends_on:MBEDTLS_RSA_C:MBEDTLS_MD_CAN_SHA256
2094*62c56f98SSadaf Ebrahimix509parse_crt:"3081a7308191a0030201028204deadbeef300d06092a864886f70d01010b0500300c310a30080600130454657374301c170c303930313031303030303030170c303931323331323335393539300c310a30080600130454657374302a300d06092A864886F70D010101050003190030160210ffffffffffffffffffffffffffffffff0202ffffa100a200a30b300930070603551d110400300d06092a864886f70d01010b0500030200ff":"":MBEDTLS_ERR_X509_INVALID_EXTENSIONS + MBEDTLS_ERR_ASN1_OUT_OF_DATA
2095*62c56f98SSadaf Ebrahimi
2096*62c56f98SSadaf EbrahimiX509 CRT ASN1 (TBS, inv SubjectAltName, inv tag)
2097*62c56f98SSadaf Ebrahimidepends_on:MBEDTLS_RSA_C:MBEDTLS_MD_CAN_SHA256
2098*62c56f98SSadaf Ebrahimix509parse_crt:"3081a9308193a0030201028204deadbeef300d06092a864886f70d01010b0500300c310a30080600130454657374301c170c303930313031303030303030170c303931323331323335393539300c310a30080600130454657374302a300d06092A864886F70D010101050003190030160210ffffffffffffffffffffffffffffffff0202ffffa100a200a30d300b30090603551d1104020500300d06092a864886f70d01010b0500030200ff":"":MBEDTLS_ERR_X509_INVALID_EXTENSIONS + MBEDTLS_ERR_ASN1_UNEXPECTED_TAG
2099*62c56f98SSadaf Ebrahimi
2100*62c56f98SSadaf EbrahimiX509 CRT ASN1 (TBS, inv SubjectAltName, length missing)
2101*62c56f98SSadaf Ebrahimidepends_on:MBEDTLS_RSA_C:MBEDTLS_MD_CAN_SHA256
2102*62c56f98SSadaf Ebrahimix509parse_crt:"3081a8308192a0030201028204deadbeef300d06092a864886f70d01010b0500300c310a30080600130454657374301c170c303930313031303030303030170c303931323331323335393539300c310a30080600130454657374302a300d06092A864886F70D010101050003190030160210ffffffffffffffffffffffffffffffff0202ffffa100a200a30c300a30080603551d11040130300d06092a864886f70d01010b0500030200ff":"":MBEDTLS_ERR_X509_INVALID_EXTENSIONS + MBEDTLS_ERR_ASN1_OUT_OF_DATA
2103*62c56f98SSadaf Ebrahimi
2104*62c56f98SSadaf EbrahimiX509 CRT ASN1 (TBS, inv SubjectAltName, inv length encoding)
2105*62c56f98SSadaf Ebrahimidepends_on:MBEDTLS_RSA_C:MBEDTLS_MD_CAN_SHA256
2106*62c56f98SSadaf Ebrahimix509parse_crt:"3081a9308193a0030201028204deadbeef300d06092a864886f70d01010b0500300c310a30080600130454657374301c170c303930313031303030303030170c303931323331323335393539300c310a30080600130454657374302a300d06092A864886F70D010101050003190030160210ffffffffffffffffffffffffffffffff0202ffffa100a200a30d300b30090603551d1104023085300d06092a864886f70d01010b0500030200ff":"":MBEDTLS_ERR_X509_INVALID_EXTENSIONS + MBEDTLS_ERR_ASN1_INVALID_LENGTH
2107*62c56f98SSadaf Ebrahimi
2108*62c56f98SSadaf EbrahimiX509 CRT ASN1 (TBS, inv SubjectAltName, length out of bounds)
2109*62c56f98SSadaf Ebrahimidepends_on:MBEDTLS_RSA_C:MBEDTLS_MD_CAN_SHA256
2110*62c56f98SSadaf Ebrahimix509parse_crt:"3081a9308193a0030201028204deadbeef300d06092a864886f70d01010b0500300c310a30080600130454657374301c170c303930313031303030303030170c303931323331323335393539300c310a30080600130454657374302a300d06092A864886F70D010101050003190030160210ffffffffffffffffffffffffffffffff0202ffffa100a200a30d300b30090603551d1104023001300d06092a864886f70d01010b0500030200ff":"":MBEDTLS_ERR_X509_INVALID_EXTENSIONS + MBEDTLS_ERR_ASN1_OUT_OF_DATA
2111*62c56f98SSadaf Ebrahimi
2112*62c56f98SSadaf EbrahimiX509 CRT ASN1 (TBS, inv SubjectAltName, data remaining after name SEQUENCE)
2113*62c56f98SSadaf Ebrahimidepends_on:MBEDTLS_RSA_C:MBEDTLS_MD_CAN_SHA256
2114*62c56f98SSadaf Ebrahimix509parse_crt:"3081aa308194a0030201028204deadbeef300d06092a864886f70d01010b0500300c310a30080600130454657374301c170c303930313031303030303030170c303931323331323335393539300c310a30080600130454657374302a300d06092A864886F70D010101050003190030160210ffffffffffffffffffffffffffffffff0202ffffa100a200a30e300c300a0603551d110403300000300d06092a864886f70d01010b0500030200ff":"":MBEDTLS_ERR_X509_INVALID_EXTENSIONS + MBEDTLS_ERR_ASN1_LENGTH_MISMATCH
2115*62c56f98SSadaf Ebrahimi
2116*62c56f98SSadaf EbrahimiX509 CRT ASN1 (TBS, inv SubjectAltName, name component length missing)
2117*62c56f98SSadaf Ebrahimidepends_on:MBEDTLS_RSA_C:MBEDTLS_MD_CAN_SHA256
2118*62c56f98SSadaf Ebrahimix509parse_crt:"3081aa308194a0030201028204deadbeef300d06092a864886f70d01010b0500300c310a30080600130454657374301c170c303930313031303030303030170c303931323331323335393539300c310a30080600130454657374302a300d06092A864886F70D010101050003190030160210ffffffffffffffffffffffffffffffff0202ffffa100a200a30e300c300a0603551d110403300180300d06092a864886f70d01010b0500030200ff":"":MBEDTLS_ERR_X509_INVALID_EXTENSIONS + MBEDTLS_ERR_ASN1_OUT_OF_DATA
2119*62c56f98SSadaf Ebrahimi
2120*62c56f98SSadaf EbrahimiX509 CRT ASN1 (TBS, inv SubjectAltName, name component inv length encoding)
2121*62c56f98SSadaf Ebrahimidepends_on:MBEDTLS_RSA_C:MBEDTLS_MD_CAN_SHA256
2122*62c56f98SSadaf Ebrahimix509parse_crt:"3081ab308195a0030201028204deadbeef300d06092a864886f70d01010b0500300c310a30080600130454657374301c170c303930313031303030303030170c303931323331323335393539300c310a30080600130454657374302a300d06092A864886F70D010101050003190030160210ffffffffffffffffffffffffffffffff0202ffffa100a200a30f300d300b0603551d11040430028085300d06092a864886f70d01010b0500030200ff":"":MBEDTLS_ERR_X509_INVALID_EXTENSIONS + MBEDTLS_ERR_ASN1_INVALID_LENGTH
2123*62c56f98SSadaf Ebrahimi
2124*62c56f98SSadaf EbrahimiX509 CRT ASN1 (TBS, inv SubjectAltName, name component length out of bounds)
2125*62c56f98SSadaf Ebrahimidepends_on:MBEDTLS_RSA_C:MBEDTLS_MD_CAN_SHA256
2126*62c56f98SSadaf Ebrahimix509parse_crt:"3081ab308195a0030201028204deadbeef300d06092a864886f70d01010b0500300c310a30080600130454657374301c170c303930313031303030303030170c303931323331323335393539300c310a30080600130454657374302a300d06092A864886F70D010101050003190030160210ffffffffffffffffffffffffffffffff0202ffffa100a200a30f300d300b0603551d11040430028001300d06092a864886f70d01010b0500030200ff":"":MBEDTLS_ERR_X509_INVALID_EXTENSIONS + MBEDTLS_ERR_ASN1_OUT_OF_DATA
2127*62c56f98SSadaf Ebrahimi
2128*62c56f98SSadaf EbrahimiX509 CRT ASN1 (TBS, inv SubjectAltName, name component unexpected tag)
2129*62c56f98SSadaf Ebrahimidepends_on:MBEDTLS_RSA_C:MBEDTLS_MD_CAN_SHA256
2130*62c56f98SSadaf Ebrahimix509parse_crt:"3081ab308195a0030201028204deadbeef300d06092a864886f70d01010b0500300c310a30080600130454657374301c170c303930313031303030303030170c303931323331323335393539300c310a30080600130454657374302a300d06092A864886F70D010101050003190030160210ffffffffffffffffffffffffffffffff0202ffffa100a200a30f300d300b0603551d11040430024000300d06092a864886f70d01010b0500030200ff":"":MBEDTLS_ERR_X509_INVALID_EXTENSIONS + MBEDTLS_ERR_ASN1_UNEXPECTED_TAG
2131*62c56f98SSadaf Ebrahimi
2132*62c56f98SSadaf EbrahimiX509 CRT ASN1 (TBS, inv SubjectAltName, otherName component empty)
2133*62c56f98SSadaf Ebrahimidepends_on:MBEDTLS_RSA_C:MBEDTLS_MD_CAN_SHA256
2134*62c56f98SSadaf Ebrahimix509parse_crt:"3081ab308195a0030201028204deadbeef300d06092a864886f70d01010b0500300c310a30080600130454657374301c170c303930313031303030303030170c303931323331323335393539300c310a30080600130454657374302a300d06092A864886F70D010101050003190030160210ffffffffffffffffffffffffffffffff0202ffffa100a200a30f300d300b0603551d1104043002a000300d06092a864886f70d01010b0500030200ff":"":MBEDTLS_ERR_X509_INVALID_EXTENSIONS + MBEDTLS_ERR_ASN1_OUT_OF_DATA
2135*62c56f98SSadaf Ebrahimi
2136*62c56f98SSadaf EbrahimiX509 CRT ASN1 (TBS, inv SubjectAltName, otherName invalid OID tag)
2137*62c56f98SSadaf Ebrahimidepends_on:MBEDTLS_RSA_C:MBEDTLS_MD_CAN_SHA256
2138*62c56f98SSadaf Ebrahimix509parse_crt:"3081ad308197a0030201028204deadbeef300d06092a864886f70d01010b0500300c310a30080600130454657374301c170c303930313031303030303030170c303931323331323335393539300c310a30080600130454657374302a300d06092A864886F70D010101050003190030160210ffffffffffffffffffffffffffffffff0202ffffa100a200a311300f300d0603551d1104063004a0020500300d06092a864886f70d01010b0500030200ff":"":MBEDTLS_ERR_X509_INVALID_EXTENSIONS + MBEDTLS_ERR_ASN1_UNEXPECTED_TAG
2139*62c56f98SSadaf Ebrahimi
2140*62c56f98SSadaf EbrahimiX509 CRT ASN1 (TBS, inv SubjectAltName, otherName OID length missing)
2141*62c56f98SSadaf Ebrahimidepends_on:MBEDTLS_RSA_C:MBEDTLS_MD_CAN_SHA256
2142*62c56f98SSadaf Ebrahimix509parse_crt:"3081ac308196a0030201028204deadbeef300d06092a864886f70d01010b0500300c310a30080600130454657374301c170c303930313031303030303030170c303931323331323335393539300c310a30080600130454657374302a300d06092A864886F70D010101050003190030160210ffffffffffffffffffffffffffffffff0202ffffa100a200a310300e300c0603551d1104053003a00106300d06092a864886f70d01010b0500030200ff":"":MBEDTLS_ERR_X509_INVALID_EXTENSIONS + MBEDTLS_ERR_ASN1_OUT_OF_DATA
2143*62c56f98SSadaf Ebrahimi
2144*62c56f98SSadaf EbrahimiX509 CRT ASN1 (TBS, inv SubjectAltName, otherName OID inv length encoding)
2145*62c56f98SSadaf Ebrahimidepends_on:MBEDTLS_RSA_C:MBEDTLS_MD_CAN_SHA256
2146*62c56f98SSadaf Ebrahimix509parse_crt:"3081ad308197a0030201028204deadbeef300d06092a864886f70d01010b0500300c310a30080600130454657374301c170c303930313031303030303030170c303931323331323335393539300c310a30080600130454657374302a300d06092A864886F70D010101050003190030160210ffffffffffffffffffffffffffffffff0202ffffa100a200a311300f300d0603551d1104063004a0020685300d06092a864886f70d01010b0500030200ff":"":MBEDTLS_ERR_X509_INVALID_EXTENSIONS + MBEDTLS_ERR_ASN1_INVALID_LENGTH
2147*62c56f98SSadaf Ebrahimi
2148*62c56f98SSadaf EbrahimiX509 CRT ASN1 (TBS, inv SubjectAltName, otherName OID length out of bounds)
2149*62c56f98SSadaf Ebrahimidepends_on:MBEDTLS_RSA_C:MBEDTLS_MD_CAN_SHA256
2150*62c56f98SSadaf Ebrahimix509parse_crt:"3081ad308197a0030201028204deadbeef300d06092a864886f70d01010b0500300c310a30080600130454657374301c170c303930313031303030303030170c303931323331323335393539300c310a30080600130454657374302a300d06092A864886F70D010101050003190030160210ffffffffffffffffffffffffffffffff0202ffffa100a200a311300f300d0603551d1104063004a0020601300d06092a864886f70d01010b0500030200ff":"":MBEDTLS_ERR_X509_INVALID_EXTENSIONS + MBEDTLS_ERR_ASN1_OUT_OF_DATA
2151*62c56f98SSadaf Ebrahimi
2152*62c56f98SSadaf EbrahimiX509 CRT ASN1 (TBS, inv SubjectAltName, HWModuleName EXPLICIT tag missing
2153*62c56f98SSadaf Ebrahimidepends_on:MBEDTLS_RSA_C:MBEDTLS_MD_CAN_SHA256
2154*62c56f98SSadaf Ebrahimix509parse_crt:"3081b530819fa0030201028204deadbeef300d06092a864886f70d01010b0500300c310a30080600130454657374301c170c303930313031303030303030170c303931323331323335393539300c310a30080600130454657374302a300d06092A864886F70D010101050003190030160210ffffffffffffffffffffffffffffffff0202ffffa100a200a319301730150603551d11040e300ca00a06082b06010505070804300d06092a864886f70d01010b0500030200ff":"":MBEDTLS_ERR_X509_INVALID_EXTENSIONS + MBEDTLS_ERR_ASN1_OUT_OF_DATA
2155*62c56f98SSadaf Ebrahimi
2156*62c56f98SSadaf EbrahimiX509 CRT ASN1 (TBS, inv SubjectAltName, HWModuleName unexpected EXPLICIT tag)
2157*62c56f98SSadaf Ebrahimidepends_on:MBEDTLS_RSA_C:MBEDTLS_MD_CAN_SHA256
2158*62c56f98SSadaf Ebrahimix509parse_crt:"3081b73081a1a0030201028204deadbeef300d06092a864886f70d01010b0500300c310a30080600130454657374301c170c303930313031303030303030170c303931323331323335393539300c310a30080600130454657374302a300d06092A864886F70D010101050003190030160210ffffffffffffffffffffffffffffffff0202ffffa100a200a31b301930170603551d110410300ea00c06082b060105050708040500300d06092a864886f70d01010b0500030200ff":"":MBEDTLS_ERR_X509_INVALID_EXTENSIONS + MBEDTLS_ERR_ASN1_UNEXPECTED_TAG
2159*62c56f98SSadaf Ebrahimi
2160*62c56f98SSadaf EbrahimiX509 CRT ASN1 (TBS, inv SubjectAltName, HWModuleName outer length missing)
2161*62c56f98SSadaf Ebrahimidepends_on:MBEDTLS_RSA_C:MBEDTLS_MD_CAN_SHA256
2162*62c56f98SSadaf Ebrahimix509parse_crt:"3081b63081a0a0030201028204deadbeef300d06092a864886f70d01010b0500300c310a30080600130454657374301c170c303930313031303030303030170c303931323331323335393539300c310a30080600130454657374302a300d06092A864886F70D010101050003190030160210ffffffffffffffffffffffffffffffff0202ffffa100a200a31a301830160603551d11040f300da00b06082b06010505070804a0300d06092a864886f70d01010b0500030200ff":"":MBEDTLS_ERR_X509_INVALID_EXTENSIONS + MBEDTLS_ERR_ASN1_OUT_OF_DATA
2163*62c56f98SSadaf Ebrahimi
2164*62c56f98SSadaf EbrahimiX509 CRT ASN1 (TBS, inv SubjectAltName, HWModuleName inv outer length)
2165*62c56f98SSadaf Ebrahimidepends_on:MBEDTLS_RSA_C:MBEDTLS_MD_CAN_SHA256
2166*62c56f98SSadaf Ebrahimix509parse_crt:"3081b73081a1a0030201028204deadbeef300d06092a864886f70d01010b0500300c310a30080600130454657374301c170c303930313031303030303030170c303931323331323335393539300c310a30080600130454657374302a300d06092A864886F70D010101050003190030160210ffffffffffffffffffffffffffffffff0202ffffa100a200a31b301930170603551d110410300ea00c06082b06010505070804a085300d06092a864886f70d01010b0500030200ff":"":MBEDTLS_ERR_X509_INVALID_EXTENSIONS + MBEDTLS_ERR_ASN1_INVALID_LENGTH
2167*62c56f98SSadaf Ebrahimi
2168*62c56f98SSadaf EbrahimiX509 CRT ASN1 (TBS, inv SubjectAltName, HWModuleName outer length out of bounds)
2169*62c56f98SSadaf Ebrahimidepends_on:MBEDTLS_RSA_C:MBEDTLS_MD_CAN_SHA256
2170*62c56f98SSadaf Ebrahimix509parse_crt:"3081b73081a1a0030201028204deadbeef300d06092a864886f70d01010b0500300c310a30080600130454657374301c170c303930313031303030303030170c303931323331323335393539300c310a30080600130454657374302a300d06092A864886F70D010101050003190030160210ffffffffffffffffffffffffffffffff0202ffffa100a200a31b301930170603551d110410300ea00c06082b06010505070804a001300d06092a864886f70d01010b0500030200ff":"":MBEDTLS_ERR_X509_INVALID_EXTENSIONS + MBEDTLS_ERR_ASN1_OUT_OF_DATA
2171*62c56f98SSadaf Ebrahimi
2172*62c56f98SSadaf EbrahimiX509 CRT ASN1 (TBS, inv SubjectAltName, HWModuleName outer length 0)
2173*62c56f98SSadaf Ebrahimidepends_on:MBEDTLS_RSA_C:MBEDTLS_MD_CAN_SHA256
2174*62c56f98SSadaf Ebrahimix509parse_crt:"3081b73081a1a0030201028204deadbeef300d06092a864886f70d01010b0500300c310a30080600130454657374301c170c303930313031303030303030170c303931323331323335393539300c310a30080600130454657374302a300d06092A864886F70D010101050003190030160210ffffffffffffffffffffffffffffffff0202ffffa100a200a31b301930170603551d110410300ea00c06082b06010505070804a000300d06092a864886f70d01010b0500030200ff":"":MBEDTLS_ERR_X509_INVALID_EXTENSIONS + MBEDTLS_ERR_ASN1_OUT_OF_DATA
2175*62c56f98SSadaf Ebrahimi
2176*62c56f98SSadaf EbrahimiX509 CRT ASN1 (TBS, inv SubjectAltName, HWModuleName inner tag invalid)
2177*62c56f98SSadaf Ebrahimidepends_on:MBEDTLS_RSA_C:MBEDTLS_MD_CAN_SHA256
2178*62c56f98SSadaf Ebrahimix509parse_crt:"3081b93081a3a0030201028204deadbeef300d06092a864886f70d01010b0500300c310a30080600130454657374301c170c303930313031303030303030170c303931323331323335393539300c310a30080600130454657374302a300d06092A864886F70D010101050003190030160210ffffffffffffffffffffffffffffffff0202ffffa100a200a31d301b30190603551d1104123010a00e06082b06010505070804a0020500300d06092a864886f70d01010b0500030200ff":"":MBEDTLS_ERR_X509_INVALID_EXTENSIONS + MBEDTLS_ERR_ASN1_UNEXPECTED_TAG
2179*62c56f98SSadaf Ebrahimi
2180*62c56f98SSadaf EbrahimiX509 CRT ASN1 (TBS, inv SubjectAltName, HWModuleName inner length missing)
2181*62c56f98SSadaf Ebrahimidepends_on:MBEDTLS_RSA_C:MBEDTLS_MD_CAN_SHA256
2182*62c56f98SSadaf Ebrahimix509parse_crt:"3081b83081a2a0030201028204deadbeef300d06092a864886f70d01010b0500300c310a30080600130454657374301c170c303930313031303030303030170c303931323331323335393539300c310a30080600130454657374302a300d06092A864886F70D010101050003190030160210ffffffffffffffffffffffffffffffff0202ffffa100a200a31c301a30180603551d110411300fa00d06082b06010505070804a00130300d06092a864886f70d01010b0500030200ff":"":MBEDTLS_ERR_X509_INVALID_EXTENSIONS + MBEDTLS_ERR_ASN1_OUT_OF_DATA
2183*62c56f98SSadaf Ebrahimi
2184*62c56f98SSadaf EbrahimiX509 CRT ASN1 (TBS, inv SubjectAltName, HWModuleName inner length inv encoding)
2185*62c56f98SSadaf Ebrahimidepends_on:MBEDTLS_RSA_C:MBEDTLS_MD_CAN_SHA256
2186*62c56f98SSadaf Ebrahimix509parse_crt:"3081b93081a3a0030201028204deadbeef300d06092a864886f70d01010b0500300c310a30080600130454657374301c170c303930313031303030303030170c303931323331323335393539300c310a30080600130454657374302a300d06092A864886F70D010101050003190030160210ffffffffffffffffffffffffffffffff0202ffffa100a200a31d301b30190603551d1104123010a00e06082b06010505070804a0023085300d06092a864886f70d01010b0500030200ff":"":MBEDTLS_ERR_X509_INVALID_EXTENSIONS + MBEDTLS_ERR_ASN1_INVALID_LENGTH
2187*62c56f98SSadaf Ebrahimi
2188*62c56f98SSadaf EbrahimiX509 CRT ASN1 (TBS, inv SubjectAltName, HWModuleName inner length out of bounds)
2189*62c56f98SSadaf Ebrahimidepends_on:MBEDTLS_RSA_C:MBEDTLS_MD_CAN_SHA256
2190*62c56f98SSadaf Ebrahimix509parse_crt:"3081b93081a3a0030201028204deadbeef300d06092a864886f70d01010b0500300c310a30080600130454657374301c170c303930313031303030303030170c303931323331323335393539300c310a30080600130454657374302a300d06092A864886F70D010101050003190030160210ffffffffffffffffffffffffffffffff0202ffffa100a200a31d301b30190603551d1104123010a00e06082b06010505070804a0023001300d06092a864886f70d01010b0500030200ff":"":MBEDTLS_ERR_X509_INVALID_EXTENSIONS + MBEDTLS_ERR_ASN1_OUT_OF_DATA
2191*62c56f98SSadaf Ebrahimi
2192*62c56f98SSadaf EbrahimiX509 CRT ASN1 (TBS, inv SubjectAltName, HWModuleName empty)
2193*62c56f98SSadaf Ebrahimidepends_on:MBEDTLS_RSA_C:MBEDTLS_MD_CAN_SHA256
2194*62c56f98SSadaf Ebrahimix509parse_crt:"3081b93081a3a0030201028204deadbeef300d06092a864886f70d01010b0500300c310a30080600130454657374301c170c303930313031303030303030170c303931323331323335393539300c310a30080600130454657374302a300d06092A864886F70D010101050003190030160210ffffffffffffffffffffffffffffffff0202ffffa100a200a31d301b30190603551d1104123010a00e06082b06010505070804a0023000300d06092a864886f70d01010b0500030200ff":"":MBEDTLS_ERR_X509_INVALID_EXTENSIONS + MBEDTLS_ERR_ASN1_OUT_OF_DATA
2195*62c56f98SSadaf Ebrahimi
2196*62c56f98SSadaf EbrahimiX509 CRT ASN1 (TBS, inv SubjectAltName, HWModuleName unexpected OID tag)
2197*62c56f98SSadaf Ebrahimidepends_on:MBEDTLS_RSA_C:MBEDTLS_MD_CAN_SHA256
2198*62c56f98SSadaf Ebrahimix509parse_crt:"3081bb3081a5a0030201028204deadbeef300d06092a864886f70d01010b0500300c310a30080600130454657374301c170c303930313031303030303030170c303931323331323335393539300c310a30080600130454657374302a300d06092A864886F70D010101050003190030160210ffffffffffffffffffffffffffffffff0202ffffa100a200a31f301d301b0603551d1104143012a01006082b06010505070804a00430020500300d06092a864886f70d01010b0500030200ff":"":MBEDTLS_ERR_X509_INVALID_EXTENSIONS + MBEDTLS_ERR_ASN1_UNEXPECTED_TAG
2199*62c56f98SSadaf Ebrahimi
2200*62c56f98SSadaf EbrahimiX509 CRT ASN1 (TBS, inv SubjectAltName, HWModuleName OID no length)
2201*62c56f98SSadaf Ebrahimidepends_on:MBEDTLS_RSA_C:MBEDTLS_MD_CAN_SHA256
2202*62c56f98SSadaf Ebrahimix509parse_crt:"3081ba3081a4a0030201028204deadbeef300d06092a864886f70d01010b0500300c310a30080600130454657374301c170c303930313031303030303030170c303931323331323335393539300c310a30080600130454657374302a300d06092A864886F70D010101050003190030160210ffffffffffffffffffffffffffffffff0202ffffa100a200a31e301c301a0603551d1104133011a00f06082b06010505070804a003300106300d06092a864886f70d01010b0500030200ff":"":MBEDTLS_ERR_X509_INVALID_EXTENSIONS + MBEDTLS_ERR_ASN1_OUT_OF_DATA
2203*62c56f98SSadaf Ebrahimi
2204*62c56f98SSadaf EbrahimiX509 CRT ASN1 (TBS, inv SubjectAltName, HWModuleName OID inv length encoding)
2205*62c56f98SSadaf Ebrahimidepends_on:MBEDTLS_RSA_C:MBEDTLS_MD_CAN_SHA256
2206*62c56f98SSadaf Ebrahimix509parse_crt:"3081bb3081a5a0030201028204deadbeef300d06092a864886f70d01010b0500300c310a30080600130454657374301c170c303930313031303030303030170c303931323331323335393539300c310a30080600130454657374302a300d06092A864886F70D010101050003190030160210ffffffffffffffffffffffffffffffff0202ffffa100a200a31f301d301b0603551d1104143012a01006082b06010505070804a00430020685300d06092a864886f70d01010b0500030200ff":"":MBEDTLS_ERR_X509_INVALID_EXTENSIONS + MBEDTLS_ERR_ASN1_INVALID_LENGTH
2207*62c56f98SSadaf Ebrahimi
2208*62c56f98SSadaf EbrahimiX509 CRT ASN1 (TBS, inv SubjectAltName, HWModuleName OID length out of bounds)
2209*62c56f98SSadaf Ebrahimidepends_on:MBEDTLS_RSA_C:MBEDTLS_MD_CAN_SHA256
2210*62c56f98SSadaf Ebrahimix509parse_crt:"3081bb3081a5a0030201028204deadbeef300d06092a864886f70d01010b0500300c310a30080600130454657374301c170c303930313031303030303030170c303931323331323335393539300c310a30080600130454657374302a300d06092A864886F70D010101050003190030160210ffffffffffffffffffffffffffffffff0202ffffa100a200a31f301d301b0603551d1104143012a01006082b06010505070804a00430020601300d06092a864886f70d01010b0500030200ff":"":MBEDTLS_ERR_X509_INVALID_EXTENSIONS + MBEDTLS_ERR_ASN1_OUT_OF_DATA
2211*62c56f98SSadaf Ebrahimi
2212*62c56f98SSadaf EbrahimiX509 CRT ASN1 (TBS, inv SubjectAltName, HWModuleName data missing)
2213*62c56f98SSadaf Ebrahimidepends_on:MBEDTLS_RSA_C:MBEDTLS_MD_CAN_SHA256
2214*62c56f98SSadaf Ebrahimix509parse_crt:"3081bb3081a5a0030201028204deadbeef300d06092a864886f70d01010b0500300c310a30080600130454657374301c170c303930313031303030303030170c303931323331323335393539300c310a30080600130454657374302a300d06092A864886F70D010101050003190030160210ffffffffffffffffffffffffffffffff0202ffffa100a200a31f301d301b0603551d1104143012a01006082b06010505070804a00430020600300d06092a864886f70d01010b0500030200ff":"":MBEDTLS_ERR_X509_INVALID_EXTENSIONS + MBEDTLS_ERR_ASN1_OUT_OF_DATA
2215*62c56f98SSadaf Ebrahimi
2216*62c56f98SSadaf EbrahimiX509 CRT ASN1 (TBS, inv SubjectAltName, HWModuleName data invalid tag)
2217*62c56f98SSadaf Ebrahimidepends_on:MBEDTLS_RSA_C:MBEDTLS_MD_CAN_SHA256
2218*62c56f98SSadaf Ebrahimix509parse_crt:"3081bd3081a7a0030201028204deadbeef300d06092a864886f70d01010b0500300c310a30080600130454657374301c170c303930313031303030303030170c303931323331323335393539300c310a30080600130454657374302a300d06092A864886F70D010101050003190030160210ffffffffffffffffffffffffffffffff0202ffffa100a200a321301f301d0603551d1104163014a01206082b06010505070804a006300406000500300d06092a864886f70d01010b0500030200ff":"":MBEDTLS_ERR_X509_INVALID_EXTENSIONS + MBEDTLS_ERR_ASN1_UNEXPECTED_TAG
2219*62c56f98SSadaf Ebrahimi
2220*62c56f98SSadaf EbrahimiX509 CRT ASN1 (TBS, inv SubjectAltName, HWModuleName data length missing)
2221*62c56f98SSadaf Ebrahimidepends_on:MBEDTLS_RSA_C:MBEDTLS_MD_CAN_SHA256
2222*62c56f98SSadaf Ebrahimix509parse_crt:"3081bc3081a6a0030201028204deadbeef300d06092a864886f70d01010b0500300c310a30080600130454657374301c170c303930313031303030303030170c303931323331323335393539300c310a30080600130454657374302a300d06092A864886F70D010101050003190030160210ffffffffffffffffffffffffffffffff0202ffffa100a200a320301e301c0603551d1104153013a01106082b06010505070804a0053003060004300d06092a864886f70d01010b0500030200ff":"":MBEDTLS_ERR_X509_INVALID_EXTENSIONS + MBEDTLS_ERR_ASN1_OUT_OF_DATA
2223*62c56f98SSadaf Ebrahimi
2224*62c56f98SSadaf EbrahimiX509 CRT ASN1 (TBS, inv SubjectAltName, HWModuleName data inv length encoding)
2225*62c56f98SSadaf Ebrahimidepends_on:MBEDTLS_RSA_C:MBEDTLS_MD_CAN_SHA256
2226*62c56f98SSadaf Ebrahimix509parse_crt:"3081bd3081a7a0030201028204deadbeef300d06092a864886f70d01010b0500300c310a30080600130454657374301c170c303930313031303030303030170c303931323331323335393539300c310a30080600130454657374302a300d06092A864886F70D010101050003190030160210ffffffffffffffffffffffffffffffff0202ffffa100a200a321301f301d0603551d1104163014a01206082b06010505070804a006300406000485300d06092a864886f70d01010b0500030200ff":"":MBEDTLS_ERR_X509_INVALID_EXTENSIONS + MBEDTLS_ERR_ASN1_INVALID_LENGTH
2227*62c56f98SSadaf Ebrahimi
2228*62c56f98SSadaf EbrahimiX509 CRT ASN1 (TBS, inv SubjectAltName, HWModuleName data length out of bounds)
2229*62c56f98SSadaf Ebrahimidepends_on:MBEDTLS_RSA_C:MBEDTLS_MD_CAN_SHA256
2230*62c56f98SSadaf Ebrahimix509parse_crt:"3081bd3081a7a0030201028204deadbeef300d06092a864886f70d01010b0500300c310a30080600130454657374301c170c303930313031303030303030170c303931323331323335393539300c310a30080600130454657374302a300d06092A864886F70D010101050003190030160210ffffffffffffffffffffffffffffffff0202ffffa100a200a321301f301d0603551d1104163014a01206082b06010505070804a006300406000401300d06092a864886f70d01010b0500030200ff":"":MBEDTLS_ERR_X509_INVALID_EXTENSIONS + MBEDTLS_ERR_ASN1_OUT_OF_DATA
2231*62c56f98SSadaf Ebrahimi
2232*62c56f98SSadaf EbrahimiX509 CRT ASN1 (TBS, inv SubjectAltName, HWModuleName data remaining #1)
2233*62c56f98SSadaf Ebrahimidepends_on:MBEDTLS_RSA_C:MBEDTLS_MD_CAN_SHA256
2234*62c56f98SSadaf Ebrahimix509parse_crt:"3081bf3081a9a0030201028204deadbeef300d06092a864886f70d01010b0500300c310a30080600130454657374301c170c303930313031303030303030170c303931323331323335393539300c310a30080600130454657374302a300d06092A864886F70D010101050003190030160210ffffffffffffffffffffffffffffffff0202ffffa100a200a3233021301f0603551d1104183016a01406082b06010505070804a0083006060004000500300d06092a864886f70d01010b0500030200ff":"":MBEDTLS_ERR_X509_INVALID_EXTENSIONS + MBEDTLS_ERR_ASN1_LENGTH_MISMATCH
2235*62c56f98SSadaf Ebrahimi
2236*62c56f98SSadaf EbrahimiX509 CRT ASN1 (TBS, inv SubjectAltName, HWModuleName data remaining #2)
2237*62c56f98SSadaf Ebrahimidepends_on:MBEDTLS_RSA_C:MBEDTLS_MD_CAN_SHA256
2238*62c56f98SSadaf Ebrahimix509parse_crt:"3081bf3081a9a0030201028204deadbeef300d06092a864886f70d01010b0500300c310a30080600130454657374301c170c303930313031303030303030170c303931323331323335393539300c310a30080600130454657374302a300d06092A864886F70D010101050003190030160210ffffffffffffffffffffffffffffffff0202ffffa100a200a3233021301f0603551d1104183016a01406082b06010505070804a0083004060004000500300d06092a864886f70d01010b0500030200ff":"":MBEDTLS_ERR_X509_INVALID_EXTENSIONS + MBEDTLS_ERR_ASN1_LENGTH_MISMATCH
2239*62c56f98SSadaf Ebrahimi
2240*62c56f98SSadaf EbrahimiX509 CRT ASN1 (TBS, inv SubjectAltName, HWModuleName data remaining #3)
2241*62c56f98SSadaf Ebrahimidepends_on:MBEDTLS_RSA_C:MBEDTLS_MD_CAN_SHA256
2242*62c56f98SSadaf Ebrahimix509parse_crt:"3081bf3081a9a0030201028204deadbeef300d06092a864886f70d01010b0500300c310a30080600130454657374301c170c303930313031303030303030170c303931323331323335393539300c310a30080600130454657374302a300d06092A864886F70D010101050003190030160210ffffffffffffffffffffffffffffffff0202ffffa100a200a3233021301f0603551d1104183016a01406082b06010505070804a0063004060004000500300d06092a864886f70d01010b0500030200ff":"":MBEDTLS_ERR_X509_INVALID_EXTENSIONS + MBEDTLS_ERR_ASN1_LENGTH_MISMATCH
2243*62c56f98SSadaf Ebrahimi
2244*62c56f98SSadaf EbrahimiX509 CRT ASN1 (TBS, inv v3Ext, SubjectAltName repeated)
2245*62c56f98SSadaf Ebrahimidepends_on:MBEDTLS_RSA_C:MBEDTLS_MD_CAN_SHA256
2246*62c56f98SSadaf Ebrahimix509parse_crt:"3081dc3081c6a0030201028204deadbeef300d06092a864886f70d01010b0500300c310a30080600130454657374301c170c303930313031303030303030170c303931323331323335393539300c310a30080600130454657374302a300d06092A864886F70D010101050003190030160210ffffffffffffffffffffffffffffffff0202ffffa100a200a340303e301d0603551d11041630148208666f6f2e7465737482086261722e74657374301d0603551d11041630148208666f6f2e7465737482086261722e74657374300d06092a864886f70d01010b0500030200ff":"":MBEDTLS_ERR_X509_INVALID_EXTENSIONS
2247*62c56f98SSadaf Ebrahimi
2248*62c56f98SSadaf EbrahimiX509 CRT ASN1 (TBS, inv v3Ext, ExtKeyUsage repeated)
2249*62c56f98SSadaf Ebrahimidepends_on:MBEDTLS_RSA_C:MBEDTLS_MD_CAN_SHA256
2250*62c56f98SSadaf Ebrahimix509parse_crt:"3081dc3081c6a0030201028204deadbeef300d06092a864886f70d01010b0500300c310a30080600130454657374301c170c303930313031303030303030170c303931323331323335393539300c310a30080600130454657374302a300d06092A864886F70D010101050003190030160210ffffffffffffffffffffffffffffffff0202ffffa100a200a340303e301d0603551d250416301406082b0601050507030106082b06010505070302301d0603551d250416301406082b0601050507030106082b06010505070302300d06092a864886f70d01010b0500030200ff":"":MBEDTLS_ERR_X509_INVALID_EXTENSIONS
2251*62c56f98SSadaf Ebrahimi
2252*62c56f98SSadaf EbrahimiX509 CRT ASN1 (TBS, inv v3Ext, SubjectAltName repeated outside Extensions)
2253*62c56f98SSadaf Ebrahimidepends_on:MBEDTLS_RSA_C:MBEDTLS_MD_CAN_SHA256
2254*62c56f98SSadaf Ebrahimix509parse_crt:"3081dc3081c6a0030201028204deadbeef300d06092a864886f70d01010b0500300c310a30080600130454657374301c170c303930313031303030303030170c303931323331323335393539300c310a30080600130454657374302a300d06092A864886F70D010101050003190030160210ffffffffffffffffffffffffffffffff0202ffffa100a200a321301f301d0603551d11041630148208666f6f2e7465737482086261722e74657374301d0603551d11041630148208666f6f2e7465737482086261722e74657374300d06092a864886f70d01010b0500030200ff":"":MBEDTLS_ERR_X509_INVALID_FORMAT + MBEDTLS_ERR_ASN1_LENGTH_MISMATCH
2255*62c56f98SSadaf Ebrahimi
2256*62c56f98SSadaf EbrahimiX509 CRT (TBS, valid v3Ext in v3 CRT)
2257*62c56f98SSadaf Ebrahimidepends_on:MBEDTLS_RSA_C:MBEDTLS_MD_CAN_SHA256
2258*62c56f98SSadaf Ebrahimix509parse_crt:"3081b93081a3a0030201028204deadbeef300d06092a864886f70d01010b0500300c310a30080600130454657374301c170c303930313031303030303030170c303931323331323335393539300c310a30080600130454657374302a300d06092A864886F70D010101050003190030160210ffffffffffffffffffffffffffffffff0202ffffa321301f301d0603551d11041630148208666f6f2e7465737482086261722e74657374300d06092a864886f70d01010b0500030200ff":"cert. version     \: 3\nserial number     \: DE\:AD\:BE\:EF\nissuer name       \: ??=Test\nsubject name      \: ??=Test\nissued  on        \: 2009-01-01 00\:00\:00\nexpires on        \: 2009-12-31 23\:59\:59\nsigned using      \: RSA with SHA-256\nRSA key size      \: 128 bits\nsubject alt name  \:\n    dNSName \: foo.test\n    dNSName \: bar.test\n":0
2259*62c56f98SSadaf Ebrahimi
2260*62c56f98SSadaf EbrahimiX509 CRT ASN1 (TBS, valid v3Ext in v1 CRT)
2261*62c56f98SSadaf Ebrahimidepends_on:MBEDTLS_RSA_C:MBEDTLS_MD_CAN_SHA256
2262*62c56f98SSadaf Ebrahimix509parse_crt:"3081b93081a3a0030201008204deadbeef300d06092a864886f70d01010b0500300c310a30080600130454657374301c170c303930313031303030303030170c303931323331323335393539300c310a30080600130454657374302a300d06092A864886F70D010101050003190030160210ffffffffffffffffffffffffffffffff0202ffffa321301f301d0603551d11041630148208666f6f2e7465737482086261722e74657374300d06092a864886f70d01010b0500030200ff":"":MBEDTLS_ERR_X509_INVALID_FORMAT + MBEDTLS_ERR_ASN1_LENGTH_MISMATCH
2263*62c56f98SSadaf Ebrahimi
2264*62c56f98SSadaf EbrahimiX509 CRT ASN1 (TBS, valid v3Ext in v2 CRT)
2265*62c56f98SSadaf Ebrahimidepends_on:MBEDTLS_RSA_C:MBEDTLS_MD_CAN_SHA256
2266*62c56f98SSadaf Ebrahimix509parse_crt:"3081b93081a3a0030201018204deadbeef300d06092a864886f70d01010b0500300c310a30080600130454657374301c170c303930313031303030303030170c303931323331323335393539300c310a30080600130454657374302a300d06092A864886F70D010101050003190030160210ffffffffffffffffffffffffffffffff0202ffffa321301f301d0603551d11041630148208666f6f2e7465737482086261722e74657374300d06092a864886f70d01010b0500030200ff":"":MBEDTLS_ERR_X509_INVALID_FORMAT + MBEDTLS_ERR_ASN1_LENGTH_MISMATCH
2267*62c56f98SSadaf Ebrahimi
2268*62c56f98SSadaf EbrahimiX509 CRT ASN1 (TBS, valid SubjectID, valid IssuerID, inv v3Ext, SubjectAltName repeated outside Extensions, inv SubjectAltNames tag)
2269*62c56f98SSadaf Ebrahimidepends_on:MBEDTLS_RSA_C:MBEDTLS_MD_CAN_SHA1
2270*62c56f98SSadaf Ebrahimix509parse_crt:"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":"":MBEDTLS_ERR_X509_INVALID_EXTENSIONS + MBEDTLS_ERR_ASN1_UNEXPECTED_TAG
2271*62c56f98SSadaf Ebrahimi
2272*62c56f98SSadaf EbrahimiX509 CRT ASN1 (SignatureAlgorithm missing)
2273*62c56f98SSadaf Ebrahimidepends_on:MBEDTLS_RSA_C:MBEDTLS_MD_CAN_SHA256
2274*62c56f98SSadaf Ebrahimix509parse_crt:"3081aa3081a7a0030201028204deadbeef300d06092a864886f70d01010b0500300c310a30080600130454657374301c170c303930313031303030303030170c303931323331323335393539300c310a30080600130454657374302a300d06092A864886F70D010101050003190030160210ffffffffffffffffffffffffffffffff0202ffffa100a200a321301f301d0603551d11041630148208666f6f2e7465737482086261722e74657374":"":MBEDTLS_ERR_X509_INVALID_ALG + MBEDTLS_ERR_ASN1_OUT_OF_DATA
2275*62c56f98SSadaf Ebrahimi
2276*62c56f98SSadaf EbrahimiX509 CRT ASN1 (inv SignatureAlgorithm, bad tag)
2277*62c56f98SSadaf Ebrahimidepends_on:MBEDTLS_RSA_C:MBEDTLS_MD_CAN_SHA256
2278*62c56f98SSadaf Ebrahimix509parse_crt:"3081ac3081a7a0030201028204deadbeef300d06092a864886f70d01010b0500300c310a30080600130454657374301c170c303930313031303030303030170c303931323331323335393539300c310a30080600130454657374302a300d06092A864886F70D010101050003190030160210ffffffffffffffffffffffffffffffff0202ffffa100a200a321301f301d0603551d11041630148208666f6f2e7465737482086261722e746573740500":"":MBEDTLS_ERR_X509_INVALID_ALG + MBEDTLS_ERR_ASN1_UNEXPECTED_TAG
2279*62c56f98SSadaf Ebrahimi
2280*62c56f98SSadaf EbrahimiX509 CRT ASN1 (inv SignatureAlgorithm, length missing)
2281*62c56f98SSadaf Ebrahimidepends_on:MBEDTLS_RSA_C:MBEDTLS_MD_CAN_SHA256
2282*62c56f98SSadaf Ebrahimix509parse_crt:"3081ab3081a7a0030201028204deadbeef300d06092a864886f70d01010b0500300c310a30080600130454657374301c170c303930313031303030303030170c303931323331323335393539300c310a30080600130454657374302a300d06092A864886F70D010101050003190030160210ffffffffffffffffffffffffffffffff0202ffffa100a200a321301f301d0603551d11041630148208666f6f2e7465737482086261722e7465737430":"":MBEDTLS_ERR_X509_INVALID_ALG + MBEDTLS_ERR_ASN1_OUT_OF_DATA
2283*62c56f98SSadaf Ebrahimi
2284*62c56f98SSadaf EbrahimiX509 CRT ASN1 (inv SignatureAlgorithm, inv length encoding)
2285*62c56f98SSadaf Ebrahimidepends_on:MBEDTLS_RSA_C:MBEDTLS_MD_CAN_SHA256
2286*62c56f98SSadaf Ebrahimix509parse_crt:"3081ac3081a7a0030201028204deadbeef300d06092a864886f70d01010b0500300c310a30080600130454657374301c170c303930313031303030303030170c303931323331323335393539300c310a30080600130454657374302a300d06092A864886F70D010101050003190030160210ffffffffffffffffffffffffffffffff0202ffffa100a200a321301f301d0603551d11041630148208666f6f2e7465737482086261722e746573743085":"":MBEDTLS_ERR_X509_INVALID_ALG + MBEDTLS_ERR_ASN1_INVALID_LENGTH
2287*62c56f98SSadaf Ebrahimi
2288*62c56f98SSadaf EbrahimiX509 CRT ASN1 (inv SignatureAlgorithm, length out of bounds)
2289*62c56f98SSadaf Ebrahimidepends_on:MBEDTLS_RSA_C:MBEDTLS_MD_CAN_SHA256
2290*62c56f98SSadaf Ebrahimix509parse_crt:"3081ac3081a7a0030201028204deadbeef300d06092a864886f70d01010b0500300c310a30080600130454657374301c170c303930313031303030303030170c303931323331323335393539300c310a30080600130454657374302a300d06092A864886F70D010101050003190030160210ffffffffffffffffffffffffffffffff0202ffffa100a200a321301f301d0603551d11041630148208666f6f2e7465737482086261722e746573743001":"":MBEDTLS_ERR_X509_INVALID_ALG + MBEDTLS_ERR_ASN1_OUT_OF_DATA
2291*62c56f98SSadaf Ebrahimi
2292*62c56f98SSadaf EbrahimiX509 CRT ASN1 (inv SignatureAlgorithm, not the same as SignatureAlgorithm in TBS)
2293*62c56f98SSadaf Ebrahimidepends_on:MBEDTLS_RSA_C:MBEDTLS_MD_CAN_SHA256
2294*62c56f98SSadaf Ebrahimix509parse_crt:"3081bd3081a7a0030201028204deadbeef300d06092a864886f70d01010b0500300c310a30080600130454657374301c170c303930313031303030303030170c303931323331323335393539300c310a30080600130454657374302a300d06092A864886F70D010101050003190030160210ffffffffffffffffffffffffffffffff0202ffffa100a200a321301f301d0603551d11041630148208666f6f2e7465737482086261722e74657374300d06092a864886f70d01010a0500030200ff":"":MBEDTLS_ERR_X509_SIG_MISMATCH
2295*62c56f98SSadaf Ebrahimi
2296*62c56f98SSadaf EbrahimiX509 CRT ASN1 (Signature missing)
2297*62c56f98SSadaf Ebrahimidepends_on:MBEDTLS_RSA_C:MBEDTLS_MD_CAN_SHA256
2298*62c56f98SSadaf Ebrahimix509parse_crt:"3081b93081a7a0030201028204deadbeef300d06092a864886f70d01010b0500300c310a30080600130454657374301c170c303930313031303030303030170c303931323331323335393539300c310a30080600130454657374302a300d06092A864886F70D010101050003190030160210ffffffffffffffffffffffffffffffff0202ffffa100a200a321301f301d0603551d11041630148208666f6f2e7465737482086261722e74657374300d06092a864886f70d01010b0500":"":MBEDTLS_ERR_X509_INVALID_SIGNATURE + MBEDTLS_ERR_ASN1_OUT_OF_DATA
2299*62c56f98SSadaf Ebrahimi
2300*62c56f98SSadaf EbrahimiX509 CRT ASN1 (inv Signature, bad tag)
2301*62c56f98SSadaf Ebrahimidepends_on:MBEDTLS_RSA_C:MBEDTLS_MD_CAN_SHA256
2302*62c56f98SSadaf Ebrahimix509parse_crt:"3081bb3081a7a0030201028204deadbeef300d06092a864886f70d01010b0500300c310a30080600130454657374301c170c303930313031303030303030170c303931323331323335393539300c310a30080600130454657374302a300d06092A864886F70D010101050003190030160210ffffffffffffffffffffffffffffffff0202ffffa100a200a321301f301d0603551d11041630148208666f6f2e7465737482086261722e74657374300d06092a864886f70d01010b05000500":"":MBEDTLS_ERR_X509_INVALID_SIGNATURE + MBEDTLS_ERR_ASN1_UNEXPECTED_TAG
2303*62c56f98SSadaf Ebrahimi
2304*62c56f98SSadaf EbrahimiX509 CRT ASN1 (inv Signature, length missing)
2305*62c56f98SSadaf Ebrahimidepends_on:MBEDTLS_RSA_C:MBEDTLS_MD_CAN_SHA256
2306*62c56f98SSadaf Ebrahimix509parse_crt:"3081ba3081a7a0030201028204deadbeef300d06092a864886f70d01010b0500300c310a30080600130454657374301c170c303930313031303030303030170c303931323331323335393539300c310a30080600130454657374302a300d06092A864886F70D010101050003190030160210ffffffffffffffffffffffffffffffff0202ffffa100a200a321301f301d0603551d11041630148208666f6f2e7465737482086261722e74657374300d06092a864886f70d01010b050003":"":MBEDTLS_ERR_X509_INVALID_SIGNATURE + MBEDTLS_ERR_ASN1_OUT_OF_DATA
2307*62c56f98SSadaf Ebrahimi
2308*62c56f98SSadaf EbrahimiX509 CRT ASN1 (inv Signature, inv length encoding)
2309*62c56f98SSadaf Ebrahimidepends_on:MBEDTLS_RSA_C:MBEDTLS_MD_CAN_SHA256
2310*62c56f98SSadaf Ebrahimix509parse_crt:"3081bb3081a7a0030201028204deadbeef300d06092a864886f70d01010b0500300c310a30080600130454657374301c170c303930313031303030303030170c303931323331323335393539300c310a30080600130454657374302a300d06092A864886F70D010101050003190030160210ffffffffffffffffffffffffffffffff0202ffffa100a200a321301f301d0603551d11041630148208666f6f2e7465737482086261722e74657374300d06092a864886f70d01010b05000385":"":MBEDTLS_ERR_X509_INVALID_SIGNATURE + MBEDTLS_ERR_ASN1_INVALID_LENGTH
2311*62c56f98SSadaf Ebrahimi
2312*62c56f98SSadaf EbrahimiX509 CRT ASN1 (inv Signature, length out of bounds)
2313*62c56f98SSadaf Ebrahimidepends_on:MBEDTLS_RSA_C:MBEDTLS_MD_CAN_SHA256
2314*62c56f98SSadaf Ebrahimix509parse_crt:"3081bb3081a7a0030201028204deadbeef300d06092a864886f70d01010b0500300c310a30080600130454657374301c170c303930313031303030303030170c303931323331323335393539300c310a30080600130454657374302a300d06092A864886F70D010101050003190030160210ffffffffffffffffffffffffffffffff0202ffffa100a200a321301f301d0603551d11041630148208666f6f2e7465737482086261722e74657374300d06092a864886f70d01010b05000301":"":MBEDTLS_ERR_X509_INVALID_SIGNATURE + MBEDTLS_ERR_ASN1_OUT_OF_DATA
2315*62c56f98SSadaf Ebrahimi
2316*62c56f98SSadaf EbrahimiX509 CRT ASN1 (inv Signature, inv data #1)
2317*62c56f98SSadaf Ebrahimidepends_on:MBEDTLS_RSA_C:MBEDTLS_MD_CAN_SHA256
2318*62c56f98SSadaf Ebrahimi# signature = bit string with invalid encoding (missing number of unused bits)
2319*62c56f98SSadaf Ebrahimix509parse_crt:"3081bb3081a7a0030201028204deadbeef300d06092a864886f70d01010b0500300c310a30080600130454657374301c170c303930313031303030303030170c303931323331323335393539300c310a30080600130454657374302a300d06092A864886F70D010101050003190030160210ffffffffffffffffffffffffffffffff0202ffffa100a200a321301f301d0603551d11041630148208666f6f2e7465737482086261722e74657374300d06092a864886f70d01010b05000300":"":MBEDTLS_ERR_X509_INVALID_SIGNATURE + MBEDTLS_ERR_ASN1_INVALID_DATA
2320*62c56f98SSadaf Ebrahimi
2321*62c56f98SSadaf EbrahimiX509 CRT ASN1 (inv Signature, inv data #2)
2322*62c56f98SSadaf Ebrahimidepends_on:MBEDTLS_RSA_C:MBEDTLS_MD_CAN_SHA256
2323*62c56f98SSadaf Ebrahimi# signature = bit string with invalid encoding (number of unused bits too large)
2324*62c56f98SSadaf Ebrahimix509parse_crt:"3081bc3081a7a0030201028204deadbeef300d06092a864886f70d01010b0500300c310a30080600130454657374301c170c303930313031303030303030170c303931323331323335393539300c310a30080600130454657374302a300d06092A864886F70D010101050003190030160210ffffffffffffffffffffffffffffffff0202ffffa100a200a321301f301d0603551d11041630148208666f6f2e7465737482086261722e74657374300d06092a864886f70d01010b0500030108":"":MBEDTLS_ERR_X509_INVALID_SIGNATURE + MBEDTLS_ERR_ASN1_INVALID_DATA
2325*62c56f98SSadaf Ebrahimi
2326*62c56f98SSadaf EbrahimiX509 CRT ASN1 (empty Signature)
2327*62c56f98SSadaf Ebrahimidepends_on:MBEDTLS_RSA_C:MBEDTLS_MD_CAN_SHA256
2328*62c56f98SSadaf Ebrahimi# signature = empty bit string in DER encoding
2329*62c56f98SSadaf Ebrahimix509parse_crt:"3081bc3081a7a0030201028204deadbeef300d06092a864886f70d01010b0500300c310a30080600130454657374301c170c303930313031303030303030170c303931323331323335393539300c310a30080600130454657374302a300d06092A864886F70D010101050003190030160210ffffffffffffffffffffffffffffffff0202ffffa100a200a321301f301d0603551d11041630148208666f6f2e7465737482086261722e74657374300d06092a864886f70d01010b0500030100":"cert. version     \: 3\nserial number     \: DE\:AD\:BE\:EF\nissuer name       \: ??=Test\nsubject name      \: ??=Test\nissued  on        \: 2009-01-01 00\:00\:00\nexpires on        \: 2009-12-31 23\:59\:59\nsigned using      \: RSA with SHA-256\nRSA key size      \: 128 bits\nsubject alt name  \:\n    dNSName \: foo.test\n    dNSName \: bar.test\n":0
2330*62c56f98SSadaf Ebrahimi
2331*62c56f98SSadaf EbrahimiX509 CRT ASN1 (dummy 24-bit Signature)
2332*62c56f98SSadaf Ebrahimidepends_on:MBEDTLS_RSA_C:MBEDTLS_MD_CAN_SHA256
2333*62c56f98SSadaf Ebrahimi# signature = bit string "011001100110111101101111"
2334*62c56f98SSadaf Ebrahimix509parse_crt:"3081bf3081a7a0030201028204deadbeef300d06092a864886f70d01010b0500300c310a30080600130454657374301c170c303930313031303030303030170c303931323331323335393539300c310a30080600130454657374302a300d06092A864886F70D010101050003190030160210ffffffffffffffffffffffffffffffff0202ffffa100a200a321301f301d0603551d11041630148208666f6f2e7465737482086261722e74657374300d06092a864886f70d01010b0500030400666f6f":"cert. version     \: 3\nserial number     \: DE\:AD\:BE\:EF\nissuer name       \: ??=Test\nsubject name      \: ??=Test\nissued  on        \: 2009-01-01 00\:00\:00\nexpires on        \: 2009-12-31 23\:59\:59\nsigned using      \: RSA with SHA-256\nRSA key size      \: 128 bits\nsubject alt name  \:\n    dNSName \: foo.test\n    dNSName \: bar.test\n":0
2335*62c56f98SSadaf Ebrahimi
2336*62c56f98SSadaf Ebrahimi# The ASN.1 module rejects non-octet-aligned bit strings.
2337*62c56f98SSadaf EbrahimiX509 CRT ASN1 (inv Signature: not octet-aligned)
2338*62c56f98SSadaf Ebrahimidepends_on:MBEDTLS_RSA_C:MBEDTLS_MD_CAN_SHA256
2339*62c56f98SSadaf Ebrahimi# signature = bit string "01100110011011110110111"
2340*62c56f98SSadaf Ebrahimix509parse_crt:"3081bf3081a7a0030201028204deadbeef300d06092a864886f70d01010b0500300c310a30080600130454657374301c170c303930313031303030303030170c303931323331323335393539300c310a30080600130454657374302a300d06092A864886F70D010101050003190030160210ffffffffffffffffffffffffffffffff0202ffffa100a200a321301f301d0603551d11041630148208666f6f2e7465737482086261722e74657374300d06092a864886f70d01010b0500030401666f6e":"":MBEDTLS_ERR_X509_INVALID_SIGNATURE + MBEDTLS_ERR_ASN1_INVALID_DATA
2341*62c56f98SSadaf Ebrahimi
2342*62c56f98SSadaf EbrahimiX509 CRT ASN1 (inv Signature, length mismatch)
2343*62c56f98SSadaf Ebrahimidepends_on:MBEDTLS_RSA_C:MBEDTLS_MD_CAN_SHA256
2344*62c56f98SSadaf Ebrahimix509parse_crt:"3081be3081a7a0030201028204deadbeef300d06092a864886f70d01010b0500300c310a30080600130454657374301c170c303930313031303030303030170c303931323331323335393539300c310a30080600130454657374302a300d06092A864886F70D010101050003190030160210ffffffffffffffffffffffffffffffff0202ffffa100a200a321301f301d0603551d11041630148208666f6f2e7465737482086261722e74657374300d06092a864886f70d01010b0500030200ff00":"":MBEDTLS_ERR_X509_INVALID_FORMAT + MBEDTLS_ERR_ASN1_LENGTH_MISMATCH
2345*62c56f98SSadaf Ebrahimi
2346*62c56f98SSadaf EbrahimiX509 CRT ASN1 (well-formed)
2347*62c56f98SSadaf Ebrahimidepends_on:MBEDTLS_RSA_C:MBEDTLS_MD_CAN_SHA256
2348*62c56f98SSadaf Ebrahimix509parse_crt:"308196308180a0030201008204deadbeef300d06092a864886f70d01010b0500300c310a30080600130454657374301c170c303930313031303030303030170c303931323331323335393539300c310a30080600130454657374302a300d06092a864886f70d010101050003190030160210ffffffffffffffffffffffffffffffff0202ffff300d06092a864886f70d01010b0500030200ff":"cert. version     \: 1\nserial number     \: DE\:AD\:BE\:EF\nissuer name       \: ?\?=Test\nsubject name      \: ?\?=Test\nissued  on        \: 2009-01-01 00\:00\:00\nexpires on        \: 2009-12-31 23\:59\:59\nsigned using      \: RSA with SHA-256\nRSA key size      \: 128 bits\n":0
2349*62c56f98SSadaf Ebrahimi
2350*62c56f98SSadaf EbrahimiX509 CRT ASN1 (GeneralizedTime in notBefore, UTCTime in notAfter)
2351*62c56f98SSadaf Ebrahimidepends_on:MBEDTLS_RSA_C:MBEDTLS_MD_CAN_SHA256
2352*62c56f98SSadaf Ebrahimix509parse_crt:"308198308182a0030201008204deadbeef300d06092a864886f70d01010b0500300c310a30080600130454657374301e180e3230313030313031303030303030170c303931323331323335393539300c310a30080600130454657374302a300d06092a864886f70d010101050003190030160210ffffffffffffffffffffffffffffffff0202ffff300d06092a864886f70d01010b0500030200ff":"cert. version     \: 1\nserial number     \: DE\:AD\:BE\:EF\nissuer name       \: ?\?=Test\nsubject name      \: ?\?=Test\nissued  on        \: 2010-01-01 00\:00\:00\nexpires on        \: 2009-12-31 23\:59\:59\nsigned using      \: RSA with SHA-256\nRSA key size      \: 128 bits\n":0
2353*62c56f98SSadaf Ebrahimi
2354*62c56f98SSadaf EbrahimiX509 CRT ASN1 (UTCTime in notBefore, GeneralizedTime in notAfter)
2355*62c56f98SSadaf Ebrahimidepends_on:MBEDTLS_RSA_C:MBEDTLS_MD_CAN_SHA256
2356*62c56f98SSadaf Ebrahimix509parse_crt:"308198308182a0030201008204deadbeef300d06092a864886f70d01010b0500300c310a30080600130454657374301e170c303931323331323335393539180e3230313030313031303030303030300c310a30080600130454657374302a300d06092A864886F70D010101050003190030160210ffffffffffffffffffffffffffffffff0202ffff300d06092a864886f70d01010b0500030200ff":"cert. version     \: 1\nserial number     \: DE\:AD\:BE\:EF\nissuer name       \: ?\?=Test\nsubject name      \: ?\?=Test\nissued  on        \: 2009-12-31 23\:59\:59\nexpires on        \: 2010-01-01 00\:00\:00\nsigned using      \: RSA with SHA-256\nRSA key size      \: 128 bits\n":0
2357*62c56f98SSadaf Ebrahimi
2358*62c56f98SSadaf EbrahimiX509 CRT ASN1 (Name with X520 CN)
2359*62c56f98SSadaf Ebrahimidepends_on:MBEDTLS_RSA_C:MBEDTLS_MD_CAN_SHA256
2360*62c56f98SSadaf Ebrahimix509parse_crt:"308199308183a0030201008204deadbeef300d06092a864886f70d01010b0500300f310d300b0603550403130454657374301c170c303930313031303030303030170c303931323331323335393539300c310a30080600130454657374302a300d06092a864886f70d010101050003190030160210ffffffffffffffffffffffffffffffff0202ffff300d06092a864886f70d01010b0500030200ff":"cert. version     \: 1\nserial number     \: DE\:AD\:BE\:EF\nissuer name       \: CN=Test\nsubject name      \: ?\?=Test\nissued  on        \: 2009-01-01 00\:00\:00\nexpires on        \: 2009-12-31 23\:59\:59\nsigned using      \: RSA with SHA-256\nRSA key size      \: 128 bits\n":0
2361*62c56f98SSadaf Ebrahimi
2362*62c56f98SSadaf EbrahimiX509 CRT ASN1 (Name with X520 C)
2363*62c56f98SSadaf Ebrahimidepends_on:MBEDTLS_RSA_C:MBEDTLS_MD_CAN_SHA256
2364*62c56f98SSadaf Ebrahimix509parse_crt:"308199308183a0030201008204deadbeef300d06092a864886f70d01010b0500300f310d300b0603550406130454657374301c170c303930313031303030303030170c303931323331323335393539300c310a30080600130454657374302a300d06092a864886f70d010101050003190030160210ffffffffffffffffffffffffffffffff0202ffff300d06092a864886f70d01010b0500030200ff":"cert. version     \: 1\nserial number     \: DE\:AD\:BE\:EF\nissuer name       \: C=Test\nsubject name      \: ?\?=Test\nissued  on        \: 2009-01-01 00\:00\:00\nexpires on        \: 2009-12-31 23\:59\:59\nsigned using      \: RSA with SHA-256\nRSA key size      \: 128 bits\n":0
2365*62c56f98SSadaf Ebrahimi
2366*62c56f98SSadaf EbrahimiX509 CRT ASN1 (Name with X520 L)
2367*62c56f98SSadaf Ebrahimidepends_on:MBEDTLS_RSA_C:MBEDTLS_MD_CAN_SHA256
2368*62c56f98SSadaf Ebrahimix509parse_crt:"308199308183a0030201008204deadbeef300d06092a864886f70d01010b0500300f310d300b0603550407130454657374301c170c303930313031303030303030170c303931323331323335393539300c310a30080600130454657374302a300d06092a864886f70d010101050003190030160210ffffffffffffffffffffffffffffffff0202ffff300d06092a864886f70d01010b0500030200ff":"cert. version     \: 1\nserial number     \: DE\:AD\:BE\:EF\nissuer name       \: L=Test\nsubject name      \: ?\?=Test\nissued  on        \: 2009-01-01 00\:00\:00\nexpires on        \: 2009-12-31 23\:59\:59\nsigned using      \: RSA with SHA-256\nRSA key size      \: 128 bits\n":0
2369*62c56f98SSadaf Ebrahimi
2370*62c56f98SSadaf EbrahimiX509 CRT ASN1 (Name with X520 ST)
2371*62c56f98SSadaf Ebrahimidepends_on:MBEDTLS_RSA_C:MBEDTLS_MD_CAN_SHA256
2372*62c56f98SSadaf Ebrahimix509parse_crt:"308199308183a0030201008204deadbeef300d06092a864886f70d01010b0500300f310d300b0603550408130454657374301c170c303930313031303030303030170c303931323331323335393539300c310a30080600130454657374302a300d06092a864886f70d010101050003190030160210ffffffffffffffffffffffffffffffff0202ffff300d06092a864886f70d01010b0500030200ff":"cert. version     \: 1\nserial number     \: DE\:AD\:BE\:EF\nissuer name       \: ST=Test\nsubject name      \: ?\?=Test\nissued  on        \: 2009-01-01 00\:00\:00\nexpires on        \: 2009-12-31 23\:59\:59\nsigned using      \: RSA with SHA-256\nRSA key size      \: 128 bits\n":0
2373*62c56f98SSadaf Ebrahimi
2374*62c56f98SSadaf EbrahimiX509 CRT ASN1 (Name with X520 O)
2375*62c56f98SSadaf Ebrahimidepends_on:MBEDTLS_RSA_C:MBEDTLS_MD_CAN_SHA256
2376*62c56f98SSadaf Ebrahimix509parse_crt:"308199308183a0030201008204deadbeef300d06092a864886f70d01010b0500300f310d300b060355040a130454657374301c170c303930313031303030303030170c303931323331323335393539300c310a30080600130454657374302a300d06092a864886f70d010101050003190030160210ffffffffffffffffffffffffffffffff0202ffff300d06092a864886f70d01010b0500030200ff":"cert. version     \: 1\nserial number     \: DE\:AD\:BE\:EF\nissuer name       \: O=Test\nsubject name      \: ?\?=Test\nissued  on        \: 2009-01-01 00\:00\:00\nexpires on        \: 2009-12-31 23\:59\:59\nsigned using      \: RSA with SHA-256\nRSA key size      \: 128 bits\n":0
2377*62c56f98SSadaf Ebrahimi
2378*62c56f98SSadaf EbrahimiX509 CRT ASN1 (Name with X520 OU)
2379*62c56f98SSadaf Ebrahimidepends_on:MBEDTLS_RSA_C:MBEDTLS_MD_CAN_SHA256
2380*62c56f98SSadaf Ebrahimix509parse_crt:"308199308183a0030201008204deadbeef300d06092a864886f70d01010b0500300f310d300b060355040b130454657374301c170c303930313031303030303030170c303931323331323335393539300c310a30080600130454657374302a300d06092a864886f70d010101050003190030160210ffffffffffffffffffffffffffffffff0202ffff300d06092a864886f70d01010b0500030200ff":"cert. version     \: 1\nserial number     \: DE\:AD\:BE\:EF\nissuer name       \: OU=Test\nsubject name      \: ?\?=Test\nissued  on        \: 2009-01-01 00\:00\:00\nexpires on        \: 2009-12-31 23\:59\:59\nsigned using      \: RSA with SHA-256\nRSA key size      \: 128 bits\n":0
2381*62c56f98SSadaf Ebrahimi
2382*62c56f98SSadaf EbrahimiX509 CRT ASN1 (Name with unknown X520 part)
2383*62c56f98SSadaf Ebrahimidepends_on:MBEDTLS_RSA_C:MBEDTLS_MD_CAN_SHA256
2384*62c56f98SSadaf Ebrahimix509parse_crt:"308199308183a0030201008204deadbeef300d06092a864886f70d01010b0500300f310d300b06035504de130454657374301c170c303930313031303030303030170c303931323331323335393539300c310a30080600130454657374302a300d06092a864886f70d010101050003190030160210ffffffffffffffffffffffffffffffff0202ffff300d06092a864886f70d01010b0500030200ff":"cert. version     \: 1\nserial number     \: DE\:AD\:BE\:EF\nissuer name       \: ?\?=Test\nsubject name      \: ?\?=Test\nissued  on        \: 2009-01-01 00\:00\:00\nexpires on        \: 2009-12-31 23\:59\:59\nsigned using      \: RSA with SHA-256\nRSA key size      \: 128 bits\n":0
2385*62c56f98SSadaf Ebrahimi
2386*62c56f98SSadaf EbrahimiX509 CRT ASN1 (Name with composite RDN)
2387*62c56f98SSadaf Ebrahimidepends_on:MBEDTLS_RSA_C:MBEDTLS_MD_CAN_SHA1
2388*62c56f98SSadaf Ebrahimix509parse_crt:"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":"cert. version     \: 3\nserial number     \: 4C\:20\:E3\:BD\nissuer name       \: C=US, ST=CA, O=Internet Widgits Pty Ltd, CN=Frankencert CA\nsubject name      \: C=US, ST=Washington, 1.3.6.1.4.1.311.60.2.1.3=#13025553, 1.3.6.1.4.1.311.60.2.1.2=#130844656C6177617265, O=Authorize.Net LLC, 2.5.4.15=#131450726976617465204F7267616E697A6174696F6E, serialNumber=4369191 + CN=www.authorize.net, L=San Francisco\nissued  on        \: 2013-08-02 15\:14\:37\nexpires on        \: 2015-08-17 05\:54\:31\nsigned using      \: RSA with SHA1\nRSA key size      \: 1024 bits\n":0
2389*62c56f98SSadaf Ebrahimi
2390*62c56f98SSadaf EbrahimiX509 CRT ASN1 (Name with PKCS9 email)
2391*62c56f98SSadaf Ebrahimidepends_on:MBEDTLS_RSA_C:MBEDTLS_MD_CAN_SHA256
2392*62c56f98SSadaf Ebrahimix509parse_crt:"30819f308189a0030201008204deadbeef300d06092a864886f70d01010b050030153113301106092a864886f70d010901130454657374301c170c303930313031303030303030170c303931323331323335393539300c310a30080600130454657374302a300d06092a864886f70d010101050003190030160210ffffffffffffffffffffffffffffffff0202ffff300d06092a864886f70d01010b0500030200ff":"cert. version     \: 1\nserial number     \: DE\:AD\:BE\:EF\nissuer name       \: emailAddress=Test\nsubject name      \: ?\?=Test\nissued  on        \: 2009-01-01 00\:00\:00\nexpires on        \: 2009-12-31 23\:59\:59\nsigned using      \: RSA with SHA-256\nRSA key size      \: 128 bits\n":0
2393*62c56f98SSadaf Ebrahimi
2394*62c56f98SSadaf EbrahimiX509 CRT ASN1 (Name with unknown PKCS9 part)
2395*62c56f98SSadaf Ebrahimidepends_on:MBEDTLS_RSA_C:MBEDTLS_MD_CAN_SHA256
2396*62c56f98SSadaf Ebrahimix509parse_crt:"30819f308189a0030201008204deadbeef300d06092a864886f70d01010b050030153113301106092a864886f70d0109ab130454657374301c170c303930313031303030303030170c303931323331323335393539300c310a30080600130454657374302a300d06092a864886f70d010101050003190030160210ffffffffffffffffffffffffffffffff0202ffff300d06092a864886f70d01010b0500030200ff":"cert. version     \: 1\nserial number     \: DE\:AD\:BE\:EF\nissuer name       \: ?\?=Test\nsubject name      \: ?\?=Test\nissued  on        \: 2009-01-01 00\:00\:00\nexpires on        \: 2009-12-31 23\:59\:59\nsigned using      \: RSA with SHA-256\nRSA key size      \: 128 bits\n":0
2397*62c56f98SSadaf Ebrahimi
2398*62c56f98SSadaf EbrahimiX509 CRT ASN1 (ECDSA signature, RSA key)
2399*62c56f98SSadaf Ebrahimidepends_on:MBEDTLS_RSA_C:MBEDTLS_MD_CAN_SHA1:MBEDTLS_PK_CAN_ECDSA_SOME
2400*62c56f98SSadaf Ebrahimix509parse_crt:"3081e630819e020103300906072a8648ce3d0401300f310d300b0603550403130454657374301e170d3133303731303039343631385a170d3233303730383039343631385a300f310d300b0603550403130454657374304c300d06092a864886f70d0101010500033b003038023100e8f546061d3b49bc2f6b7524b7ea4d73a8d5293ee8c64d9407b70b5d16baebc32b8205591eab4e1eb57e9241883701250203010001300906072a8648ce3d0401033800303502186e18209afbed14a0d9a796efcad68891e3ccd5f75815c833021900e92b4fd460b1994693243b9ffad54729de865381bda41d25":"cert. version     \: 1\nserial number     \: 03\nissuer name       \: CN=Test\nsubject name      \: CN=Test\nissued  on        \: 2013-07-10 09\:46\:18\nexpires on        \: 2023-07-08 09\:46\:18\nsigned using      \: ECDSA with SHA1\nRSA key size      \: 384 bits\n":0
2401*62c56f98SSadaf Ebrahimi
2402*62c56f98SSadaf EbrahimiX509 CRT ASN1 (ECDSA signature, EC key)
2403*62c56f98SSadaf Ebrahimidepends_on:MBEDTLS_PK_CAN_ECDSA_SOME:MBEDTLS_ECP_HAVE_SECP192R1:MBEDTLS_MD_CAN_SHA1
2404*62c56f98SSadaf Ebrahimix509parse_crt:"3081eb3081a3020900f41534662ec7e912300906072a8648ce3d0401300f310d300b0603550403130454657374301e170d3133303731303039343031395a170d3233303730383039343031395a300f310d300b06035504031304546573743049301306072a8648ce3d020106082a8648ce3d030101033200042137969fabd4e370624a0e1a33e379cab950cce00ef8c3c3e2adaeb7271c8f07659d65d3d777dcf21614363ae4b6e617300906072a8648ce3d04010338003035021858cc0f957946fe6a303d92885a456aa74c743c7b708cbd37021900fe293cac21af352d16b82eb8ea54e9410b3abaadd9f05dd6":"cert. version     \: 1\nserial number     \: F4\:15\:34\:66\:2E\:C7\:E9\:12\nissuer name       \: CN=Test\nsubject name      \: CN=Test\nissued  on        \: 2013-07-10 09\:40\:19\nexpires on        \: 2023-07-08 09\:40\:19\nsigned using      \: ECDSA with SHA1\nEC key size       \: 192 bits\n":0
2405*62c56f98SSadaf Ebrahimi
2406*62c56f98SSadaf EbrahimiX509 CRT ASN1 (RSA signature, EC key)
2407*62c56f98SSadaf Ebrahimidepends_on:MBEDTLS_PK_CAN_ECDSA_SOME:MBEDTLS_ECP_HAVE_SECP192R1:MBEDTLS_MD_CAN_SHA1:MBEDTLS_RSA_C
2408*62c56f98SSadaf Ebrahimix509parse_crt:"3081e430819f020104300d06092a864886f70d0101050500300f310d300b0603550403130454657374301e170d3133303731303135303233375a170d3233303730383135303233375a300f310d300b06035504031304546573743049301306072a8648ce3d020106082a8648ce3d03010103320004e962551a325b21b50cf6b990e33d4318fd16677130726357a196e3efe7107bcb6bdc6d9db2a4df7c964acfe81798433d300d06092a864886f70d01010505000331001a6c18cd1e457474b2d3912743f44b571341a7859a0122774a8e19a671680878936949f904c9255bdd6fffdb33a7e6d8":"cert. version     \: 1\nserial number     \: 04\nissuer name       \: CN=Test\nsubject name      \: CN=Test\nissued  on        \: 2013-07-10 15\:02\:37\nexpires on        \: 2023-07-08 15\:02\:37\nsigned using      \: RSA with SHA1\nEC key size       \: 192 bits\n":0
2409*62c56f98SSadaf Ebrahimi
2410*62c56f98SSadaf EbrahimiX509 CRT ASN1 (Unsupported critical extension)
2411*62c56f98SSadaf Ebrahimidepends_on:MBEDTLS_RSA_C:MBEDTLS_MD_CAN_SHA256
2412*62c56f98SSadaf Ebrahimix509parse_crt:"308203353082021da00302010202104d3ebbb8a870f9c78c55a8a7e12fd516300d06092a864886f70d01010b05003010310e300c06035504030c0564756d6d79301e170d3230303432383137343234335a170d3230303632373137343234335a3010310e300c06035504030c0564756d6d7930820122300d06092a864886f70d01010105000382010f003082010a0282010100a51b75b3f7da2d60ea1b0fc077f0dbb2bbb6fe1b474028368af8dc2664672896efff171033b0aede0b323a89d5c6db4d517404bc97b65264e41b9e9e86a6f40ace652498d4b3b859544d1bacfd7f86325503eed046f517406545c0ffb5560f83446dedce0fcafcc41ac8495488a6aa912ae45192ef7e3efa20d0f7403b0baa62c7e2e5404c620c5793623132aa20f624f08d88fbf0985af39433f5a24d0b908e5219d8ba6a404d3ee8418203b62a40c8eb18837354d50281a6a2bf5012e505c419482787b7a81e5935613ceea0c6d93e86f76282b6aa406fb3a1796c56b32e8a22afc3f7a3c9daa8f0e2846ff0d50abfc862a52f6cf0aaece6066c860376f3ed0203010001a3818a308187300c0603551d13040530030101ff30130603551d110101ff04093007820564756d6d79301206082b0601050507011f0101ff0403040100300e0603551d0f0101ff040403020184301d0603551d0e04160414e6e451ec8d19d9677b2d272a9d73b939fa2d915a301f0603551d23041830168014e6e451ec8d19d9677b2d272a9d73b939fa2d915a300d06092a864886f70d01010b0500038201010056d06047b7f48683e2347ca726997d9700b4f2cf1d8bc0ef17addac8445d38ffd7f8079055ead878b6a74c8384d0e30150c8990aa74f59cda6ebcb49465d8991ffa16a4c927a26e4639d1875a3ac396c7455c7eda40dbe66054a03d27f961c15e86bd5b06db6b26572977bcda93453b6b6a88ef96b31996a7bd17323525b33050d28deec9c33a3f9765a11fb99d0e222bd39a6db3a788474c9ca347377688f837d42f5841667bffcbe6b473e6f229f286a0829963e591a99aa7f67e9d20c36ccd2ac84cb85b7a8b3396a6cbe59a573ffff726f373197c230de5c92a52c5bc87e29c20bdf6e89609764a60c649022aabd768f3557661b083ae00e6afc8a5bf2ed":"":MBEDTLS_ERR_X509_INVALID_EXTENSIONS + MBEDTLS_ERR_ASN1_UNEXPECTED_TAG
2413*62c56f98SSadaf Ebrahimi
2414*62c56f98SSadaf EbrahimiX509 CRT ASN1 (Unsupported critical extension recognized by callback)
2415*62c56f98SSadaf Ebrahimidepends_on:MBEDTLS_RSA_C:MBEDTLS_MD_CAN_SHA256
2416*62c56f98SSadaf Ebrahimix509parse_crt_cb:"308203353082021da00302010202104d3ebbb8a870f9c78c55a8a7e12fd516300d06092a864886f70d01010b05003010310e300c06035504030c0564756d6d79301e170d3230303432383137343234335a170d3230303632373137343234335a3010310e300c06035504030c0564756d6d7930820122300d06092a864886f70d01010105000382010f003082010a0282010100a51b75b3f7da2d60ea1b0fc077f0dbb2bbb6fe1b474028368af8dc2664672896efff171033b0aede0b323a89d5c6db4d517404bc97b65264e41b9e9e86a6f40ace652498d4b3b859544d1bacfd7f86325503eed046f517406545c0ffb5560f83446dedce0fcafcc41ac8495488a6aa912ae45192ef7e3efa20d0f7403b0baa62c7e2e5404c620c5793623132aa20f624f08d88fbf0985af39433f5a24d0b908e5219d8ba6a404d3ee8418203b62a40c8eb18837354d50281a6a2bf5012e505c419482787b7a81e5935613ceea0c6d93e86f76282b6aa406fb3a1796c56b32e8a22afc3f7a3c9daa8f0e2846ff0d50abfc862a52f6cf0aaece6066c860376f3ed0203010001a3818a308187300c0603551d13040530030101ff30130603551d110101ff04093007820564756d6d79301206082b0601050507011f0101ff0403040100300e0603551d0f0101ff040403020184301d0603551d0e04160414e6e451ec8d19d9677b2d272a9d73b939fa2d915a301f0603551d23041830168014e6e451ec8d19d9677b2d272a9d73b939fa2d915a300d06092a864886f70d01010b0500038201010056d06047b7f48683e2347ca726997d9700b4f2cf1d8bc0ef17addac8445d38ffd7f8079055ead878b6a74c8384d0e30150c8990aa74f59cda6ebcb49465d8991ffa16a4c927a26e4639d1875a3ac396c7455c7eda40dbe66054a03d27f961c15e86bd5b06db6b26572977bcda93453b6b6a88ef96b31996a7bd17323525b33050d28deec9c33a3f9765a11fb99d0e222bd39a6db3a788474c9ca347377688f837d42f5841667bffcbe6b473e6f229f286a0829963e591a99aa7f67e9d20c36ccd2ac84cb85b7a8b3396a6cbe59a573ffff726f373197c230de5c92a52c5bc87e29c20bdf6e89609764a60c649022aabd768f3557661b083ae00e6afc8a5bf2ed":"cert. version     \: 3\nserial number     \: 4D\:3E\:BB\:B8\:A8\:70\:F9\:C7\:8C\:55\:A8\:A7\:E1\:2F\:D5\:16\nissuer name       \: CN=dummy\nsubject name      \: CN=dummy\nissued  on        \: 2020-04-28 17\:42\:43\nexpires on        \: 2020-06-27 17\:42\:43\nsigned using      \: RSA with SHA-256\nRSA key size      \: 2048 bits\nbasic constraints \: CA=true\nsubject alt name  \:\n    dNSName \: dummy\nkey usage         \: Digital Signature, Key Cert Sign\n":0
2417*62c56f98SSadaf Ebrahimi
2418*62c56f98SSadaf EbrahimiX509 CRT ASN1 (Unsupported critical extension not recognized by callback)
2419*62c56f98SSadaf Ebrahimidepends_on:MBEDTLS_RSA_C:MBEDTLS_MD_CAN_SHA256
2420*62c56f98SSadaf Ebrahimix509parse_crt_cb:"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":"":MBEDTLS_ERR_X509_INVALID_EXTENSIONS + MBEDTLS_ERR_ASN1_UNEXPECTED_TAG
2421*62c56f98SSadaf Ebrahimi
2422*62c56f98SSadaf EbrahimiX509 CRT ASN1 (Unsupported non critical extension recognized by callback)
2423*62c56f98SSadaf Ebrahimidepends_on:MBEDTLS_RSA_C:MBEDTLS_MD_CAN_SHA256
2424*62c56f98SSadaf Ebrahimix509parse_crt_cb:"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":"cert. version     \: 3\nserial number     \: 4D\:3E\:BB\:B8\:A8\:70\:F9\:C7\:8C\:55\:A8\:A7\:E1\:2F\:D5\:16\nissuer name       \: CN=dummy\nsubject name      \: CN=dummy\nissued  on        \: 2020-04-28 17\:42\:43\nexpires on        \: 2020-06-27 17\:42\:43\nsigned using      \: RSA with SHA-256\nRSA key size      \: 2048 bits\nbasic constraints \: CA=true\nsubject alt name  \:\n    dNSName \: dummy\nkey usage         \: Digital Signature, Key Cert Sign\n":0
2425*62c56f98SSadaf Ebrahimi
2426*62c56f98SSadaf EbrahimiX509 CRT ASN1 (Unsupported non critical extension not recognized by callback)
2427*62c56f98SSadaf Ebrahimidepends_on:MBEDTLS_RSA_C:MBEDTLS_MD_CAN_SHA256
2428*62c56f98SSadaf Ebrahimix509parse_crt_cb:"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":"cert. version     \: 3\nserial number     \: 4D\:3E\:BB\:B8\:A8\:70\:F9\:C7\:8C\:55\:A8\:A7\:E1\:2F\:D5\:16\nissuer name       \: CN=dummy\nsubject name      \: CN=dummy\nissued  on        \: 2020-04-28 17\:42\:43\nexpires on        \: 2020-06-27 17\:42\:43\nsigned using      \: RSA with SHA-256\nRSA key size      \: 2048 bits\nbasic constraints \: CA=true\nsubject alt name  \:\n    dNSName \: dummy\nkey usage         \: Digital Signature, Key Cert Sign\n":0
2429*62c56f98SSadaf Ebrahimi
2430*62c56f98SSadaf EbrahimiX509 CRT ASN1 (Unsupported critical policy recognized by callback)
2431*62c56f98SSadaf Ebrahimidepends_on:MBEDTLS_RSA_C:MBEDTLS_MD_CAN_SHA256
2432*62c56f98SSadaf Ebrahimix509parse_crt_cb:"3081b130819ba0030201028204deadbeef300d06092a864886f70d01010b0500300c310a30080600130454657374301c170c303930313031303030303030170c303931323331323335393539300c310a30080600130454657374302a300d06092a864886f70d010101050003190030160210ffffffffffffffffffffffffffffffff0202ffffa100a200a315301330110603551d20010101040730053003060101300d06092a864886f70d01010b0500030200ff":"cert. version     \: 3\nserial number     \: DE\:AD\:BE\:EF\nissuer name       \: ??=Test\nsubject name      \: ??=Test\nissued  on        \: 2009-01-01 00\:00\:00\nexpires on        \: 2009-12-31 23\:59\:59\nsigned using      \: RSA with SHA-256\nRSA key size      \: 128 bits\ncertificate policies \: ???\n":0
2433*62c56f98SSadaf Ebrahimi
2434*62c56f98SSadaf EbrahimiX509 CRT ASN1 (Unsupported critical policy not recognized by callback)
2435*62c56f98SSadaf Ebrahimidepends_on:MBEDTLS_RSA_C:MBEDTLS_MD_CAN_SHA256
2436*62c56f98SSadaf Ebrahimix509parse_crt_cb:"3081b130819ba0030201028204deadbeef300d06092a864886f70d01010b0500300c310a30080600130454657374301c170c303930313031303030303030170c303931323331323335393539300c310a30080600130454657374302a300d06092a864886f70d010101050003190030160210ffffffffffffffffffffffffffffffff0202ffffa100a200a315301330110603551d20010101040730053003060100300d06092a864886f70d01010b0500030200ff":"":MBEDTLS_ERR_X509_FEATURE_UNAVAILABLE
2437*62c56f98SSadaf Ebrahimi
2438*62c56f98SSadaf EbrahimiX509 CRT ASN1 (Unsupported non critical policy recognized by callback)
2439*62c56f98SSadaf Ebrahimidepends_on:MBEDTLS_RSA_C:MBEDTLS_MD_CAN_SHA256
2440*62c56f98SSadaf Ebrahimix509parse_crt_cb:"3081b130819ba0030201028204deadbeef300d06092a864886f70d01010b0500300c310a30080600130454657374301c170c303930313031303030303030170c303931323331323335393539300c310a30080600130454657374302a300d06092a864886f70d010101050003190030160210ffffffffffffffffffffffffffffffff0202ffffa100a200a315301330110603551d20010100040730053003060101300d06092a864886f70d01010b0500030200ff":"cert. version     \: 3\nserial number     \: DE\:AD\:BE\:EF\nissuer name       \: ??=Test\nsubject name      \: ??=Test\nissued  on        \: 2009-01-01 00\:00\:00\nexpires on        \: 2009-12-31 23\:59\:59\nsigned using      \: RSA with SHA-256\nRSA key size      \: 128 bits\ncertificate policies \: ???\n":0
2441*62c56f98SSadaf Ebrahimi
2442*62c56f98SSadaf EbrahimiX509 CRT ASN1 (Unsupported non critical policy not recognized by callback)
2443*62c56f98SSadaf Ebrahimidepends_on:MBEDTLS_RSA_C:MBEDTLS_MD_CAN_SHA256
2444*62c56f98SSadaf Ebrahimix509parse_crt_cb:"3081b130819ba0030201028204deadbeef300d06092a864886f70d01010b0500300c310a30080600130454657374301c170c303930313031303030303030170c303931323331323335393539300c310a30080600130454657374302a300d06092a864886f70d010101050003190030160210ffffffffffffffffffffffffffffffff0202ffffa100a200a315301330110603551d20010100040730053003060100300d06092a864886f70d01010b0500030200ff":"cert. version     \: 3\nserial number     \: DE\:AD\:BE\:EF\nissuer name       \: ??=Test\nsubject name      \: ??=Test\nissued  on        \: 2009-01-01 00\:00\:00\nexpires on        \: 2009-12-31 23\:59\:59\nsigned using      \: RSA with SHA-256\nRSA key size      \: 128 bits\ncertificate policies \: ???\n":0
2445*62c56f98SSadaf Ebrahimi
2446*62c56f98SSadaf EbrahimiX509 CRL ASN1 (Incorrect first tag)
2447*62c56f98SSadaf Ebrahimix509parse_crl:"":"":MBEDTLS_ERR_X509_INVALID_FORMAT
2448*62c56f98SSadaf Ebrahimi
2449*62c56f98SSadaf EbrahimiX509 CRL ASN1 (Correct first tag, data length does not match)
2450*62c56f98SSadaf Ebrahimix509parse_crl:"300000":"":MBEDTLS_ERR_X509_INVALID_FORMAT + MBEDTLS_ERR_ASN1_LENGTH_MISMATCH
2451*62c56f98SSadaf Ebrahimi
2452*62c56f98SSadaf EbrahimiX509 CRL ASN1 (TBSCertList, tag missing)
2453*62c56f98SSadaf Ebrahimix509parse_crl:"3000":"":MBEDTLS_ERR_X509_INVALID_FORMAT + MBEDTLS_ERR_ASN1_OUT_OF_DATA
2454*62c56f98SSadaf Ebrahimi
2455*62c56f98SSadaf EbrahimiX509 CRL ASN1 (TBSCertList, version tag len missing)
2456*62c56f98SSadaf Ebrahimix509parse_crl:"3003300102":"":MBEDTLS_ERR_X509_INVALID_VERSION + MBEDTLS_ERR_ASN1_OUT_OF_DATA
2457*62c56f98SSadaf Ebrahimi
2458*62c56f98SSadaf EbrahimiX509 CRL ASN1 (TBSCertList, version correct, alg missing)
2459*62c56f98SSadaf Ebrahimix509parse_crl:"30053003020100":"":MBEDTLS_ERR_X509_INVALID_ALG + MBEDTLS_ERR_ASN1_OUT_OF_DATA
2460*62c56f98SSadaf Ebrahimi
2461*62c56f98SSadaf EbrahimiX509 CRL ASN1 (TBSCertList, alg correct, incorrect version)
2462*62c56f98SSadaf Ebrahimix509parse_crl:"300b3009020102300406000500":"":MBEDTLS_ERR_X509_UNKNOWN_VERSION
2463*62c56f98SSadaf Ebrahimi
2464*62c56f98SSadaf EbrahimiX509 CRL ASN1 (TBSCertList, correct version, sig_oid1 unknown)
2465*62c56f98SSadaf Ebrahimix509parse_crl:"300b3009020100300406000500":"":MBEDTLS_ERR_X509_UNKNOWN_SIG_ALG
2466*62c56f98SSadaf Ebrahimi
2467*62c56f98SSadaf EbrahimiX509 CRL ASN1 (TBSCertList, sig_oid1 id unknown)
2468*62c56f98SSadaf Ebrahimix509parse_crl:"30143012020100300d06092a864886f70d01010f0500":"":MBEDTLS_ERR_X509_UNKNOWN_SIG_ALG
2469*62c56f98SSadaf Ebrahimi
2470*62c56f98SSadaf EbrahimiX509 CRL ASN1 (TBSCertList, sig_oid1 correct, issuer missing)
2471*62c56f98SSadaf Ebrahimidepends_on:MBEDTLS_RSA_C:MBEDTLS_MD_CAN_SHA224
2472*62c56f98SSadaf Ebrahimix509parse_crl:"30143012020100300d06092a864886f70d01010e0500":"":MBEDTLS_ERR_X509_INVALID_FORMAT + MBEDTLS_ERR_ASN1_OUT_OF_DATA
2473*62c56f98SSadaf Ebrahimi
2474*62c56f98SSadaf EbrahimiX509 CRL ASN1 (TBSCertList, issuer set missing)
2475*62c56f98SSadaf Ebrahimidepends_on:MBEDTLS_RSA_C:MBEDTLS_MD_CAN_SHA224
2476*62c56f98SSadaf Ebrahimix509parse_crl:"30163014020100300d06092a864886f70d01010e05003000":"":MBEDTLS_ERR_X509_INVALID_NAME + MBEDTLS_ERR_ASN1_OUT_OF_DATA
2477*62c56f98SSadaf Ebrahimi
2478*62c56f98SSadaf EbrahimiX509 CRL ASN1 (TBSCertList, correct issuer, thisUpdate missing)
2479*62c56f98SSadaf Ebrahimidepends_on:MBEDTLS_RSA_C:MBEDTLS_MD_CAN_SHA224
2480*62c56f98SSadaf Ebrahimix509parse_crl:"30253023020100300d06092a864886f70d01010e0500300f310d300b0603550403130441424344":"":MBEDTLS_ERR_X509_INVALID_DATE + MBEDTLS_ERR_ASN1_OUT_OF_DATA
2481*62c56f98SSadaf Ebrahimi
2482*62c56f98SSadaf EbrahimiX509 CRL ASN1 (TBSCertList, correct thisUpdate, nextUpdate missing, entries length missing)
2483*62c56f98SSadaf Ebrahimidepends_on:MBEDTLS_RSA_C:MBEDTLS_MD_CAN_SHA224
2484*62c56f98SSadaf Ebrahimix509parse_crl:"30343032020100300d06092a864886f70d01010e0500300f310d300b0603550403130441424344170c30393031303130303030303030":"":MBEDTLS_ERR_ASN1_OUT_OF_DATA
2485*62c56f98SSadaf Ebrahimi
2486*62c56f98SSadaf EbrahimiX509 CRL ASN1 (TBSCertList, entries present, invalid sig_alg)
2487*62c56f98SSadaf Ebrahimidepends_on:MBEDTLS_RSA_C:MBEDTLS_MD_CAN_SHA224
2488*62c56f98SSadaf Ebrahimix509parse_crl:"304a3047020100300d06092a864886f70d01010e0500300f310d300b0603550403130441424344170c303930313031303030303030301430128202abcd170c30383132333132333539353900":"":MBEDTLS_ERR_X509_INVALID_ALG + MBEDTLS_ERR_ASN1_UNEXPECTED_TAG
2489*62c56f98SSadaf Ebrahimi
2490*62c56f98SSadaf EbrahimiX509 CRL ASN1 (TBSCertList, entries present, date in entry invalid)
2491*62c56f98SSadaf Ebrahimidepends_on:MBEDTLS_RSA_C:MBEDTLS_MD_CAN_SHA224
2492*62c56f98SSadaf Ebrahimix509parse_crl:"304a3047020100300d06092a864886f70d01010e0500300f310d300b0603550403130441424344170c303930313031303030303030301430128202abcd190c30383132333132333539353900":"":MBEDTLS_ERR_X509_INVALID_DATE + MBEDTLS_ERR_ASN1_UNEXPECTED_TAG
2493*62c56f98SSadaf Ebrahimi
2494*62c56f98SSadaf EbrahimiX509 CRL ASN1 (TBSCertList, sig_alg present, sig_alg does not match)
2495*62c56f98SSadaf Ebrahimidepends_on:MBEDTLS_RSA_C:MBEDTLS_MD_CAN_SHA224
2496*62c56f98SSadaf Ebrahimix509parse_crl:"30583047020100300d06092a864886f70d01010e0500300f310d300b0603550403130441424344170c303930313031303030303030301430128202abcd170c303831323331323335393539300d06092a864886f70d01010d0500":"":MBEDTLS_ERR_X509_SIG_MISMATCH
2497*62c56f98SSadaf Ebrahimi
2498*62c56f98SSadaf EbrahimiX509 CRL ASN1 (TBSCertList, sig present, len mismatch)
2499*62c56f98SSadaf Ebrahimidepends_on:MBEDTLS_RSA_C:MBEDTLS_MD_CAN_SHA224
2500*62c56f98SSadaf Ebrahimix509parse_crl:"305d3047020100300d06092a864886f70d01010e0500300f310d300b0603550403130441424344170c303930313031303030303030301430128202abcd170c303831323331323335393539300d06092a864886f70d01010e05000302000100":"":MBEDTLS_ERR_X509_INVALID_FORMAT + MBEDTLS_ERR_ASN1_LENGTH_MISMATCH
2501*62c56f98SSadaf Ebrahimi
2502*62c56f98SSadaf Ebrahimi# 305c
2503*62c56f98SSadaf Ebrahimi#  3047                                   tbsCertList TBSCertList
2504*62c56f98SSadaf Ebrahimi#   020100                                version INTEGER OPTIONAL
2505*62c56f98SSadaf Ebrahimi#   300d                                  signatureAlgorithm AlgorithmIdentifi
2506*62c56f98SSadaf Ebrahimi#    06092a864886f70d01010e
2507*62c56f98SSadaf Ebrahimi#    0500
2508*62c56f98SSadaf Ebrahimi#   300f                                  issuer Name
2509*62c56f98SSadaf Ebrahimi#    310d300b0603550403130441424344
2510*62c56f98SSadaf Ebrahimi#   170c303930313031303030303030          thisUpdate Time
2511*62c56f98SSadaf Ebrahimi#   3014                                  revokedCertificates
2512*62c56f98SSadaf Ebrahimi#    3012                                 entry 1
2513*62c56f98SSadaf Ebrahimi#     8202abcd                            userCertificate CertificateSerialNum
2514*62c56f98SSadaf Ebrahimi#     170c303831323331323335393539        revocationDate Time
2515*62c56f98SSadaf Ebrahimi#  300d                                   signatureAlgorithm AlgorithmIdentifi
2516*62c56f98SSadaf Ebrahimi#   06092a864886f70d01010e
2517*62c56f98SSadaf Ebrahimi#   0500
2518*62c56f98SSadaf Ebrahimi#  03020001                               signatureValue BIT STRING
2519*62c56f98SSadaf Ebrahimi# The subsequent TBSCertList negative tests remove or modify some elements.
2520*62c56f98SSadaf EbrahimiX509 CRL ASN1 (TBSCertList, sig present)
2521*62c56f98SSadaf Ebrahimidepends_on:MBEDTLS_RSA_C:MBEDTLS_MD_CAN_SHA224:!MBEDTLS_X509_REMOVE_INFO
2522*62c56f98SSadaf Ebrahimix509parse_crl:"305c3047020100300d06092a864886f70d01010e0500300f310d300b0603550403130441424344170c303930313031303030303030301430128202abcd170c303831323331323335393539300d06092a864886f70d01010e050003020001":"CRL version   \: 1\nissuer name   \: CN=ABCD\nthis update   \: 2009-01-01 00\:00\:00\nnext update   \: 0000-00-00 00\:00\:00\nRevoked certificates\:\nserial number\: AB\:CD revocation date\: 2008-12-31 23\:59\:59\nsigned using  \: RSA with SHA-224\n":0
2523*62c56f98SSadaf Ebrahimi
2524*62c56f98SSadaf EbrahimiX509 CRL ASN1 (TBSCertList, signatureValue missing)
2525*62c56f98SSadaf Ebrahimidepends_on:MBEDTLS_RSA_C:MBEDTLS_MD_CAN_SHA224
2526*62c56f98SSadaf Ebrahimix509parse_crl:"30583047020100300d06092a864886f70d01010e0500300f310d300b0603550403130441424344170c303930313031303030303030301430128202abcd170c303831323331323335393539300d06092a864886f70d01010e0500":"":MBEDTLS_ERR_X509_INVALID_SIGNATURE + MBEDTLS_ERR_ASN1_OUT_OF_DATA
2527*62c56f98SSadaf Ebrahimi
2528*62c56f98SSadaf EbrahimiX509 CRL ASN1 (TBSCertList, signatureAlgorithm missing)
2529*62c56f98SSadaf Ebrahimidepends_on:MBEDTLS_RSA_C:MBEDTLS_MD_CAN_SHA224
2530*62c56f98SSadaf Ebrahimix509parse_crl:"30493047020100300d06092a864886f70d01010e0500300f310d300b0603550403130441424344170c303930313031303030303030301430128202abcd170c303831323331323335393539":"":MBEDTLS_ERR_X509_INVALID_ALG + MBEDTLS_ERR_ASN1_OUT_OF_DATA
2531*62c56f98SSadaf Ebrahimi
2532*62c56f98SSadaf EbrahimiX509 CRL ASN1 (TBSCertList, single empty entry at end)
2533*62c56f98SSadaf Ebrahimidepends_on:MBEDTLS_RSA_C:MBEDTLS_MD_CAN_SHA224
2534*62c56f98SSadaf Ebrahimix509parse_crl:"30373035020100300d06092a864886f70d01010e0500300f310d300b0603550403130441424344170c30393031303130303030303030023000":"":MBEDTLS_ERR_X509_INVALID_SERIAL + MBEDTLS_ERR_ASN1_OUT_OF_DATA
2535*62c56f98SSadaf Ebrahimi
2536*62c56f98SSadaf EbrahimiX509 CRL ASN1 (TBSCertList, good entry then empty entry at end)
2537*62c56f98SSadaf Ebrahimidepends_on:MBEDTLS_RSA_C:MBEDTLS_MD_CAN_SHA224
2538*62c56f98SSadaf Ebrahimix509parse_crl:"304b3049020100300d06092a864886f70d01010e0500300f310d300b0603550403130441424344170c303930313031303030303030301630128202abcd170c3038313233313233353935393000":"":MBEDTLS_ERR_X509_INVALID_SERIAL + MBEDTLS_ERR_ASN1_OUT_OF_DATA
2539*62c56f98SSadaf Ebrahimi
2540*62c56f98SSadaf EbrahimiX509 CRL ASN1 (TBSCertList, missing time in entry)
2541*62c56f98SSadaf Ebrahimidepends_on:MBEDTLS_RSA_C:MBEDTLS_MD_CAN_SHA224
2542*62c56f98SSadaf Ebrahimix509parse_crl:"304e3039020100300d06092a864886f70d01010e0500300f310d300b0603550403130441424344170c303930313031303030303030300630048202abcd300d06092a864886f70d01010e050003020001":"":MBEDTLS_ERR_X509_INVALID_DATE + MBEDTLS_ERR_ASN1_OUT_OF_DATA
2543*62c56f98SSadaf Ebrahimi
2544*62c56f98SSadaf EbrahimiX509 CRL ASN1 (TBSCertList, missing time in entry at end)
2545*62c56f98SSadaf Ebrahimidepends_on:MBEDTLS_RSA_C:MBEDTLS_MD_CAN_SHA224
2546*62c56f98SSadaf Ebrahimix509parse_crl:"303b3039020100300d06092a864886f70d01010e0500300f310d300b0603550403130441424344170c303930313031303030303030300630048202abcd":"":MBEDTLS_ERR_X509_INVALID_DATE + MBEDTLS_ERR_ASN1_OUT_OF_DATA
2547*62c56f98SSadaf Ebrahimi
2548*62c56f98SSadaf EbrahimiX509 CRL ASN1 (TBSCertList, invalid tag for time in entry)
2549*62c56f98SSadaf Ebrahimidepends_on:MBEDTLS_RSA_C:MBEDTLS_MD_CAN_SHA224
2550*62c56f98SSadaf Ebrahimix509parse_crl:"305c3047020100300d06092a864886f70d01010e0500300f310d300b0603550403130441424344170c303930313031303030303030301430128202abcd190c303831323331323335393539300d06092a864886f70d01010e050003020001":"":MBEDTLS_ERR_X509_INVALID_DATE + MBEDTLS_ERR_ASN1_UNEXPECTED_TAG
2551*62c56f98SSadaf Ebrahimi
2552*62c56f98SSadaf EbrahimiX509 CRL ASN1 (TBSCertList, invalid tag for serial)
2553*62c56f98SSadaf Ebrahimidepends_on:MBEDTLS_RSA_C:MBEDTLS_MD_CAN_SHA224
2554*62c56f98SSadaf Ebrahimix509parse_crl:"305c3047020100300d06092a864886f70d01010e0500300f310d300b0603550403130441424344170c303930313031303030303030301430128402abcd170c303831323331323335393539300d06092a864886f70d01010e050003020001":"":MBEDTLS_ERR_X509_INVALID_SERIAL + MBEDTLS_ERR_ASN1_UNEXPECTED_TAG
2555*62c56f98SSadaf Ebrahimi
2556*62c56f98SSadaf EbrahimiX509 CRL ASN1 (TBSCertList, no entries)
2557*62c56f98SSadaf Ebrahimidepends_on:MBEDTLS_RSA_C:MBEDTLS_MD_CAN_SHA224:!MBEDTLS_X509_REMOVE_INFO
2558*62c56f98SSadaf Ebrahimix509parse_crl:"30463031020100300d06092a864886f70d01010e0500300f310d300b0603550403130441424344170c303930313031303030303030300d06092a864886f70d01010e050003020001":"CRL version   \: 1\nissuer name   \: CN=ABCD\nthis update   \: 2009-01-01 00\:00\:00\nnext update   \: 0000-00-00 00\:00\:00\nRevoked certificates\:\nsigned using  \: RSA with SHA-224\n":0
2559*62c56f98SSadaf Ebrahimi
2560*62c56f98SSadaf EbrahimiX509 CRL ASN1 (invalid version 2)
2561*62c56f98SSadaf Ebrahimix509parse_crl:"30463031020102300d06092a864886f70d01010e0500300f310d300b0603550403130441424344170c303930313031303030303030300d06092a864886f70d01010e050003020001":"":MBEDTLS_ERR_X509_UNKNOWN_VERSION
2562*62c56f98SSadaf Ebrahimi
2563*62c56f98SSadaf EbrahimiX509 CRL ASN1 (invalid version overflow)
2564*62c56f98SSadaf Ebrahimix509parse_crl:"3049303102047fffffff300d06092a864886f70d01010e0500300f310d300b0603550403130441424344170c303930313031303030303030300d06092a864886f70d01010e050003020001":"":MBEDTLS_ERR_X509_UNKNOWN_VERSION
2565*62c56f98SSadaf Ebrahimi
2566*62c56f98SSadaf EbrahimiX509 CRL ASN1 (extension seq too long, crl-idp.pem byte 121)
2567*62c56f98SSadaf Ebrahimidepends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_RSA_C:MBEDTLS_MD_CAN_SHA256
2568*62c56f98SSadaf Ebrahimix509parse_crl:"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":"":MBEDTLS_ERR_X509_INVALID_EXTENSIONS + MBEDTLS_ERR_ASN1_OUT_OF_DATA
2569*62c56f98SSadaf Ebrahimi
2570*62c56f98SSadaf EbrahimiX509 CRL ASN1 (extension oid too long, crl-idp.pem byte 123)
2571*62c56f98SSadaf Ebrahimidepends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_RSA_C:MBEDTLS_MD_CAN_SHA256
2572*62c56f98SSadaf Ebrahimix509parse_crl:"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":"":MBEDTLS_ERR_X509_INVALID_EXTENSIONS + MBEDTLS_ERR_ASN1_OUT_OF_DATA
2573*62c56f98SSadaf Ebrahimi
2574*62c56f98SSadaf EbrahimiX509 CRL ASN1 (extension critical invalid length, crl-idp.pem byte 128)
2575*62c56f98SSadaf Ebrahimidepends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_RSA_C:MBEDTLS_MD_CAN_SHA256
2576*62c56f98SSadaf Ebrahimix509parse_crl:"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":"":MBEDTLS_ERR_X509_INVALID_EXTENSIONS + MBEDTLS_ERR_ASN1_INVALID_LENGTH
2577*62c56f98SSadaf Ebrahimi
2578*62c56f98SSadaf EbrahimiX509 CRL ASN1 (extension data too long, crl-idp.pem byte 131)
2579*62c56f98SSadaf Ebrahimidepends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_RSA_C:MBEDTLS_MD_CAN_SHA256
2580*62c56f98SSadaf Ebrahimix509parse_crl:"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":"":MBEDTLS_ERR_X509_INVALID_EXTENSIONS + MBEDTLS_ERR_ASN1_OUT_OF_DATA
2581*62c56f98SSadaf Ebrahimi
2582*62c56f98SSadaf EbrahimiX509 CRL ASN1 (extension data too short, crl-idp.pem byte 131)
2583*62c56f98SSadaf Ebrahimidepends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_RSA_C:MBEDTLS_MD_CAN_SHA256
2584*62c56f98SSadaf Ebrahimix509parse_crl:"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":"":MBEDTLS_ERR_X509_INVALID_EXTENSIONS + MBEDTLS_ERR_ASN1_LENGTH_MISMATCH
2585*62c56f98SSadaf Ebrahimi
2586*62c56f98SSadaf EbrahimiX509 CRL ASN1 (extension not critical explicit, crl-idp.pem byte 129)
2587*62c56f98SSadaf Ebrahimidepends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_RSA_C:MBEDTLS_MD_CAN_SHA256:!MBEDTLS_X509_REMOVE_INFO
2588*62c56f98SSadaf Ebrahimix509parse_crl:"308201b330819c020101300d06092a864886f70d01010b0500303b310b3009060355040613024e4c3111300f060355040a1308506f6c617253534c3119301706035504031310506f6c617253534c2054657374204341170d3138303331343037333134385a170d3238303331343037333134385aa02d302b30290603551d1c010100041f301da01ba0198617687474703a2f2f706b692e6578616d706c652e636f6d2f300d06092a864886f70d01010b05000382010100b3fbe9d586eaf4b8ff60cf8edae06a85135db78f78198498719725b5b403c0b803c2c150f52faae7306d6a7871885dc2e9dc83a164bac7263776474ef642b660040b35a1410ac291ac8f6f18ab85e7fd6e22bd1af1c41ca95cf2448f6e2b42a018493dfc03c6b6aa1b9e3fe7b76af2182fb2121db4166bf0167d6f379c5a58adee5082423434d97be2909f5e7488053f996646db10dd49782626da53ad8eada01813c031b2bacdb0203bc017aac1735951a11d013ee4d1d5f7143ccbebf2371e66a1bec6e1febe69148f50784eef8adbb66664c96196d7e0c0bcdc807f447b54e058f37642a3337995bfbcd332208bd6016936705c82263eabd7affdba92fae3":"CRL version   \: 2\nissuer name   \: C=NL, O=PolarSSL, CN=PolarSSL Test CA\nthis update   \: 2018-03-14 07\:31\:48\nnext update   \: 2028-03-14 07\:31\:48\nRevoked certificates\:\nsigned using  \: RSA with SHA-256\n":0
2589*62c56f98SSadaf Ebrahimi
2590*62c56f98SSadaf EbrahimiX509 CRT parse file dir3/Readme
2591*62c56f98SSadaf Ebrahimimbedtls_x509_crt_parse_file:"data_files/dir3/Readme":MBEDTLS_ERR_X509_INVALID_FORMAT:0
2592*62c56f98SSadaf Ebrahimi
2593*62c56f98SSadaf EbrahimiX509 CRT parse file dir3/test-ca.crt
2594*62c56f98SSadaf Ebrahimidepends_on:MBEDTLS_MD_CAN_SHA1:MBEDTLS_RSA_C
2595*62c56f98SSadaf Ebrahimimbedtls_x509_crt_parse_file:"data_files/dir3/test-ca.crt":0:1
2596*62c56f98SSadaf Ebrahimi
2597*62c56f98SSadaf EbrahimiX509 CRT parse file dir3/test-ca2.crt
2598*62c56f98SSadaf Ebrahimidepends_on:MBEDTLS_MD_CAN_SHA256:MBEDTLS_PK_CAN_ECDSA_SOME:MBEDTLS_ECP_HAVE_SECP384R1
2599*62c56f98SSadaf Ebrahimimbedtls_x509_crt_parse_file:"data_files/dir3/test-ca2.crt":0:1
2600*62c56f98SSadaf Ebrahimi
2601*62c56f98SSadaf Ebrahimi# The parse_path tests are known to fail when compiled for a 32-bit architecture
2602*62c56f98SSadaf Ebrahimi# and run via qemu-user on Linux on a 64-bit host. This is due to a known
2603*62c56f98SSadaf Ebrahimi# bug in Qemu: https://gitlab.com/qemu-project/qemu/-/issues/263
2604*62c56f98SSadaf EbrahimiX509 CRT parse path #1 (one cert)
2605*62c56f98SSadaf Ebrahimidepends_on:MBEDTLS_MD_CAN_SHA1:MBEDTLS_RSA_C
2606*62c56f98SSadaf Ebrahimimbedtls_x509_crt_parse_path:"data_files/dir1":0:1
2607*62c56f98SSadaf Ebrahimi
2608*62c56f98SSadaf EbrahimiX509 CRT parse path #2 (two certs)
2609*62c56f98SSadaf Ebrahimidepends_on:MBEDTLS_MD_CAN_SHA1:MBEDTLS_RSA_C:MBEDTLS_MD_CAN_SHA256:MBEDTLS_PK_CAN_ECDSA_SOME:MBEDTLS_ECP_HAVE_SECP384R1
2610*62c56f98SSadaf Ebrahimimbedtls_x509_crt_parse_path:"data_files/dir2":0:2
2611*62c56f98SSadaf Ebrahimi
2612*62c56f98SSadaf EbrahimiX509 CRT parse path #3 (two certs, one non-cert)
2613*62c56f98SSadaf Ebrahimidepends_on:MBEDTLS_MD_CAN_SHA1:MBEDTLS_RSA_C:MBEDTLS_MD_CAN_SHA256:MBEDTLS_PK_CAN_ECDSA_SOME:MBEDTLS_ECP_HAVE_SECP384R1
2614*62c56f98SSadaf Ebrahimimbedtls_x509_crt_parse_path:"data_files/dir3":1:2
2615*62c56f98SSadaf Ebrahimi
2616*62c56f98SSadaf EbrahimiX509 CRT verify long chain (max intermediate CA, trusted)
2617*62c56f98SSadaf Ebrahimidepends_on:MBEDTLS_MD_CAN_SHA256:MBEDTLS_PK_CAN_ECDSA_SOME:MBEDTLS_ECP_HAVE_SECP256R1
2618*62c56f98SSadaf Ebrahimimbedtls_x509_crt_verify_max:"data_files/dir-maxpath/00.crt":"data_files/dir-maxpath":MBEDTLS_X509_MAX_INTERMEDIATE_CA:0:0
2619*62c56f98SSadaf Ebrahimi
2620*62c56f98SSadaf EbrahimiX509 CRT verify long chain (max intermediate CA, untrusted)
2621*62c56f98SSadaf Ebrahimidepends_on:MBEDTLS_MD_CAN_SHA256:MBEDTLS_PK_CAN_ECDSA_SOME:MBEDTLS_ECP_HAVE_SECP256R1:MBEDTLS_ECP_HAVE_SECP384R1
2622*62c56f98SSadaf Ebrahimimbedtls_x509_crt_verify_max:"data_files/test-ca2.crt":"data_files/dir-maxpath":MBEDTLS_X509_MAX_INTERMEDIATE_CA-1:MBEDTLS_ERR_X509_CERT_VERIFY_FAILED:MBEDTLS_X509_BADCERT_NOT_TRUSTED
2623*62c56f98SSadaf Ebrahimi
2624*62c56f98SSadaf EbrahimiX509 CRT verify long chain (max intermediate CA + 1)
2625*62c56f98SSadaf Ebrahimidepends_on:MBEDTLS_MD_CAN_SHA256:MBEDTLS_PK_CAN_ECDSA_SOME:MBEDTLS_ECP_HAVE_SECP256R1
2626*62c56f98SSadaf Ebrahimimbedtls_x509_crt_verify_max:"data_files/dir-maxpath/00.crt":"data_files/dir-maxpath":MBEDTLS_X509_MAX_INTERMEDIATE_CA+1:MBEDTLS_ERR_X509_FATAL_ERROR:-1
2627*62c56f98SSadaf Ebrahimi
2628*62c56f98SSadaf EbrahimiX509 CRT verify chain #1 (zero pathlen intermediate)
2629*62c56f98SSadaf Ebrahimidepends_on:MBEDTLS_MD_CAN_SHA256:MBEDTLS_RSA_C
2630*62c56f98SSadaf Ebrahimimbedtls_x509_crt_verify_chain:"data_files/dir4/cert14.crt data_files/dir4/cert13.crt data_files/dir4/cert12.crt":"data_files/dir4/cert11.crt":MBEDTLS_X509_BADCERT_NOT_TRUSTED:MBEDTLS_ERR_X509_CERT_VERIFY_FAILED:"":0
2631*62c56f98SSadaf Ebrahimi
2632*62c56f98SSadaf EbrahimiX509 CRT verify chain #2 (zero pathlen root)
2633*62c56f98SSadaf Ebrahimidepends_on:MBEDTLS_MD_CAN_SHA256:MBEDTLS_RSA_C
2634*62c56f98SSadaf Ebrahimimbedtls_x509_crt_verify_chain:"data_files/dir4/cert23.crt data_files/dir4/cert22.crt":"data_files/dir4/cert21.crt":MBEDTLS_X509_BADCERT_NOT_TRUSTED:MBEDTLS_ERR_X509_CERT_VERIFY_FAILED:"":0
2635*62c56f98SSadaf Ebrahimi
2636*62c56f98SSadaf EbrahimiX509 CRT verify chain #3 (nonzero pathlen root)
2637*62c56f98SSadaf Ebrahimidepends_on:MBEDTLS_MD_CAN_SHA256:MBEDTLS_RSA_C
2638*62c56f98SSadaf Ebrahimimbedtls_x509_crt_verify_chain:"data_files/dir4/cert34.crt data_files/dir4/cert33.crt data_files/dir4/cert32.crt":"data_files/dir4/cert31.crt":MBEDTLS_X509_BADCERT_NOT_TRUSTED:MBEDTLS_ERR_X509_CERT_VERIFY_FAILED:"":0
2639*62c56f98SSadaf Ebrahimi
2640*62c56f98SSadaf EbrahimiX509 CRT verify chain #4 (nonzero pathlen intermediate)
2641*62c56f98SSadaf Ebrahimidepends_on:MBEDTLS_MD_CAN_SHA256:MBEDTLS_RSA_C
2642*62c56f98SSadaf Ebrahimimbedtls_x509_crt_verify_chain:"data_files/dir4/cert45.crt data_files/dir4/cert44.crt data_files/dir4/cert43.crt data_files/dir4/cert42.crt":"data_files/dir4/cert41.crt":MBEDTLS_X509_BADCERT_NOT_TRUSTED:MBEDTLS_ERR_X509_CERT_VERIFY_FAILED:"":0
2643*62c56f98SSadaf Ebrahimi
2644*62c56f98SSadaf EbrahimiX509 CRT verify chain #5 (nonzero maxpathlen intermediate)
2645*62c56f98SSadaf Ebrahimidepends_on:MBEDTLS_MD_CAN_SHA256:MBEDTLS_RSA_C:MBEDTLS_PKCS1_V15
2646*62c56f98SSadaf Ebrahimimbedtls_x509_crt_verify_chain:"data_files/dir4/cert54.crt data_files/dir4/cert53.crt data_files/dir4/cert52.crt":"data_files/dir4/cert51.crt":0:0:"":0
2647*62c56f98SSadaf Ebrahimi
2648*62c56f98SSadaf EbrahimiX509 CRT verify chain #6 (nonzero maxpathlen root)
2649*62c56f98SSadaf Ebrahimidepends_on:MBEDTLS_MD_CAN_SHA256:MBEDTLS_RSA_C:MBEDTLS_PKCS1_V15
2650*62c56f98SSadaf Ebrahimimbedtls_x509_crt_verify_chain:"data_files/dir4/cert63.crt data_files/dir4/cert62.crt":"data_files/dir4/cert61.crt":0:0:"":0
2651*62c56f98SSadaf Ebrahimi
2652*62c56f98SSadaf EbrahimiX509 CRT verify chain #7 (maxpathlen root, self signed in path)
2653*62c56f98SSadaf Ebrahimidepends_on:MBEDTLS_MD_CAN_SHA256:MBEDTLS_RSA_C:MBEDTLS_PKCS1_V15
2654*62c56f98SSadaf Ebrahimimbedtls_x509_crt_verify_chain:"data_files/dir4/cert74.crt data_files/dir4/cert73.crt data_files/dir4/cert72.crt":"data_files/dir4/cert71.crt":0:0:"":0
2655*62c56f98SSadaf Ebrahimi
2656*62c56f98SSadaf EbrahimiX509 CRT verify chain #8 (self signed maxpathlen root)
2657*62c56f98SSadaf Ebrahimidepends_on:MBEDTLS_MD_CAN_SHA256:MBEDTLS_RSA_C:MBEDTLS_PKCS1_V15
2658*62c56f98SSadaf Ebrahimimbedtls_x509_crt_verify_chain:"data_files/dir4/cert61.crt data_files/dir4/cert63.crt data_files/dir4/cert62.crt":"data_files/dir4/cert61.crt":0:0:"":0
2659*62c56f98SSadaf Ebrahimi
2660*62c56f98SSadaf EbrahimiX509 CRT verify chain #9 (zero pathlen first intermediate, valid)
2661*62c56f98SSadaf Ebrahimidepends_on:MBEDTLS_MD_CAN_SHA256:MBEDTLS_PK_CAN_ECDSA_VERIFY:MBEDTLS_ECP_HAVE_SECP256R1
2662*62c56f98SSadaf Ebrahimimbedtls_x509_crt_verify_chain:"data_files/dir4/cert83.crt data_files/dir4/cert82.crt":"data_files/dir4/cert81.crt":0:0:"":0
2663*62c56f98SSadaf Ebrahimi
2664*62c56f98SSadaf EbrahimiX509 CRT verify chain #10 (zero pathlen root, valid)
2665*62c56f98SSadaf Ebrahimidepends_on:MBEDTLS_MD_CAN_SHA256:MBEDTLS_PK_CAN_ECDSA_VERIFY:MBEDTLS_ECP_HAVE_SECP256R1
2666*62c56f98SSadaf Ebrahimimbedtls_x509_crt_verify_chain:"data_files/dir4/cert92.crt":"data_files/dir4/cert91.crt":0:0:"":0
2667*62c56f98SSadaf Ebrahimi
2668*62c56f98SSadaf EbrahimiX509 CRT verify chain #11 (valid chain, missing profile)
2669*62c56f98SSadaf Ebrahimidepends_on:MBEDTLS_MD_CAN_SHA256:MBEDTLS_PK_CAN_ECDSA_VERIFY:MBEDTLS_ECP_HAVE_SECP256R1
2670*62c56f98SSadaf Ebrahimimbedtls_x509_crt_verify_chain:"data_files/dir4/cert92.crt":"data_files/dir4/cert91.crt":-1:MBEDTLS_ERR_X509_BAD_INPUT_DATA:"nonesuch":0
2671*62c56f98SSadaf Ebrahimi
2672*62c56f98SSadaf EbrahimiX509 CRT verify chain #12 (suiteb profile, RSA root)
2673*62c56f98SSadaf Ebrahimidepends_on:MBEDTLS_MD_CAN_SHA256:MBEDTLS_RSA_C:MBEDTLS_PKCS1_V15:MBEDTLS_PK_CAN_ECDSA_VERIFY:MBEDTLS_ECP_HAVE_SECP192R1:MBEDTLS_MD_CAN_SHA1
2674*62c56f98SSadaf Ebrahimimbedtls_x509_crt_verify_chain:"data_files/server3.crt":"data_files/test-ca.crt":MBEDTLS_X509_BADCERT_BAD_MD|MBEDTLS_X509_BADCERT_BAD_PK|MBEDTLS_X509_BADCERT_BAD_KEY:MBEDTLS_ERR_X509_CERT_VERIFY_FAILED:"suiteb":0
2675*62c56f98SSadaf Ebrahimi
2676*62c56f98SSadaf EbrahimiX509 CRT verify chain #13 (RSA only profile, EC root)
2677*62c56f98SSadaf Ebrahimidepends_on:MBEDTLS_MD_CAN_SHA256:MBEDTLS_RSA_C:MBEDTLS_PK_CAN_ECDSA_VERIFY:MBEDTLS_ECP_HAVE_SECP384R1
2678*62c56f98SSadaf Ebrahimimbedtls_x509_crt_verify_chain:"data_files/server4.crt":"data_files/test-ca2.crt":MBEDTLS_X509_BADCERT_BAD_PK|MBEDTLS_X509_BADCERT_BAD_KEY:MBEDTLS_ERR_X509_CERT_VERIFY_FAILED:"rsa3072":0
2679*62c56f98SSadaf Ebrahimi
2680*62c56f98SSadaf EbrahimiX509 CRT verify chain #13 (RSA only profile, EC trusted EE)
2681*62c56f98SSadaf Ebrahimidepends_on:MBEDTLS_MD_CAN_SHA256:MBEDTLS_RSA_C:MBEDTLS_PK_CAN_ECDSA_VERIFY:MBEDTLS_ECP_HAVE_SECP256R1
2682*62c56f98SSadaf Ebrahimimbedtls_x509_crt_verify_chain:"data_files/server5-selfsigned.crt":"data_files/server5-selfsigned.crt":MBEDTLS_X509_BADCERT_BAD_PK|MBEDTLS_X509_BADCERT_BAD_KEY:MBEDTLS_ERR_X509_CERT_VERIFY_FAILED:"rsa3072":0
2683*62c56f98SSadaf Ebrahimi
2684*62c56f98SSadaf EbrahimiX509 CRT verify chain #14 (RSA-3072 profile, root key too small)
2685*62c56f98SSadaf Ebrahimidepends_on:MBEDTLS_MD_CAN_SHA256:MBEDTLS_RSA_C:MBEDTLS_PKCS1_V15:MBEDTLS_MD_CAN_SHA1
2686*62c56f98SSadaf Ebrahimimbedtls_x509_crt_verify_chain:"data_files/server1.crt":"data_files/test-ca.crt":MBEDTLS_X509_BADCERT_BAD_MD|MBEDTLS_X509_BADCERT_BAD_KEY:MBEDTLS_ERR_X509_CERT_VERIFY_FAILED:"rsa3072":0
2687*62c56f98SSadaf Ebrahimi
2688*62c56f98SSadaf EbrahimiX509 CRT verify chain #15 (suiteb profile, rsa intermediate)
2689*62c56f98SSadaf Ebrahimidepends_on:MBEDTLS_MD_CAN_SHA256:MBEDTLS_RSA_C:MBEDTLS_PKCS1_V15:MBEDTLS_PK_CAN_ECDSA_VERIFY:MBEDTLS_ECP_HAVE_SECP384R1:MBEDTLS_ECP_HAVE_SECP256R1
2690*62c56f98SSadaf Ebrahimimbedtls_x509_crt_verify_chain:"data_files/server7.crt data_files/test-int-ca.crt":"data_files/test-ca2.crt":MBEDTLS_X509_BADCERT_BAD_PK:MBEDTLS_ERR_X509_CERT_VERIFY_FAILED:"suiteb":0
2691*62c56f98SSadaf Ebrahimi
2692*62c56f98SSadaf EbrahimiX509 CRT verify chain #16 (RSA-only profile, EC intermediate)
2693*62c56f98SSadaf Ebrahimidepends_on:MBEDTLS_MD_CAN_SHA256:MBEDTLS_RSA_C:MBEDTLS_PKCS1_V15:MBEDTLS_PK_CAN_ECDSA_VERIFY:MBEDTLS_ECP_HAVE_SECP384R1:MBEDTLS_ECP_HAVE_SECP256R1:MBEDTLS_MD_CAN_SHA1
2694*62c56f98SSadaf Ebrahimimbedtls_x509_crt_verify_chain:"data_files/server8.crt data_files/test-int-ca2.crt":"data_files/test-ca.crt":MBEDTLS_X509_BADCERT_BAD_PK|MBEDTLS_X509_BADCERT_BAD_KEY:MBEDTLS_ERR_X509_CERT_VERIFY_FAILED:"rsa3072":0
2695*62c56f98SSadaf Ebrahimi
2696*62c56f98SSadaf EbrahimiX509 CRT verify chain #17 (SHA-512 profile)
2697*62c56f98SSadaf Ebrahimidepends_on:MBEDTLS_MD_CAN_SHA256:MBEDTLS_RSA_C:MBEDTLS_PKCS1_V15:MBEDTLS_PK_CAN_ECDSA_VERIFY:MBEDTLS_ECP_HAVE_SECP256R1:MBEDTLS_ECP_HAVE_SECP384R1
2698*62c56f98SSadaf Ebrahimimbedtls_x509_crt_verify_chain:"data_files/server7.crt data_files/test-int-ca.crt":"data_files/test-ca2.crt":MBEDTLS_X509_BADCERT_BAD_MD:MBEDTLS_ERR_X509_CERT_VERIFY_FAILED:"sha512":0
2699*62c56f98SSadaf Ebrahimi
2700*62c56f98SSadaf EbrahimiX509 CRT verify chain #18 (len=1, vrfy fatal on depth 1)
2701*62c56f98SSadaf Ebrahimidepends_on:MBEDTLS_MD_CAN_SHA256:MBEDTLS_PK_CAN_ECDSA_VERIFY:MBEDTLS_ECP_HAVE_SECP256R1:MBEDTLS_ECP_HAVE_SECP384R1:MBEDTLS_MD_CAN_SHA512
2702*62c56f98SSadaf Ebrahimimbedtls_x509_crt_verify_chain:"data_files/server5.crt":"data_files/test-ca2.crt":-1:-2:"":2
2703*62c56f98SSadaf Ebrahimi
2704*62c56f98SSadaf EbrahimiX509 CRT verify chain #19 (len=0, vrfy fatal on depth 0)
2705*62c56f98SSadaf Ebrahimidepends_on:MBEDTLS_MD_CAN_SHA256:MBEDTLS_PK_CAN_ECDSA_VERIFY:MBEDTLS_ECP_HAVE_SECP256R1:MBEDTLS_ECP_HAVE_SECP384R1:MBEDTLS_MD_CAN_SHA512
2706*62c56f98SSadaf Ebrahimimbedtls_x509_crt_verify_chain:"data_files/server5.crt":"data_files/test-ca2.crt":-1:-1:"":1
2707*62c56f98SSadaf Ebrahimi
2708*62c56f98SSadaf EbrahimiX509 CRT verify chain #20 (len=1, vrfy fatal on depth 0)
2709*62c56f98SSadaf Ebrahimidepends_on:MBEDTLS_MD_CAN_SHA256:MBEDTLS_PK_CAN_ECDSA_VERIFY:MBEDTLS_ECP_HAVE_SECP256R1:MBEDTLS_ECP_HAVE_SECP384R1:MBEDTLS_MD_CAN_SHA512:MBEDTLS_MD_CAN_SHA1:MBEDTLS_RSA_C
2710*62c56f98SSadaf Ebrahimimbedtls_x509_crt_verify_chain:"data_files/server5.crt":"data_files/test-ca.crt":-1:-1:"":1
2711*62c56f98SSadaf Ebrahimi
2712*62c56f98SSadaf EbrahimiX509 CRT verify chain #21 (len=3, vrfy fatal on depth 3)
2713*62c56f98SSadaf Ebrahimidepends_on:MBEDTLS_MD_CAN_SHA256:MBEDTLS_PK_CAN_ECDSA_VERIFY:MBEDTLS_ECP_HAVE_SECP256R1:MBEDTLS_RSA_C:MBEDTLS_PKCS1_V15:MBEDTLS_MD_CAN_SHA1:MBEDTLS_ECP_HAVE_SECP384R1
2714*62c56f98SSadaf Ebrahimimbedtls_x509_crt_verify_chain:"data_files/server10_int3_int-ca2_ca.crt":"data_files/test-ca.crt":-1:-4:"":8
2715*62c56f98SSadaf Ebrahimi
2716*62c56f98SSadaf EbrahimiX509 CRT verify chain #22 (len=3, vrfy fatal on depth 2)
2717*62c56f98SSadaf Ebrahimidepends_on:MBEDTLS_MD_CAN_SHA256:MBEDTLS_PK_CAN_ECDSA_VERIFY:MBEDTLS_ECP_HAVE_SECP256R1:MBEDTLS_RSA_C:MBEDTLS_MD_CAN_SHA1:MBEDTLS_ECP_HAVE_SECP384R1
2718*62c56f98SSadaf Ebrahimimbedtls_x509_crt_verify_chain:"data_files/server10_int3_int-ca2_ca.crt":"data_files/test-ca.crt":-1:-3:"":4
2719*62c56f98SSadaf Ebrahimi
2720*62c56f98SSadaf EbrahimiX509 CRT verify chain #23 (len=3, vrfy fatal on depth 1)
2721*62c56f98SSadaf Ebrahimidepends_on:MBEDTLS_MD_CAN_SHA256:MBEDTLS_PK_CAN_ECDSA_VERIFY:MBEDTLS_ECP_HAVE_SECP256R1:MBEDTLS_RSA_C:MBEDTLS_MD_CAN_SHA1:MBEDTLS_ECP_HAVE_SECP384R1
2722*62c56f98SSadaf Ebrahimimbedtls_x509_crt_verify_chain:"data_files/server10_int3_int-ca2_ca.crt":"data_files/test-ca.crt":-1:-2:"":2
2723*62c56f98SSadaf Ebrahimi
2724*62c56f98SSadaf EbrahimiX509 CRT verify chain #24 (len=3, vrfy fatal on depth 0)
2725*62c56f98SSadaf Ebrahimidepends_on:MBEDTLS_MD_CAN_SHA256:MBEDTLS_PK_CAN_ECDSA_VERIFY:MBEDTLS_ECP_HAVE_SECP256R1:MBEDTLS_RSA_C:MBEDTLS_MD_CAN_SHA1:MBEDTLS_ECP_HAVE_SECP384R1
2726*62c56f98SSadaf Ebrahimimbedtls_x509_crt_verify_chain:"data_files/server10_int3_int-ca2_ca.crt":"data_files/test-ca.crt":-1:-1:"":1
2727*62c56f98SSadaf Ebrahimi
2728*62c56f98SSadaf EbrahimiX509 CRT verify chain #25 (len=3, vrfy fatal on depth 3, untrusted)
2729*62c56f98SSadaf Ebrahimidepends_on:MBEDTLS_MD_CAN_SHA256:MBEDTLS_PK_CAN_ECDSA_VERIFY:MBEDTLS_ECP_HAVE_SECP256R1:MBEDTLS_RSA_C:MBEDTLS_MD_CAN_SHA1:MBEDTLS_ECP_HAVE_SECP384R1
2730*62c56f98SSadaf Ebrahimimbedtls_x509_crt_verify_chain:"data_files/server10_int3_int-ca2_ca.crt":"data_files/test-ca2.crt":-1:-4:"":8
2731*62c56f98SSadaf Ebrahimi
2732*62c56f98SSadaf EbrahimiX509 OID description #1
2733*62c56f98SSadaf Ebrahimix509_oid_desc:"2b06010505070301":"TLS Web Server Authentication"
2734*62c56f98SSadaf Ebrahimi
2735*62c56f98SSadaf EbrahimiX509 OID description #2
2736*62c56f98SSadaf Ebrahimix509_oid_desc:"2b0601050507030f":"notfound"
2737*62c56f98SSadaf Ebrahimi
2738*62c56f98SSadaf EbrahimiX509 OID description #3
2739*62c56f98SSadaf Ebrahimix509_oid_desc:"2b0601050507030100":"notfound"
2740*62c56f98SSadaf Ebrahimi
2741*62c56f98SSadaf EbrahimiX509 OID numstring #1 (wide buffer)
2742*62c56f98SSadaf Ebrahimix509_oid_numstr:"2b06010505070301":"1.3.6.1.5.5.7.3.1":20:17
2743*62c56f98SSadaf Ebrahimi
2744*62c56f98SSadaf EbrahimiX509 OID numstring #2 (buffer just fits)
2745*62c56f98SSadaf Ebrahimix509_oid_numstr:"2b06010505070301":"1.3.6.1.5.5.7.3.1":18:17
2746*62c56f98SSadaf Ebrahimi
2747*62c56f98SSadaf EbrahimiX509 OID numstring #3 (buffer too small)
2748*62c56f98SSadaf Ebrahimix509_oid_numstr:"2b06010505070301":"1.3.6.1.5.5.7.3.1":17:MBEDTLS_ERR_OID_BUF_TOO_SMALL
2749*62c56f98SSadaf Ebrahimi
2750*62c56f98SSadaf EbrahimiX509 OID numstring #4 (larger number)
2751*62c56f98SSadaf Ebrahimix509_oid_numstr:"2a864886f70d":"1.2.840.113549":15:14
2752*62c56f98SSadaf Ebrahimi
2753*62c56f98SSadaf EbrahimiX509 OID numstring #5 (arithmetic overflow)
2754*62c56f98SSadaf Ebrahimix509_oid_numstr:"2a8648f9f8f7f6f5f4f3f2f1f001":"":100:MBEDTLS_ERR_ASN1_INVALID_DATA
2755*62c56f98SSadaf Ebrahimi
2756*62c56f98SSadaf EbrahimiX509 CRT keyUsage #1 (no extension, expected KU)
2757*62c56f98SSadaf Ebrahimidepends_on:MBEDTLS_RSA_C:MBEDTLS_MD_CAN_SHA1
2758*62c56f98SSadaf Ebrahimix509_check_key_usage:"data_files/server1.crt":MBEDTLS_X509_KU_DIGITAL_SIGNATURE|MBEDTLS_X509_KU_KEY_ENCIPHERMENT:0
2759*62c56f98SSadaf Ebrahimi
2760*62c56f98SSadaf EbrahimiX509 CRT keyUsage #2 (no extension, surprising KU)
2761*62c56f98SSadaf Ebrahimidepends_on:MBEDTLS_RSA_C:MBEDTLS_MD_CAN_SHA1
2762*62c56f98SSadaf Ebrahimix509_check_key_usage:"data_files/server1.crt":MBEDTLS_X509_KU_KEY_CERT_SIGN:0
2763*62c56f98SSadaf Ebrahimi
2764*62c56f98SSadaf EbrahimiX509 CRT keyUsage #3 (extension present, no KU)
2765*62c56f98SSadaf Ebrahimidepends_on:MBEDTLS_RSA_C:MBEDTLS_MD_CAN_SHA1
2766*62c56f98SSadaf Ebrahimix509_check_key_usage:"data_files/server1.key_usage.crt":0:0
2767*62c56f98SSadaf Ebrahimi
2768*62c56f98SSadaf EbrahimiX509 CRT keyUsage #4 (extension present, single KU present)
2769*62c56f98SSadaf Ebrahimidepends_on:MBEDTLS_RSA_C:MBEDTLS_MD_CAN_SHA1
2770*62c56f98SSadaf Ebrahimix509_check_key_usage:"data_files/server1.key_usage.crt":MBEDTLS_X509_KU_DIGITAL_SIGNATURE:0
2771*62c56f98SSadaf Ebrahimi
2772*62c56f98SSadaf EbrahimiX509 CRT keyUsage #5 (extension present, single KU absent)
2773*62c56f98SSadaf Ebrahimidepends_on:MBEDTLS_RSA_C:MBEDTLS_MD_CAN_SHA1
2774*62c56f98SSadaf Ebrahimix509_check_key_usage:"data_files/server1.key_usage.crt":MBEDTLS_X509_KU_KEY_CERT_SIGN:MBEDTLS_ERR_X509_BAD_INPUT_DATA
2775*62c56f98SSadaf Ebrahimi
2776*62c56f98SSadaf EbrahimiX509 CRT keyUsage #6 (extension present, combined KU present)
2777*62c56f98SSadaf Ebrahimidepends_on:MBEDTLS_RSA_C:MBEDTLS_MD_CAN_SHA1
2778*62c56f98SSadaf Ebrahimix509_check_key_usage:"data_files/server1.key_usage.crt":MBEDTLS_X509_KU_DIGITAL_SIGNATURE|MBEDTLS_X509_KU_KEY_ENCIPHERMENT:0
2779*62c56f98SSadaf Ebrahimi
2780*62c56f98SSadaf EbrahimiX509 CRT keyUsage #7 (extension present, combined KU both absent)
2781*62c56f98SSadaf Ebrahimidepends_on:MBEDTLS_RSA_C:MBEDTLS_MD_CAN_SHA1
2782*62c56f98SSadaf Ebrahimix509_check_key_usage:"data_files/server1.key_usage.crt":MBEDTLS_X509_KU_KEY_CERT_SIGN|MBEDTLS_X509_KU_CRL_SIGN:MBEDTLS_ERR_X509_BAD_INPUT_DATA
2783*62c56f98SSadaf Ebrahimi
2784*62c56f98SSadaf EbrahimiX509 CRT keyUsage #8 (extension present, combined KU one absent)
2785*62c56f98SSadaf Ebrahimidepends_on:MBEDTLS_RSA_C:MBEDTLS_MD_CAN_SHA1
2786*62c56f98SSadaf Ebrahimix509_check_key_usage:"data_files/server1.key_usage.crt":MBEDTLS_X509_KU_KEY_ENCIPHERMENT|MBEDTLS_X509_KU_KEY_AGREEMENT:MBEDTLS_ERR_X509_BAD_INPUT_DATA
2787*62c56f98SSadaf Ebrahimi
2788*62c56f98SSadaf EbrahimiX509 CRT keyUsage #9 (extension present, decOnly allowed absent)
2789*62c56f98SSadaf Ebrahimidepends_on:MBEDTLS_RSA_C:MBEDTLS_MD_CAN_SHA1
2790*62c56f98SSadaf Ebrahimix509_check_key_usage:"data_files/server1.key_usage.crt":MBEDTLS_X509_KU_DIGITAL_SIGNATURE|MBEDTLS_X509_KU_KEY_ENCIPHERMENT|MBEDTLS_X509_KU_DECIPHER_ONLY:0
2791*62c56f98SSadaf Ebrahimi
2792*62c56f98SSadaf EbrahimiX509 CRT keyUsage #10 (extension present, decOnly non-allowed present)
2793*62c56f98SSadaf Ebrahimidepends_on:MBEDTLS_RSA_C:MBEDTLS_MD_CAN_SHA1
2794*62c56f98SSadaf Ebrahimix509_check_key_usage:"data_files/keyUsage.decipherOnly.crt":MBEDTLS_X509_KU_DIGITAL_SIGNATURE|MBEDTLS_X509_KU_KEY_ENCIPHERMENT:MBEDTLS_ERR_X509_BAD_INPUT_DATA
2795*62c56f98SSadaf Ebrahimi
2796*62c56f98SSadaf EbrahimiX509 CRT keyUsage #11 (extension present, decOnly allowed present)
2797*62c56f98SSadaf Ebrahimidepends_on:MBEDTLS_RSA_C:MBEDTLS_MD_CAN_SHA1
2798*62c56f98SSadaf Ebrahimix509_check_key_usage:"data_files/keyUsage.decipherOnly.crt":MBEDTLS_X509_KU_DIGITAL_SIGNATURE|MBEDTLS_X509_KU_KEY_ENCIPHERMENT|MBEDTLS_X509_KU_DECIPHER_ONLY:0
2799*62c56f98SSadaf Ebrahimi
2800*62c56f98SSadaf EbrahimiX509 CRT extendedKeyUsage #1 (no extension, serverAuth)
2801*62c56f98SSadaf Ebrahimidepends_on:MBEDTLS_PK_CAN_ECDSA_VERIFY:MBEDTLS_ECP_HAVE_SECP256R1:MBEDTLS_MD_CAN_SHA256
2802*62c56f98SSadaf Ebrahimix509_check_extended_key_usage:"data_files/server5.crt":"2b06010505070301":0
2803*62c56f98SSadaf Ebrahimi
2804*62c56f98SSadaf EbrahimiX509 CRT extendedKeyUsage #2 (single value, present)
2805*62c56f98SSadaf Ebrahimidepends_on:MBEDTLS_PK_CAN_ECDSA_VERIFY:MBEDTLS_ECP_HAVE_SECP256R1:MBEDTLS_MD_CAN_SHA256
2806*62c56f98SSadaf Ebrahimix509_check_extended_key_usage:"data_files/server5.eku-srv.crt":"2b06010505070301":0
2807*62c56f98SSadaf Ebrahimi
2808*62c56f98SSadaf EbrahimiX509 CRT extendedKeyUsage #3 (single value, absent)
2809*62c56f98SSadaf Ebrahimidepends_on:MBEDTLS_PK_CAN_ECDSA_VERIFY:MBEDTLS_ECP_HAVE_SECP256R1:MBEDTLS_MD_CAN_SHA256
2810*62c56f98SSadaf Ebrahimix509_check_extended_key_usage:"data_files/server5.eku-cli.crt":"2b06010505070301":MBEDTLS_ERR_X509_BAD_INPUT_DATA
2811*62c56f98SSadaf Ebrahimi
2812*62c56f98SSadaf EbrahimiX509 CRT extendedKeyUsage #4 (two values, first)
2813*62c56f98SSadaf Ebrahimidepends_on:MBEDTLS_PK_CAN_ECDSA_VERIFY:MBEDTLS_ECP_HAVE_SECP256R1:MBEDTLS_MD_CAN_SHA256
2814*62c56f98SSadaf Ebrahimix509_check_extended_key_usage:"data_files/server5.eku-srv_cli.crt":"2b06010505070301":0
2815*62c56f98SSadaf Ebrahimi
2816*62c56f98SSadaf EbrahimiX509 CRT extendedKeyUsage #5 (two values, second)
2817*62c56f98SSadaf Ebrahimidepends_on:MBEDTLS_PK_CAN_ECDSA_VERIFY:MBEDTLS_ECP_HAVE_SECP256R1:MBEDTLS_MD_CAN_SHA256
2818*62c56f98SSadaf Ebrahimix509_check_extended_key_usage:"data_files/server5.eku-srv_cli.crt":"2b06010505070302":0
2819*62c56f98SSadaf Ebrahimi
2820*62c56f98SSadaf EbrahimiX509 CRT extendedKeyUsage #6 (two values, other)
2821*62c56f98SSadaf Ebrahimidepends_on:MBEDTLS_PK_CAN_ECDSA_VERIFY:MBEDTLS_ECP_HAVE_SECP256R1:MBEDTLS_MD_CAN_SHA256
2822*62c56f98SSadaf Ebrahimix509_check_extended_key_usage:"data_files/server5.eku-srv_cli.crt":"2b06010505070303":MBEDTLS_ERR_X509_BAD_INPUT_DATA
2823*62c56f98SSadaf Ebrahimi
2824*62c56f98SSadaf EbrahimiX509 CRT extendedKeyUsage #7 (any, random)
2825*62c56f98SSadaf Ebrahimidepends_on:MBEDTLS_PK_CAN_ECDSA_VERIFY:MBEDTLS_ECP_HAVE_SECP256R1:MBEDTLS_MD_CAN_SHA256
2826*62c56f98SSadaf Ebrahimix509_check_extended_key_usage:"data_files/server5.eku-cs_any.crt":"2b060105050703ff":0
2827*62c56f98SSadaf Ebrahimi
2828*62c56f98SSadaf EbrahimiX509 RSASSA-PSS parameters ASN1 (good, all defaults)
2829*62c56f98SSadaf Ebrahimix509_parse_rsassa_pss_params:"":MBEDTLS_ASN1_CONSTRUCTED | MBEDTLS_ASN1_SEQUENCE:MBEDTLS_MD_SHA1:MBEDTLS_MD_SHA1:20:0
2830*62c56f98SSadaf Ebrahimi
2831*62c56f98SSadaf EbrahimiX509 RSASSA-PSS parameters ASN1 (wrong initial tag)
2832*62c56f98SSadaf Ebrahimix509_parse_rsassa_pss_params:"":MBEDTLS_ASN1_SEQUENCE:MBEDTLS_MD_SHA1:MBEDTLS_MD_SHA1:20:MBEDTLS_ERR_X509_INVALID_ALG + MBEDTLS_ERR_ASN1_UNEXPECTED_TAG
2833*62c56f98SSadaf Ebrahimi
2834*62c56f98SSadaf EbrahimiX509 RSASSA-PSS parameters ASN1 (unknown tag in top-level sequence)
2835*62c56f98SSadaf Ebrahimix509_parse_rsassa_pss_params:"a400":MBEDTLS_ASN1_CONSTRUCTED | MBEDTLS_ASN1_SEQUENCE:MBEDTLS_MD_SHA1:MBEDTLS_MD_SHA1:20:MBEDTLS_ERR_X509_INVALID_ALG + MBEDTLS_ERR_ASN1_LENGTH_MISMATCH
2836*62c56f98SSadaf Ebrahimi
2837*62c56f98SSadaf EbrahimiX509 RSASSA-PSS parameters ASN1 (good, HashAlg SHA256)
2838*62c56f98SSadaf Ebrahimidepends_on:MBEDTLS_RSA_C:MBEDTLS_MD_CAN_SHA256
2839*62c56f98SSadaf Ebrahimix509_parse_rsassa_pss_params:"a00d300b0609608648016503040201":MBEDTLS_ASN1_CONSTRUCTED | MBEDTLS_ASN1_SEQUENCE:MBEDTLS_MD_SHA256:MBEDTLS_MD_SHA1:20:0
2840*62c56f98SSadaf Ebrahimi
2841*62c56f98SSadaf EbrahimiX509 RSASSA-PSS parameters ASN1 (good, explicit HashAlg = default)
2842*62c56f98SSadaf Ebrahimidepends_on:MBEDTLS_RSA_C:MBEDTLS_MD_CAN_SHA1
2843*62c56f98SSadaf Ebrahimix509_parse_rsassa_pss_params:"a009300706052b0e03021a":MBEDTLS_ASN1_CONSTRUCTED | MBEDTLS_ASN1_SEQUENCE:MBEDTLS_MD_SHA1:MBEDTLS_MD_SHA1:20:0
2844*62c56f98SSadaf Ebrahimi
2845*62c56f98SSadaf EbrahimiX509 RSASSA-PSS parameters ASN1 (HashAlg wrong len #1)
2846*62c56f98SSadaf Ebrahimix509_parse_rsassa_pss_params:"a00a300706052b0e03021a":MBEDTLS_ASN1_CONSTRUCTED | MBEDTLS_ASN1_SEQUENCE:MBEDTLS_MD_SHA1:MBEDTLS_MD_SHA1:20:MBEDTLS_ERR_X509_INVALID_ALG + MBEDTLS_ERR_ASN1_OUT_OF_DATA
2847*62c56f98SSadaf Ebrahimi
2848*62c56f98SSadaf EbrahimiX509 RSASSA-PSS parameters ASN1 (HashAlg wrong len #2)
2849*62c56f98SSadaf Ebrahimidepends_on:MBEDTLS_RSA_C:MBEDTLS_MD_CAN_SHA1
2850*62c56f98SSadaf Ebrahimix509_parse_rsassa_pss_params:"a00a300706052b0e03021a00":MBEDTLS_ASN1_CONSTRUCTED | MBEDTLS_ASN1_SEQUENCE:MBEDTLS_MD_SHA1:MBEDTLS_MD_SHA1:20:MBEDTLS_ERR_X509_INVALID_ALG + MBEDTLS_ERR_ASN1_LENGTH_MISMATCH
2851*62c56f98SSadaf Ebrahimi
2852*62c56f98SSadaf EbrahimiX509 RSASSA-PSS parameters ASN1 (HashAlg with parameters)
2853*62c56f98SSadaf Ebrahimix509_parse_rsassa_pss_params:"a00f300d06096086480165030402013000":MBEDTLS_ASN1_CONSTRUCTED | MBEDTLS_ASN1_SEQUENCE:MBEDTLS_MD_SHA256:MBEDTLS_MD_SHA1:20:MBEDTLS_ERR_X509_INVALID_ALG + MBEDTLS_ERR_ASN1_INVALID_DATA
2854*62c56f98SSadaf Ebrahimi
2855*62c56f98SSadaf EbrahimiX509 RSASSA-PSS parameters ASN1 (HashAlg unknown OID)
2856*62c56f98SSadaf Ebrahimix509_parse_rsassa_pss_params:"a00d300b06096086480165030402ff":MBEDTLS_ASN1_CONSTRUCTED | MBEDTLS_ASN1_SEQUENCE:MBEDTLS_MD_SHA256:MBEDTLS_MD_SHA1:20:MBEDTLS_ERR_X509_INVALID_ALG + MBEDTLS_ERR_OID_NOT_FOUND
2857*62c56f98SSadaf Ebrahimi
2858*62c56f98SSadaf EbrahimiX509 RSASSA-PSS parameters ASN1 (good, MGAlg = MGF1-SHA256)
2859*62c56f98SSadaf Ebrahimidepends_on:MBEDTLS_RSA_C:MBEDTLS_MD_CAN_SHA256
2860*62c56f98SSadaf Ebrahimix509_parse_rsassa_pss_params:"a11a301806092a864886f70d010108300b0609608648016503040201":MBEDTLS_ASN1_CONSTRUCTED | MBEDTLS_ASN1_SEQUENCE:MBEDTLS_MD_SHA1:MBEDTLS_MD_SHA256:20:0
2861*62c56f98SSadaf Ebrahimi
2862*62c56f98SSadaf EbrahimiX509 RSASSA-PSS parameters ASN1 (good, explicit MGAlg = default)
2863*62c56f98SSadaf Ebrahimidepends_on:MBEDTLS_RSA_C:MBEDTLS_MD_CAN_SHA1
2864*62c56f98SSadaf Ebrahimix509_parse_rsassa_pss_params:"a116301406092a864886f70d010108300706052b0e03021a":MBEDTLS_ASN1_CONSTRUCTED | MBEDTLS_ASN1_SEQUENCE:MBEDTLS_MD_SHA1:MBEDTLS_MD_SHA1:20:0
2865*62c56f98SSadaf Ebrahimi
2866*62c56f98SSadaf EbrahimiX509 RSASSA-PSS parameters ASN1 (MGAlg wrong len #1)
2867*62c56f98SSadaf Ebrahimix509_parse_rsassa_pss_params:"a11b301806092a864886f70d010108300b0609608648016503040201":MBEDTLS_ASN1_CONSTRUCTED | MBEDTLS_ASN1_SEQUENCE:MBEDTLS_MD_SHA1:MBEDTLS_MD_SHA256:20:MBEDTLS_ERR_X509_INVALID_ALG + MBEDTLS_ERR_ASN1_OUT_OF_DATA
2868*62c56f98SSadaf Ebrahimi
2869*62c56f98SSadaf EbrahimiX509 RSASSA-PSS parameters ASN1 (MGAlg wrong len #2)
2870*62c56f98SSadaf Ebrahimidepends_on:MBEDTLS_RSA_C:MBEDTLS_MD_CAN_SHA256
2871*62c56f98SSadaf Ebrahimix509_parse_rsassa_pss_params:"a11b301806092a864886f70d010108300b060960864801650304020100":MBEDTLS_ASN1_CONSTRUCTED | MBEDTLS_ASN1_SEQUENCE:MBEDTLS_MD_SHA1:MBEDTLS_MD_SHA256:20:MBEDTLS_ERR_X509_INVALID_ALG + MBEDTLS_ERR_ASN1_LENGTH_MISMATCH
2872*62c56f98SSadaf Ebrahimi
2873*62c56f98SSadaf EbrahimiX509 RSASSA-PSS parameters ASN1 (MGAlg AlgId wrong len #1)
2874*62c56f98SSadaf Ebrahimix509_parse_rsassa_pss_params:"a11a301906092a864886f70d010108300b0609608648016503040201":MBEDTLS_ASN1_CONSTRUCTED | MBEDTLS_ASN1_SEQUENCE:MBEDTLS_MD_SHA1:MBEDTLS_MD_SHA256:20:MBEDTLS_ERR_X509_INVALID_ALG + MBEDTLS_ERR_ASN1_OUT_OF_DATA
2875*62c56f98SSadaf Ebrahimi
2876*62c56f98SSadaf EbrahimiX509 RSASSA-PSS parameters ASN1 (MGAlg OID != MGF1)
2877*62c56f98SSadaf Ebrahimix509_parse_rsassa_pss_params:"a11a301806092a864886f70d010109300b0609608648016503040201":MBEDTLS_ASN1_CONSTRUCTED | MBEDTLS_ASN1_SEQUENCE:MBEDTLS_MD_SHA1:MBEDTLS_MD_SHA256:20:MBEDTLS_ERR_X509_FEATURE_UNAVAILABLE + MBEDTLS_ERR_OID_NOT_FOUND
2878*62c56f98SSadaf Ebrahimi
2879*62c56f98SSadaf EbrahimiX509 RSASSA-PSS parameters ASN1 (MGAlg.params wrong tag)
2880*62c56f98SSadaf Ebrahimix509_parse_rsassa_pss_params:"a11a301806092a864886f70d010108310b0609608648016503040201":MBEDTLS_ASN1_CONSTRUCTED | MBEDTLS_ASN1_SEQUENCE:MBEDTLS_MD_SHA1:MBEDTLS_MD_SHA256:20:MBEDTLS_ERR_X509_INVALID_ALG + MBEDTLS_ERR_ASN1_UNEXPECTED_TAG
2881*62c56f98SSadaf Ebrahimi
2882*62c56f98SSadaf EbrahimiX509 RSASSA-PSS parameters ASN1 (MGAlg.params wrong len #1a)
2883*62c56f98SSadaf Ebrahimix509_parse_rsassa_pss_params:"a10f300d06092a864886f70d0101083000":MBEDTLS_ASN1_CONSTRUCTED | MBEDTLS_ASN1_SEQUENCE:MBEDTLS_MD_SHA1:MBEDTLS_MD_SHA256:20:MBEDTLS_ERR_X509_INVALID_ALG + MBEDTLS_ERR_ASN1_OUT_OF_DATA
2884*62c56f98SSadaf Ebrahimi
2885*62c56f98SSadaf EbrahimiX509 RSASSA-PSS parameters ASN1 (MGAlg.params wrong len #1b)
2886*62c56f98SSadaf Ebrahimix509_parse_rsassa_pss_params:"a11b301906092a864886f70d010108300c0609608648016503040201":MBEDTLS_ASN1_CONSTRUCTED | MBEDTLS_ASN1_SEQUENCE:MBEDTLS_MD_SHA1:MBEDTLS_MD_SHA256:20:MBEDTLS_ERR_X509_INVALID_ALG + MBEDTLS_ERR_ASN1_OUT_OF_DATA
2887*62c56f98SSadaf Ebrahimi
2888*62c56f98SSadaf EbrahimiX509 RSASSA-PSS parameters ASN1 (MGAlg.params.alg not an OID)
2889*62c56f98SSadaf Ebrahimix509_parse_rsassa_pss_params:"a11a301806092a864886f70d010108300b0709608648016503040201":MBEDTLS_ASN1_CONSTRUCTED | MBEDTLS_ASN1_SEQUENCE:MBEDTLS_MD_SHA1:MBEDTLS_MD_SHA256:20:MBEDTLS_ERR_X509_INVALID_ALG + MBEDTLS_ERR_ASN1_UNEXPECTED_TAG
2890*62c56f98SSadaf Ebrahimi
2891*62c56f98SSadaf EbrahimiX509 RSASSA-PSS parameters ASN1 (MGAlg.params.alg unknown OID)
2892*62c56f98SSadaf Ebrahimix509_parse_rsassa_pss_params:"a11a301806092a864886f70d010108300b06096086480165030402ff":MBEDTLS_ASN1_CONSTRUCTED | MBEDTLS_ASN1_SEQUENCE:MBEDTLS_MD_SHA1:MBEDTLS_MD_SHA256:20:MBEDTLS_ERR_X509_INVALID_ALG + MBEDTLS_ERR_OID_NOT_FOUND
2893*62c56f98SSadaf Ebrahimi
2894*62c56f98SSadaf EbrahimiX509 RSASSA-PSS parameters ASN1 (MGAlg.params.params NULL)
2895*62c56f98SSadaf Ebrahimidepends_on:MBEDTLS_RSA_C:MBEDTLS_MD_CAN_SHA256
2896*62c56f98SSadaf Ebrahimix509_parse_rsassa_pss_params:"a11c301a06092a864886f70d010108300d06096086480165030402010500":MBEDTLS_ASN1_CONSTRUCTED | MBEDTLS_ASN1_SEQUENCE:MBEDTLS_MD_SHA1:MBEDTLS_MD_SHA256:20:0
2897*62c56f98SSadaf Ebrahimi
2898*62c56f98SSadaf EbrahimiX509 RSASSA-PSS parameters ASN1 (MGAlg.params.params wrong tag)
2899*62c56f98SSadaf Ebrahimidepends_on:MBEDTLS_RSA_C:MBEDTLS_MD_CAN_SHA256
2900*62c56f98SSadaf Ebrahimix509_parse_rsassa_pss_params:"a11c301a06092a864886f70d010108300d06096086480165030402013000":MBEDTLS_ASN1_CONSTRUCTED | MBEDTLS_ASN1_SEQUENCE:MBEDTLS_MD_SHA1:MBEDTLS_MD_SHA256:20:MBEDTLS_ERR_X509_INVALID_ALG + MBEDTLS_ERR_ASN1_UNEXPECTED_TAG
2901*62c56f98SSadaf Ebrahimi
2902*62c56f98SSadaf EbrahimiX509 RSASSA-PSS parameters ASN1 (MGAlg.params wrong len #1c)
2903*62c56f98SSadaf Ebrahimix509_parse_rsassa_pss_params:"a11d301b06092a864886f70d010108300e06096086480165030402010500":MBEDTLS_ASN1_CONSTRUCTED | MBEDTLS_ASN1_SEQUENCE:MBEDTLS_MD_SHA1:MBEDTLS_MD_SHA256:20:MBEDTLS_ERR_X509_INVALID_ALG + MBEDTLS_ERR_ASN1_OUT_OF_DATA
2904*62c56f98SSadaf Ebrahimi
2905*62c56f98SSadaf EbrahimiX509 RSASSA-PSS parameters ASN1 (MGAlg.params wrong len #2)
2906*62c56f98SSadaf Ebrahimidepends_on:MBEDTLS_RSA_C:MBEDTLS_MD_CAN_SHA256
2907*62c56f98SSadaf Ebrahimix509_parse_rsassa_pss_params:"a11d301b06092a864886f70d010108300e0609608648016503040201050000":MBEDTLS_ASN1_CONSTRUCTED | MBEDTLS_ASN1_SEQUENCE:MBEDTLS_MD_SHA1:MBEDTLS_MD_SHA256:20:MBEDTLS_ERR_X509_INVALID_ALG + MBEDTLS_ERR_ASN1_LENGTH_MISMATCH
2908*62c56f98SSadaf Ebrahimi
2909*62c56f98SSadaf EbrahimiX509 RSASSA-PSS parameters ASN1 (good, saltLen = 94)
2910*62c56f98SSadaf Ebrahimix509_parse_rsassa_pss_params:"a20302015e":MBEDTLS_ASN1_CONSTRUCTED | MBEDTLS_ASN1_SEQUENCE:MBEDTLS_MD_SHA1:MBEDTLS_MD_SHA1:94:0
2911*62c56f98SSadaf Ebrahimi
2912*62c56f98SSadaf EbrahimiX509 RSASSA-PSS parameters ASN1 (good, explicit saltLen = default)
2913*62c56f98SSadaf Ebrahimix509_parse_rsassa_pss_params:"a203020114":MBEDTLS_ASN1_CONSTRUCTED | MBEDTLS_ASN1_SEQUENCE:MBEDTLS_MD_SHA1:MBEDTLS_MD_SHA1:20:0
2914*62c56f98SSadaf Ebrahimi
2915*62c56f98SSadaf EbrahimiX509 RSASSA-PSS parameters ASN1 (saltLen wrong len #1)
2916*62c56f98SSadaf Ebrahimix509_parse_rsassa_pss_params:"a20402015e":MBEDTLS_ASN1_CONSTRUCTED | MBEDTLS_ASN1_SEQUENCE:MBEDTLS_MD_SHA1:MBEDTLS_MD_SHA1:94:MBEDTLS_ERR_X509_INVALID_ALG + MBEDTLS_ERR_ASN1_OUT_OF_DATA
2917*62c56f98SSadaf Ebrahimi
2918*62c56f98SSadaf EbrahimiX509 RSASSA-PSS parameters ASN1 (saltLen wrong len #2)
2919*62c56f98SSadaf Ebrahimix509_parse_rsassa_pss_params:"a20402015e00":MBEDTLS_ASN1_CONSTRUCTED | MBEDTLS_ASN1_SEQUENCE:MBEDTLS_MD_SHA1:MBEDTLS_MD_SHA1:94:MBEDTLS_ERR_X509_INVALID_ALG + MBEDTLS_ERR_ASN1_LENGTH_MISMATCH
2920*62c56f98SSadaf Ebrahimi
2921*62c56f98SSadaf EbrahimiX509 RSASSA-PSS parameters ASN1 (saltLen not an int)
2922*62c56f98SSadaf Ebrahimix509_parse_rsassa_pss_params:"a2023000":MBEDTLS_ASN1_CONSTRUCTED | MBEDTLS_ASN1_SEQUENCE:MBEDTLS_MD_SHA1:MBEDTLS_MD_SHA1:94:MBEDTLS_ERR_X509_INVALID_ALG + MBEDTLS_ERR_ASN1_UNEXPECTED_TAG
2923*62c56f98SSadaf Ebrahimi
2924*62c56f98SSadaf EbrahimiX509 RSASSA-PSS parameters ASN1 (good, explicit trailerField = default)
2925*62c56f98SSadaf Ebrahimix509_parse_rsassa_pss_params:"a303020101":MBEDTLS_ASN1_CONSTRUCTED | MBEDTLS_ASN1_SEQUENCE:MBEDTLS_MD_SHA1:MBEDTLS_MD_SHA1:20:0
2926*62c56f98SSadaf Ebrahimi
2927*62c56f98SSadaf EbrahimiX509 RSASSA-PSS parameters ASN1 (trailerField wrong len #1)
2928*62c56f98SSadaf Ebrahimix509_parse_rsassa_pss_params:"a304020101":MBEDTLS_ASN1_CONSTRUCTED | MBEDTLS_ASN1_SEQUENCE:MBEDTLS_MD_SHA1:MBEDTLS_MD_SHA1:20:MBEDTLS_ERR_X509_INVALID_ALG + MBEDTLS_ERR_ASN1_OUT_OF_DATA
2929*62c56f98SSadaf Ebrahimi
2930*62c56f98SSadaf EbrahimiX509 RSASSA-PSS parameters ASN1 (trailerField wrong len #2)
2931*62c56f98SSadaf Ebrahimix509_parse_rsassa_pss_params:"a30402010100":MBEDTLS_ASN1_CONSTRUCTED | MBEDTLS_ASN1_SEQUENCE:MBEDTLS_MD_SHA1:MBEDTLS_MD_SHA1:20:MBEDTLS_ERR_X509_INVALID_ALG + MBEDTLS_ERR_ASN1_LENGTH_MISMATCH
2932*62c56f98SSadaf Ebrahimi
2933*62c56f98SSadaf EbrahimiX509 RSASSA-PSS parameters ASN1 (trailerField not an int)
2934*62c56f98SSadaf Ebrahimix509_parse_rsassa_pss_params:"a3023000":MBEDTLS_ASN1_CONSTRUCTED | MBEDTLS_ASN1_SEQUENCE:MBEDTLS_MD_SHA1:MBEDTLS_MD_SHA1:20:MBEDTLS_ERR_X509_INVALID_ALG + MBEDTLS_ERR_ASN1_UNEXPECTED_TAG
2935*62c56f98SSadaf Ebrahimi
2936*62c56f98SSadaf EbrahimiX509 RSASSA-PSS parameters ASN1 (trailerField not 1)
2937*62c56f98SSadaf Ebrahimix509_parse_rsassa_pss_params:"a303020102":MBEDTLS_ASN1_CONSTRUCTED | MBEDTLS_ASN1_SEQUENCE:MBEDTLS_MD_SHA1:MBEDTLS_MD_SHA1:20:MBEDTLS_ERR_X509_INVALID_ALG
2938*62c56f98SSadaf Ebrahimi
2939*62c56f98SSadaf EbrahimiX509 CSR ASN.1 (OK)
2940*62c56f98SSadaf Ebrahimidepends_on:MBEDTLS_PK_CAN_ECDSA_SOME:MBEDTLS_ECP_HAVE_SECP256R1:MBEDTLS_MD_CAN_SHA1:!MBEDTLS_X509_REMOVE_INFO
2941*62c56f98SSadaf Ebrahimimbedtls_x509_csr_parse:"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":"CSR version   \: 1\nsubject name  \: C=NL, O=PolarSSL, CN=localhost\nsigned using  \: ECDSA with SHA1\nEC key size   \: 256 bits\n\nkey usage         \: Digital Signature, Non Repudiation, Key Encipherment\n":0
2942*62c56f98SSadaf Ebrahimi
2943*62c56f98SSadaf EbrahimiX509 CSR ASN.1 (bad first tag)
2944*62c56f98SSadaf Ebrahimimbedtls_x509_csr_parse:"3100":"":MBEDTLS_ERR_X509_INVALID_FORMAT
2945*62c56f98SSadaf Ebrahimi
2946*62c56f98SSadaf EbrahimiX509 CSR ASN.1 (bad sequence: overlong)
2947*62c56f98SSadaf Ebrahimimbedtls_x509_csr_parse:"3001":"":MBEDTLS_ERR_X509_INVALID_FORMAT
2948*62c56f98SSadaf Ebrahimi
2949*62c56f98SSadaf EbrahimiX509 CSR ASN.1 (total length mistmatch)
2950*62c56f98SSadaf Ebrahimimbedtls_x509_csr_parse:"30010000":"":MBEDTLS_ERR_X509_INVALID_FORMAT + MBEDTLS_ERR_ASN1_LENGTH_MISMATCH
2951*62c56f98SSadaf Ebrahimi
2952*62c56f98SSadaf EbrahimiX509 CSR ASN.1 (bad CRI: not a sequence)
2953*62c56f98SSadaf Ebrahimimbedtls_x509_csr_parse:"30023100":"":MBEDTLS_ERR_X509_INVALID_FORMAT + MBEDTLS_ERR_ASN1_UNEXPECTED_TAG
2954*62c56f98SSadaf Ebrahimi
2955*62c56f98SSadaf EbrahimiX509 CSR ASN.1 (bad CRI: overlong)
2956*62c56f98SSadaf Ebrahimimbedtls_x509_csr_parse:"30023001":"":MBEDTLS_ERR_X509_INVALID_FORMAT + MBEDTLS_ERR_ASN1_OUT_OF_DATA
2957*62c56f98SSadaf Ebrahimi
2958*62c56f98SSadaf EbrahimiX509 CSR ASN.1 (bad CRI.Version: overlong)
2959*62c56f98SSadaf Ebrahimimbedtls_x509_csr_parse:"30053002020100":"":MBEDTLS_ERR_X509_INVALID_VERSION + MBEDTLS_ERR_ASN1_OUT_OF_DATA
2960*62c56f98SSadaf Ebrahimi
2961*62c56f98SSadaf EbrahimiX509 CSR ASN.1 (bad CRI.Version: not v1)
2962*62c56f98SSadaf Ebrahimimbedtls_x509_csr_parse:"30053003020101":"":MBEDTLS_ERR_X509_UNKNOWN_VERSION
2963*62c56f98SSadaf Ebrahimi
2964*62c56f98SSadaf EbrahimiX509 CSR ASN.1 (bad CRI.Name: not a sequence)
2965*62c56f98SSadaf Ebrahimimbedtls_x509_csr_parse:"300730050201003100":"":MBEDTLS_ERR_X509_INVALID_FORMAT + MBEDTLS_ERR_ASN1_UNEXPECTED_TAG
2966*62c56f98SSadaf Ebrahimi
2967*62c56f98SSadaf EbrahimiX509 CSR ASN.1 (bad CRI.Name: overlong)
2968*62c56f98SSadaf Ebrahimimbedtls_x509_csr_parse:"30083005020100300100":"":MBEDTLS_ERR_X509_INVALID_FORMAT + MBEDTLS_ERR_ASN1_OUT_OF_DATA
2969*62c56f98SSadaf Ebrahimi
2970*62c56f98SSadaf EbrahimiX509 CSR ASN.1 (bad CRI.Name payload: not a set)
2971*62c56f98SSadaf Ebrahimimbedtls_x509_csr_parse:"3009300702010030023000":"":MBEDTLS_ERR_X509_INVALID_NAME + MBEDTLS_ERR_ASN1_UNEXPECTED_TAG
2972*62c56f98SSadaf Ebrahimi
2973*62c56f98SSadaf EbrahimiX509 CSR ASN.1 (bad CRI.Name payload: overlong)
2974*62c56f98SSadaf Ebrahimimbedtls_x509_csr_parse:"300a30080201003002310100":"":MBEDTLS_ERR_X509_INVALID_NAME + MBEDTLS_ERR_ASN1_OUT_OF_DATA
2975*62c56f98SSadaf Ebrahimi
2976*62c56f98SSadaf EbrahimiX509 CSR ASN.1 (bad SubjectPublicKeyInfo: missing)
2977*62c56f98SSadaf Ebrahimimbedtls_x509_csr_parse:"30143012020100300d310b3009060355040613024e4c":"":MBEDTLS_ERR_PK_KEY_INVALID_FORMAT + MBEDTLS_ERR_ASN1_OUT_OF_DATA
2978*62c56f98SSadaf Ebrahimi
2979*62c56f98SSadaf EbrahimiX509 CSR ASN.1 (bad SubjectPublicKeyInfo: not a sequence)
2980*62c56f98SSadaf Ebrahimimbedtls_x509_csr_parse:"30163014020100300d310b3009060355040613024e4c3100":"":MBEDTLS_ERR_PK_KEY_INVALID_FORMAT + MBEDTLS_ERR_ASN1_UNEXPECTED_TAG
2981*62c56f98SSadaf Ebrahimi
2982*62c56f98SSadaf EbrahimiX509 CSR ASN.1 (bad SubjectPublicKeyInfo: overlong)
2983*62c56f98SSadaf Ebrahimimbedtls_x509_csr_parse:"30173014020100300d310b3009060355040613024e4c300100":"":MBEDTLS_ERR_PK_KEY_INVALID_FORMAT + MBEDTLS_ERR_ASN1_OUT_OF_DATA
2984*62c56f98SSadaf Ebrahimi
2985*62c56f98SSadaf EbrahimiX509 CSR ASN.1 (bad attributes: missing)
2986*62c56f98SSadaf Ebrahimidepends_on:MBEDTLS_PK_CAN_ECDSA_SOME:MBEDTLS_ECP_HAVE_SECP256R1
2987*62c56f98SSadaf Ebrahimimbedtls_x509_csr_parse:"3081973081940201003034310b3009060355040613024e4c3111300f060355040a1308506f6c617253534c31123010060355040313096c6f63616c686f73743059301306072a8648ce3d020106082a8648ce3d0301070342000437cc56d976091e5a723ec7592dff206eee7cf9069174d0ad14b5f768225962924ee500d82311ffea2fd2345d5d16bd8a88c26b770d55cd8a2a0efa01c8b4edff":"":MBEDTLS_ERR_X509_INVALID_FORMAT + MBEDTLS_ERR_ASN1_OUT_OF_DATA
2988*62c56f98SSadaf Ebrahimi
2989*62c56f98SSadaf EbrahimiX509 CSR ASN.1 (bad attributes: bad tag)
2990*62c56f98SSadaf Ebrahimidepends_on:MBEDTLS_PK_CAN_ECDSA_SOME:MBEDTLS_ECP_HAVE_SECP256R1
2991*62c56f98SSadaf Ebrahimimbedtls_x509_csr_parse:"3081993081960201003034310b3009060355040613024e4c3111300f060355040a1308506f6c617253534c31123010060355040313096c6f63616c686f73743059301306072a8648ce3d020106082a8648ce3d0301070342000437cc56d976091e5a723ec7592dff206eee7cf9069174d0ad14b5f768225962924ee500d82311ffea2fd2345d5d16bd8a88c26b770d55cd8a2a0efa01c8b4edff0500":"":MBEDTLS_ERR_X509_INVALID_FORMAT + MBEDTLS_ERR_ASN1_UNEXPECTED_TAG
2992*62c56f98SSadaf Ebrahimi
2993*62c56f98SSadaf EbrahimiX509 CSR ASN.1 (bad attributes: overlong)
2994*62c56f98SSadaf Ebrahimidepends_on:MBEDTLS_PK_CAN_ECDSA_SOME:MBEDTLS_ECP_HAVE_SECP256R1
2995*62c56f98SSadaf Ebrahimimbedtls_x509_csr_parse:"30819a3081960201003034310b3009060355040613024e4c3111300f060355040a1308506f6c617253534c31123010060355040313096c6f63616c686f73743059301306072a8648ce3d020106082a8648ce3d0301070342000437cc56d976091e5a723ec7592dff206eee7cf9069174d0ad14b5f768225962924ee500d82311ffea2fd2345d5d16bd8a88c26b770d55cd8a2a0efa01c8b4edffa00100":"":MBEDTLS_ERR_X509_INVALID_FORMAT + MBEDTLS_ERR_ASN1_OUT_OF_DATA
2996*62c56f98SSadaf Ebrahimi
2997*62c56f98SSadaf EbrahimiX509 CSR ASN.1 (bad sigAlg: missing)
2998*62c56f98SSadaf Ebrahimidepends_on:MBEDTLS_PK_CAN_ECDSA_SOME:MBEDTLS_ECP_HAVE_SECP256R1
2999*62c56f98SSadaf Ebrahimimbedtls_x509_csr_parse:"3081c23081bf0201003034310b3009060355040613024e4c3111300f060355040a1308506f6c617253534c31123010060355040313096c6f63616c686f73743059301306072a8648ce3d020106082a8648ce3d0301070342000437cc56d976091e5a723ec7592dff206eee7cf9069174d0ad14b5f768225962924ee500d82311ffea2fd2345d5d16bd8a88c26b770d55cd8a2a0efa01c8b4edffa029302706092a864886f70d01090e311a301830090603551d1304023000300b0603551d0f0404030205e0":"":MBEDTLS_ERR_X509_INVALID_ALG + MBEDTLS_ERR_ASN1_OUT_OF_DATA
3000*62c56f98SSadaf Ebrahimi
3001*62c56f98SSadaf EbrahimiX509 CSR ASN.1 (bad sigAlg: not a sequence)
3002*62c56f98SSadaf Ebrahimidepends_on:MBEDTLS_PK_CAN_ECDSA_SOME:MBEDTLS_ECP_HAVE_SECP256R1
3003*62c56f98SSadaf Ebrahimimbedtls_x509_csr_parse:"3081c43081bf0201003034310b3009060355040613024e4c3111300f060355040a1308506f6c617253534c31123010060355040313096c6f63616c686f73743059301306072a8648ce3d020106082a8648ce3d0301070342000437cc56d976091e5a723ec7592dff206eee7cf9069174d0ad14b5f768225962924ee500d82311ffea2fd2345d5d16bd8a88c26b770d55cd8a2a0efa01c8b4edffa029302706092a864886f70d01090e311a301830090603551d1304023000300b0603551d0f0404030205e03100":"":MBEDTLS_ERR_X509_INVALID_ALG + MBEDTLS_ERR_ASN1_UNEXPECTED_TAG
3004*62c56f98SSadaf Ebrahimi
3005*62c56f98SSadaf EbrahimiX509 CSR ASN.1 (bad sigAlg: overlong)
3006*62c56f98SSadaf Ebrahimidepends_on:MBEDTLS_PK_CAN_ECDSA_SOME:MBEDTLS_ECP_HAVE_SECP256R1
3007*62c56f98SSadaf Ebrahimimbedtls_x509_csr_parse:"3081c43081bf0201003034310b3009060355040613024e4c3111300f060355040a1308506f6c617253534c31123010060355040313096c6f63616c686f73743059301306072a8648ce3d020106082a8648ce3d0301070342000437cc56d976091e5a723ec7592dff206eee7cf9069174d0ad14b5f768225962924ee500d82311ffea2fd2345d5d16bd8a88c26b770d55cd8a2a0efa01c8b4edffa029302706092a864886f70d01090e311a301830090603551d1304023000300b0603551d0f0404030205e03001":"":MBEDTLS_ERR_X509_INVALID_ALG + MBEDTLS_ERR_ASN1_OUT_OF_DATA
3008*62c56f98SSadaf Ebrahimi
3009*62c56f98SSadaf EbrahimiX509 CSR ASN.1 (bad sigAlg: unknown)
3010*62c56f98SSadaf Ebrahimidepends_on:MBEDTLS_PK_CAN_ECDSA_SOME:MBEDTLS_ECP_HAVE_SECP256R1
3011*62c56f98SSadaf Ebrahimimbedtls_x509_csr_parse:"3081cd3081bf0201003034310b3009060355040613024e4c3111300f060355040a1308506f6c617253534c31123010060355040313096c6f63616c686f73743059301306072a8648ce3d020106082a8648ce3d0301070342000437cc56d976091e5a723ec7592dff206eee7cf9069174d0ad14b5f768225962924ee500d82311ffea2fd2345d5d16bd8a88c26b770d55cd8a2a0efa01c8b4edffa029302706092a864886f70d01090e311a301830090603551d1304023000300b0603551d0f0404030205e0300906072a8648ce3d04ff":"":MBEDTLS_ERR_X509_UNKNOWN_SIG_ALG
3012*62c56f98SSadaf Ebrahimi
3013*62c56f98SSadaf EbrahimiX509 CSR ASN.1 (bad sig: missing)
3014*62c56f98SSadaf Ebrahimidepends_on:MBEDTLS_PK_CAN_ECDSA_SOME:MBEDTLS_ECP_HAVE_SECP256R1:MBEDTLS_MD_CAN_SHA1
3015*62c56f98SSadaf Ebrahimimbedtls_x509_csr_parse:"3081cd3081bf0201003034310b3009060355040613024e4c3111300f060355040a1308506f6c617253534c31123010060355040313096c6f63616c686f73743059301306072a8648ce3d020106082a8648ce3d0301070342000437cc56d976091e5a723ec7592dff206eee7cf9069174d0ad14b5f768225962924ee500d82311ffea2fd2345d5d16bd8a88c26b770d55cd8a2a0efa01c8b4edffa029302706092a864886f70d01090e311a301830090603551d1304023000300b0603551d0f0404030205e0300906072a8648ce3d0401":"":MBEDTLS_ERR_X509_INVALID_SIGNATURE + MBEDTLS_ERR_ASN1_OUT_OF_DATA
3016*62c56f98SSadaf Ebrahimi
3017*62c56f98SSadaf EbrahimiX509 CSR ASN.1 (bad sig: not a bit string)
3018*62c56f98SSadaf Ebrahimidepends_on:MBEDTLS_PK_CAN_ECDSA_SOME:MBEDTLS_ECP_HAVE_SECP256R1:MBEDTLS_MD_CAN_SHA1
3019*62c56f98SSadaf Ebrahimimbedtls_x509_csr_parse:"3081cf3081bf0201003034310b3009060355040613024e4c3111300f060355040a1308506f6c617253534c31123010060355040313096c6f63616c686f73743059301306072a8648ce3d020106082a8648ce3d0301070342000437cc56d976091e5a723ec7592dff206eee7cf9069174d0ad14b5f768225962924ee500d82311ffea2fd2345d5d16bd8a88c26b770d55cd8a2a0efa01c8b4edffa029302706092a864886f70d01090e311a301830090603551d1304023000300b0603551d0f0404030205e0300906072a8648ce3d04010400":"":MBEDTLS_ERR_X509_INVALID_SIGNATURE + MBEDTLS_ERR_ASN1_UNEXPECTED_TAG
3020*62c56f98SSadaf Ebrahimi
3021*62c56f98SSadaf EbrahimiX509 CSR ASN.1 (bad sig: overlong)
3022*62c56f98SSadaf Ebrahimidepends_on:MBEDTLS_PK_CAN_ECDSA_SOME:MBEDTLS_ECP_HAVE_SECP256R1:MBEDTLS_MD_CAN_SHA1
3023*62c56f98SSadaf Ebrahimimbedtls_x509_csr_parse:"3081cf3081bf0201003034310b3009060355040613024e4c3111300f060355040a1308506f6c617253534c31123010060355040313096c6f63616c686f73743059301306072a8648ce3d020106082a8648ce3d0301070342000437cc56d976091e5a723ec7592dff206eee7cf9069174d0ad14b5f768225962924ee500d82311ffea2fd2345d5d16bd8a88c26b770d55cd8a2a0efa01c8b4edffa029302706092a864886f70d01090e311a301830090603551d1304023000300b0603551d0f0404030205e0300906072a8648ce3d04010301":"":MBEDTLS_ERR_X509_INVALID_SIGNATURE + MBEDTLS_ERR_ASN1_OUT_OF_DATA
3024*62c56f98SSadaf Ebrahimi
3025*62c56f98SSadaf EbrahimiX509 CSR ASN.1 (extra data after signature)
3026*62c56f98SSadaf Ebrahimidepends_on:MBEDTLS_PK_CAN_ECDSA_SOME:MBEDTLS_ECP_HAVE_SECP256R1:MBEDTLS_MD_CAN_SHA1
3027*62c56f98SSadaf Ebrahimimbedtls_x509_csr_parse:"308201193081bf0201003034310b3009060355040613024e4c3111300f060355040a1308506f6c617253534c31123010060355040313096c6f63616c686f73743059301306072a8648ce3d020106082a8648ce3d0301070342000437cc56d976091e5a723ec7592dff206eee7cf9069174d0ad14b5f768225962924ee500d82311ffea2fd2345d5d16bd8a88c26b770d55cd8a2a0efa01c8b4edffa029302706092a864886f70d01090e311a301830090603551d1304023000300b0603551d0f0404030205e0300906072a8648ce3d04010349003046022100b49fd8c8f77abfa871908dfbe684a08a793d0f490a43d86fcf2086e4f24bb0c2022100f829d5ccd3742369299e6294394717c4b723a0f68b44e831b6e6c3bcabf9724300":"":MBEDTLS_ERR_X509_INVALID_FORMAT + MBEDTLS_ERR_ASN1_LENGTH_MISMATCH
3028*62c56f98SSadaf Ebrahimi
3029*62c56f98SSadaf EbrahimiX509 CSR ASN.1 (invalid version overflow)
3030*62c56f98SSadaf Ebrahimimbedtls_x509_csr_parse:"3008300602047fffffff":"":MBEDTLS_ERR_X509_UNKNOWN_VERSION
3031*62c56f98SSadaf Ebrahimi
3032*62c56f98SSadaf Ebrahimi# Used test_csr_v3_all.csr.der as a base for malforming CSR extenstions/attributes
3033*62c56f98SSadaf Ebrahimi# Please see makefile for data_files to check malformation details (test_csr_v3_all_malformed_xxx.csr files)
3034*62c56f98SSadaf EbrahimiX509 CSR ASN.1 (attributes: invalid sequence tag)
3035*62c56f98SSadaf Ebrahimidepends_on:MBEDTLS_MD_CAN_SHA256:MBEDTLS_RSA_C
3036*62c56f98SSadaf Ebrahimimbedtls_x509_csr_parse_file:"data_files/parse_input/test_csr_v3_all_malformed_attributes_sequence_tag.csr.der":"":MBEDTLS_ERR_X509_INVALID_EXTENSIONS+MBEDTLS_ERR_ASN1_UNEXPECTED_TAG
3037*62c56f98SSadaf Ebrahimi
3038*62c56f98SSadaf EbrahimiX509 CSR ASN.1 (attributes: invalid attribute id)
3039*62c56f98SSadaf Ebrahimidepends_on:MBEDTLS_MD_CAN_SHA256:MBEDTLS_RSA_C
3040*62c56f98SSadaf Ebrahimimbedtls_x509_csr_parse_file:"data_files/parse_input/test_csr_v3_all_malformed_attributes_id_tag.csr.der":"":MBEDTLS_ERR_X509_INVALID_EXTENSIONS+MBEDTLS_ERR_ASN1_UNEXPECTED_TAG
3041*62c56f98SSadaf Ebrahimi
3042*62c56f98SSadaf EbrahimiX509 CSR ASN.1 (attributes: not extension request)
3043*62c56f98SSadaf Ebrahimidepends_on:MBEDTLS_MD_CAN_SHA256:MBEDTLS_RSA_C
3044*62c56f98SSadaf Ebrahimimbedtls_x509_csr_parse_file:"data_files/parse_input/test_csr_v3_all_malformed_attributes_extension_request.csr.der":"CSR version   \: 1\nsubject name  \: CN=etcd\nsigned using  \: RSA with SHA-256\nRSA key size  \: 1024 bits\n":0
3045*62c56f98SSadaf Ebrahimi
3046*62c56f98SSadaf EbrahimiX509 CSR ASN.1 (attributes: invalid extenstion request set tag)
3047*62c56f98SSadaf Ebrahimidepends_on:MBEDTLS_MD_CAN_SHA256:MBEDTLS_RSA_C
3048*62c56f98SSadaf Ebrahimimbedtls_x509_csr_parse_file:"data_files/parse_input/test_csr_v3_all_malformed_attributes_extension_request_set_tag.csr.der":"":MBEDTLS_ERR_X509_INVALID_EXTENSIONS+MBEDTLS_ERR_ASN1_UNEXPECTED_TAG
3049*62c56f98SSadaf Ebrahimi
3050*62c56f98SSadaf EbrahimiX509 CSR ASN.1 (attributes: invalid extenstion request sequence tag)
3051*62c56f98SSadaf Ebrahimidepends_on:MBEDTLS_MD_CAN_SHA256:MBEDTLS_RSA_C
3052*62c56f98SSadaf Ebrahimimbedtls_x509_csr_parse_file:"data_files/parse_input/test_csr_v3_all_malformed_attributes_extension_request_sequence_tag.csr.der":"":MBEDTLS_ERR_X509_INVALID_EXTENSIONS+MBEDTLS_ERR_ASN1_UNEXPECTED_TAG
3053*62c56f98SSadaf Ebrahimi
3054*62c56f98SSadaf EbrahimiX509 CSR ASN.1 (attributes: invalid len (len > data))
3055*62c56f98SSadaf Ebrahimidepends_on:MBEDTLS_MD_CAN_SHA256:MBEDTLS_RSA_C
3056*62c56f98SSadaf Ebrahimimbedtls_x509_csr_parse_file:"data_files/parse_input/test_csr_v3_all_malformed_attributes_len1.csr.der":"":MBEDTLS_ERR_X509_INVALID_EXTENSIONS+MBEDTLS_ERR_ASN1_OUT_OF_DATA
3057*62c56f98SSadaf Ebrahimi
3058*62c56f98SSadaf EbrahimiX509 CSR ASN.1 (attributes: invalid len (len < data))
3059*62c56f98SSadaf Ebrahimidepends_on:MBEDTLS_MD_CAN_SHA256:MBEDTLS_RSA_C
3060*62c56f98SSadaf Ebrahimimbedtls_x509_csr_parse_file:"data_files/parse_input/test_csr_v3_all_malformed_attributes_len2.csr.der":"":MBEDTLS_ERR_X509_INVALID_EXTENSIONS+MBEDTLS_ERR_ASN1_LENGTH_MISMATCH
3061*62c56f98SSadaf Ebrahimi
3062*62c56f98SSadaf EbrahimiX509 CSR ASN.1 (attributes: extension request invalid len (len > data))
3063*62c56f98SSadaf Ebrahimidepends_on:MBEDTLS_MD_CAN_SHA256:MBEDTLS_RSA_C
3064*62c56f98SSadaf Ebrahimimbedtls_x509_csr_parse_file:"data_files/parse_input/test_csr_v3_all_malformed_attributes_extension_request_sequence_len1.csr.der":"":MBEDTLS_ERR_X509_INVALID_EXTENSIONS+MBEDTLS_ERR_ASN1_OUT_OF_DATA
3065*62c56f98SSadaf Ebrahimi
3066*62c56f98SSadaf EbrahimiX509 CSR ASN.1 (attributes: extension request invalid len (len < data))
3067*62c56f98SSadaf Ebrahimidepends_on:MBEDTLS_MD_CAN_SHA256:MBEDTLS_RSA_C
3068*62c56f98SSadaf Ebrahimimbedtls_x509_csr_parse_file:"data_files/parse_input/test_csr_v3_all_malformed_attributes_extension_request_sequence_len2.csr.der":"":MBEDTLS_ERR_X509_INVALID_EXTENSIONS+MBEDTLS_ERR_ASN1_OUT_OF_DATA
3069*62c56f98SSadaf Ebrahimi
3070*62c56f98SSadaf EbrahimiX509 CSR ASN.1 (extensions: invalid sequence tag)
3071*62c56f98SSadaf Ebrahimidepends_on:MBEDTLS_MD_CAN_SHA256:MBEDTLS_RSA_C
3072*62c56f98SSadaf Ebrahimimbedtls_x509_csr_parse_file:"data_files/parse_input/test_csr_v3_all_malformed_extensions_sequence_tag.csr.der":"":MBEDTLS_ERR_X509_INVALID_EXTENSIONS+MBEDTLS_ERR_ASN1_UNEXPECTED_TAG
3073*62c56f98SSadaf Ebrahimi
3074*62c56f98SSadaf EbrahimiX509 CSR ASN.1 (extensions: invalid extension id tag)
3075*62c56f98SSadaf Ebrahimidepends_on:MBEDTLS_MD_CAN_SHA256:MBEDTLS_RSA_C
3076*62c56f98SSadaf Ebrahimimbedtls_x509_csr_parse_file:"data_files/parse_input/test_csr_v3_all_malformed_extension_id_tag.csr.der":"":MBEDTLS_ERR_X509_INVALID_EXTENSIONS+MBEDTLS_ERR_ASN1_UNEXPECTED_TAG
3077*62c56f98SSadaf Ebrahimi
3078*62c56f98SSadaf EbrahimiX509 CSR ASN.1 (extensions: invalid extension data tag)
3079*62c56f98SSadaf Ebrahimidepends_on:MBEDTLS_MD_CAN_SHA256:MBEDTLS_RSA_C
3080*62c56f98SSadaf Ebrahimimbedtls_x509_csr_parse_file:"data_files/parse_input/test_csr_v3_all_malformed_extension_data_tag.csr.der":"":MBEDTLS_ERR_X509_INVALID_EXTENSIONS+MBEDTLS_ERR_ASN1_UNEXPECTED_TAG
3081*62c56f98SSadaf Ebrahimi
3082*62c56f98SSadaf EbrahimiX509 CSR ASN.1 (extensions: invalid extension data len (len > data))
3083*62c56f98SSadaf Ebrahimidepends_on:MBEDTLS_MD_CAN_SHA256:MBEDTLS_RSA_C
3084*62c56f98SSadaf Ebrahimimbedtls_x509_csr_parse_file:"data_files/parse_input/test_csr_v3_all_malformed_extension_data_len1.csr.der":"":MBEDTLS_ERR_X509_INVALID_EXTENSIONS+MBEDTLS_ERR_ASN1_OUT_OF_DATA
3085*62c56f98SSadaf Ebrahimi
3086*62c56f98SSadaf EbrahimiX509 CSR ASN.1 (extensions: invalid extension data len (len < data))
3087*62c56f98SSadaf Ebrahimidepends_on:MBEDTLS_MD_CAN_SHA256:MBEDTLS_RSA_C
3088*62c56f98SSadaf Ebrahimimbedtls_x509_csr_parse_file:"data_files/parse_input/test_csr_v3_all_malformed_extension_data_len2.csr.der":"":MBEDTLS_ERR_X509_INVALID_EXTENSIONS+MBEDTLS_ERR_ASN1_LENGTH_MISMATCH
3089*62c56f98SSadaf Ebrahimi
3090*62c56f98SSadaf EbrahimiX509 CSR ASN.1 (extensions: invalid extension key usage bitstream tag)
3091*62c56f98SSadaf Ebrahimidepends_on:MBEDTLS_MD_CAN_SHA256:MBEDTLS_RSA_C
3092*62c56f98SSadaf Ebrahimimbedtls_x509_csr_parse_file:"data_files/parse_input/test_csr_v3_all_malformed_extension_key_usage_bitstream_tag.csr.der":"":MBEDTLS_ERR_X509_INVALID_EXTENSIONS+MBEDTLS_ERR_ASN1_UNEXPECTED_TAG
3093*62c56f98SSadaf Ebrahimi
3094*62c56f98SSadaf EbrahimiX509 CSR ASN.1 (extensions: invalid extension subject alt name sequence tag)
3095*62c56f98SSadaf Ebrahimidepends_on:MBEDTLS_MD_CAN_SHA256:MBEDTLS_RSA_C
3096*62c56f98SSadaf Ebrahimimbedtls_x509_csr_parse_file:"data_files/parse_input/test_csr_v3_all_malformed_extension_subject_alt_name_sequence_tag.csr.der":"":MBEDTLS_ERR_X509_INVALID_EXTENSIONS+MBEDTLS_ERR_ASN1_UNEXPECTED_TAG
3097*62c56f98SSadaf Ebrahimi
3098*62c56f98SSadaf EbrahimiX509 CSR ASN.1 (extensions: invalid extension ns cert bitstream tag)
3099*62c56f98SSadaf Ebrahimidepends_on:MBEDTLS_MD_CAN_SHA256:MBEDTLS_RSA_C
3100*62c56f98SSadaf Ebrahimimbedtls_x509_csr_parse_file:"data_files/parse_input/test_csr_v3_all_malformed_extension_ns_cert_bitstream_tag.csr.der":"":MBEDTLS_ERR_X509_INVALID_EXTENSIONS+MBEDTLS_ERR_ASN1_UNEXPECTED_TAG
3101*62c56f98SSadaf Ebrahimi
3102*62c56f98SSadaf EbrahimiX509 CSR ASN.1 (extensions: duplicated extension)
3103*62c56f98SSadaf Ebrahimidepends_on:MBEDTLS_MD_CAN_SHA256:MBEDTLS_RSA_C
3104*62c56f98SSadaf Ebrahimimbedtls_x509_csr_parse_file:"data_files/parse_input/test_csr_v3_all_malformed_duplicated_extension.csr.der":"":MBEDTLS_ERR_X509_INVALID_EXTENSIONS+MBEDTLS_ERR_ASN1_INVALID_DATA
3105*62c56f98SSadaf Ebrahimi
3106*62c56f98SSadaf EbrahimiX509 CSR ASN.1 (extensions: invalid extension type data)
3107*62c56f98SSadaf Ebrahimidepends_on:MBEDTLS_MD_CAN_SHA256:MBEDTLS_RSA_C
3108*62c56f98SSadaf Ebrahimimbedtls_x509_csr_parse_file:"data_files/parse_input/test_csr_v3_all_malformed_extension_type_oid.csr.der":"CSR version   \: 1\nsubject name  \: CN=etcd\nsigned using  \: RSA with SHA-256\nRSA key size  \: 1024 bits\n\ncert. type        \: SSL Client\nkey usage         \: CRL Sign\n":0
3109*62c56f98SSadaf Ebrahimi
3110*62c56f98SSadaf EbrahimiX509 File parse (no issues)
3111*62c56f98SSadaf Ebrahimidepends_on:MBEDTLS_PK_CAN_ECDSA_SOME:MBEDTLS_ECP_HAVE_SECP256R1:MBEDTLS_MD_CAN_SHA256:MBEDTLS_RSA_C
3112*62c56f98SSadaf Ebrahimimbedtls_x509_crt_parse_file:"data_files/parse_input/server7_int-ca.crt":0:2
3113*62c56f98SSadaf Ebrahimi
3114*62c56f98SSadaf EbrahimiX509 File parse (extra space in one certificate)
3115*62c56f98SSadaf Ebrahimidepends_on:MBEDTLS_PK_CAN_ECDSA_SOME:MBEDTLS_MD_CAN_SHA256:MBEDTLS_RSA_C
3116*62c56f98SSadaf Ebrahimimbedtls_x509_crt_parse_file:"data_files/parse_input/server7_pem_space.crt":1:1
3117*62c56f98SSadaf Ebrahimi
3118*62c56f98SSadaf EbrahimiX509 File parse (all certificates fail)
3119*62c56f98SSadaf Ebrahimidepends_on:MBEDTLS_PK_CAN_ECDSA_SOME:MBEDTLS_RSA_C
3120*62c56f98SSadaf Ebrahimimbedtls_x509_crt_parse_file:"data_files/parse_input/server7_all_space.crt":MBEDTLS_ERR_PEM_INVALID_DATA + MBEDTLS_ERR_BASE64_INVALID_CHARACTER:0
3121*62c56f98SSadaf Ebrahimi
3122*62c56f98SSadaf EbrahimiX509 File parse (trailing spaces, OK)
3123*62c56f98SSadaf Ebrahimidepends_on:MBEDTLS_PK_CAN_ECDSA_SOME:MBEDTLS_ECP_HAVE_SECP256R1:MBEDTLS_MD_CAN_SHA256:MBEDTLS_RSA_C
3124*62c56f98SSadaf Ebrahimimbedtls_x509_crt_parse_file:"data_files/parse_input/server7_trailing_space.crt":0:2
3125*62c56f98SSadaf Ebrahimi
3126*62c56f98SSadaf EbrahimiX509 File parse (Algorithm Params Tag mismatch)
3127*62c56f98SSadaf Ebrahimidepends_on:MBEDTLS_MD_CAN_SHA256:MBEDTLS_RSA_C
3128*62c56f98SSadaf Ebrahimimbedtls_x509_crt_parse_file:"data_files/parse_input/cli-rsa-sha256-badalg.crt.der":MBEDTLS_ERR_X509_SIG_MISMATCH:0
3129*62c56f98SSadaf Ebrahimi
3130*62c56f98SSadaf EbrahimiX509 File parse (does not conform to RFC 5480 / RFC 5758 - AlgorithmIdentifier's parameters field is present, mbedTLS generated before bugfix, OK)
3131*62c56f98SSadaf Ebrahimidepends_on:MBEDTLS_PK_CAN_ECDSA_SOME:MBEDTLS_ECP_HAVE_SECP256R1:MBEDTLS_MD_CAN_SHA256
3132*62c56f98SSadaf Ebrahimix509parse_crt_file:"data_files/parse_input/server5-non-compliant.crt":0
3133*62c56f98SSadaf Ebrahimi
3134*62c56f98SSadaf EbrahimiX509 File parse (conforms to RFC 5480 / RFC 5758 - AlgorithmIdentifier's parameters field must be absent for ECDSA)
3135*62c56f98SSadaf Ebrahimidepends_on:MBEDTLS_PK_CAN_ECDSA_SOME:MBEDTLS_ECP_HAVE_SECP256R1:MBEDTLS_MD_CAN_SHA256
3136*62c56f98SSadaf Ebrahimix509parse_crt_file:"data_files/parse_input/server5.crt":0
3137*62c56f98SSadaf Ebrahimi
3138*62c56f98SSadaf EbrahimiX509 Get time (UTC no issues)
3139*62c56f98SSadaf Ebrahimidepends_on:MBEDTLS_X509_USE_C
3140*62c56f98SSadaf Ebrahimix509_get_time:MBEDTLS_ASN1_UTC_TIME:"500101000000Z":0:1950:1:1:0:0:0
3141*62c56f98SSadaf Ebrahimi
3142*62c56f98SSadaf EbrahimiX509 Get time (Generalized Time no issues)
3143*62c56f98SSadaf Ebrahimidepends_on:MBEDTLS_X509_USE_C
3144*62c56f98SSadaf Ebrahimix509_get_time:MBEDTLS_ASN1_GENERALIZED_TIME:"99991231235959Z":0:9999:12:31:23:59:59
3145*62c56f98SSadaf Ebrahimi
3146*62c56f98SSadaf EbrahimiX509 Get time (UTC year without leap day)
3147*62c56f98SSadaf Ebrahimidepends_on:MBEDTLS_X509_USE_C
3148*62c56f98SSadaf Ebrahimix509_get_time:MBEDTLS_ASN1_UTC_TIME:"490229121212Z":MBEDTLS_ERR_X509_INVALID_DATE:0:0:0:0:0:0
3149*62c56f98SSadaf Ebrahimi
3150*62c56f98SSadaf EbrahimiX509 Get time (UTC year with leap day)
3151*62c56f98SSadaf Ebrahimidepends_on:MBEDTLS_X509_USE_C
3152*62c56f98SSadaf Ebrahimix509_get_time:MBEDTLS_ASN1_UTC_TIME:"000229121212Z":0:2000:2:29:12:12:12
3153*62c56f98SSadaf Ebrahimi
3154*62c56f98SSadaf EbrahimiX509 Get time (UTC invalid day of month #1)
3155*62c56f98SSadaf Ebrahimidepends_on:MBEDTLS_X509_USE_C
3156*62c56f98SSadaf Ebrahimix509_get_time:MBEDTLS_ASN1_UTC_TIME:"000132121212Z":MBEDTLS_ERR_X509_INVALID_DATE:0:0:0:0:0:0
3157*62c56f98SSadaf Ebrahimi
3158*62c56f98SSadaf EbrahimiX509 Get time (UTC invalid day of month #2)
3159*62c56f98SSadaf Ebrahimidepends_on:MBEDTLS_X509_USE_C
3160*62c56f98SSadaf Ebrahimix509_get_time:MBEDTLS_ASN1_UTC_TIME:"001131121212Z":MBEDTLS_ERR_X509_INVALID_DATE:0:0:0:0:0:0
3161*62c56f98SSadaf Ebrahimi
3162*62c56f98SSadaf EbrahimiX509 Get time (UTC invalid hour)
3163*62c56f98SSadaf Ebrahimidepends_on:MBEDTLS_X509_USE_C
3164*62c56f98SSadaf Ebrahimix509_get_time:MBEDTLS_ASN1_UTC_TIME:"001130241212Z":MBEDTLS_ERR_X509_INVALID_DATE:0:0:0:0:0:0
3165*62c56f98SSadaf Ebrahimi
3166*62c56f98SSadaf EbrahimiX509 Get time (UTC invalid min)
3167*62c56f98SSadaf Ebrahimidepends_on:MBEDTLS_X509_USE_C
3168*62c56f98SSadaf Ebrahimix509_get_time:MBEDTLS_ASN1_UTC_TIME:"001130236012Z":MBEDTLS_ERR_X509_INVALID_DATE:0:0:0:0:0:0
3169*62c56f98SSadaf Ebrahimi
3170*62c56f98SSadaf EbrahimiX509 Get time (UTC invalid sec)
3171*62c56f98SSadaf Ebrahimidepends_on:MBEDTLS_X509_USE_C
3172*62c56f98SSadaf Ebrahimix509_get_time:MBEDTLS_ASN1_UTC_TIME:"001130235960Z":MBEDTLS_ERR_X509_INVALID_DATE:0:0:0:0:0:0
3173*62c56f98SSadaf Ebrahimi
3174*62c56f98SSadaf EbrahimiX509 Get time (UTC without time zone)
3175*62c56f98SSadaf Ebrahimidepends_on:MBEDTLS_X509_USE_C
3176*62c56f98SSadaf Ebrahimix509_get_time:MBEDTLS_ASN1_UTC_TIME:"000229121212":0:2000:2:29:12:12:12
3177*62c56f98SSadaf Ebrahimi
3178*62c56f98SSadaf EbrahimiX509 Get time (UTC with invalid time zone #1)
3179*62c56f98SSadaf Ebrahimidepends_on:MBEDTLS_X509_USE_C
3180*62c56f98SSadaf Ebrahimix509_get_time:MBEDTLS_ASN1_UTC_TIME:"000229121212J":MBEDTLS_ERR_X509_INVALID_DATE:0:0:0:0:0:0
3181*62c56f98SSadaf Ebrahimi
3182*62c56f98SSadaf EbrahimiX509 Get time (UTC with invalid time zone #2)
3183*62c56f98SSadaf Ebrahimidepends_on:MBEDTLS_X509_USE_C
3184*62c56f98SSadaf Ebrahimix509_get_time:MBEDTLS_ASN1_UTC_TIME:"000229121212+0300":MBEDTLS_ERR_X509_INVALID_DATE:0:0:0:0:0:0
3185*62c56f98SSadaf Ebrahimi
3186*62c56f98SSadaf EbrahimiX509 Get time (Date with invalid tag)
3187*62c56f98SSadaf Ebrahimidepends_on:MBEDTLS_X509_USE_C
3188*62c56f98SSadaf Ebrahimix509_get_time:MBEDTLS_ASN1_CONTEXT_SPECIFIC:"000229121212":MBEDTLS_ERR_X509_INVALID_DATE+MBEDTLS_ERR_ASN1_UNEXPECTED_TAG:0:0:0:0:0:0
3189*62c56f98SSadaf Ebrahimi
3190*62c56f98SSadaf EbrahimiX509 Get time (UTC, truncated)
3191*62c56f98SSadaf Ebrahimidepends_on:MBEDTLS_X509_USE_C
3192*62c56f98SSadaf Ebrahimix509_get_time:MBEDTLS_ASN1_UTC_TIME:"000229121":MBEDTLS_ERR_X509_INVALID_DATE:0:0:0:0:0:0
3193*62c56f98SSadaf Ebrahimi
3194*62c56f98SSadaf EbrahimiX509 Get time (Generalized Time, truncated)
3195*62c56f98SSadaf Ebrahimidepends_on:MBEDTLS_X509_USE_C
3196*62c56f98SSadaf Ebrahimix509_get_time:MBEDTLS_ASN1_GENERALIZED_TIME:"20000229121":MBEDTLS_ERR_X509_INVALID_DATE:0:0:0:0:0:0
3197*62c56f98SSadaf Ebrahimi
3198*62c56f98SSadaf EbrahimiX509 Get time (UTC without seconds)
3199*62c56f98SSadaf Ebrahimidepends_on:MBEDTLS_X509_USE_C
3200*62c56f98SSadaf Ebrahimix509_get_time:MBEDTLS_ASN1_UTC_TIME:"0002291212":MBEDTLS_ERR_X509_INVALID_DATE:2000:2:29:12:12:0
3201*62c56f98SSadaf Ebrahimi
3202*62c56f98SSadaf EbrahimiX509 Get time (UTC without seconds and with invalid time zone #1)
3203*62c56f98SSadaf Ebrahimidepends_on:MBEDTLS_X509_USE_C
3204*62c56f98SSadaf Ebrahimix509_get_time:MBEDTLS_ASN1_UTC_TIME:"0002291212J":MBEDTLS_ERR_X509_INVALID_DATE:0:0:0:0:0:0
3205*62c56f98SSadaf Ebrahimi
3206*62c56f98SSadaf EbrahimiX509 Get time (UTC without second and with invalid time zone #2)
3207*62c56f98SSadaf Ebrahimidepends_on:MBEDTLS_X509_USE_C
3208*62c56f98SSadaf Ebrahimix509_get_time:MBEDTLS_ASN1_UTC_TIME:"0002291212+0300":MBEDTLS_ERR_X509_INVALID_DATE:0:0:0:0:0:0
3209*62c56f98SSadaf Ebrahimi
3210*62c56f98SSadaf EbrahimiX509 Get time (UTC invalid character in year)
3211*62c56f98SSadaf Ebrahimidepends_on:MBEDTLS_X509_USE_C
3212*62c56f98SSadaf Ebrahimix509_get_time:MBEDTLS_ASN1_UTC_TIME:"0\\1130231212Z":MBEDTLS_ERR_X509_INVALID_DATE:0:0:0:0:0:0
3213*62c56f98SSadaf Ebrahimi
3214*62c56f98SSadaf EbrahimiX509 Get time (UTC invalid character in month)
3215*62c56f98SSadaf Ebrahimidepends_on:MBEDTLS_X509_USE_C
3216*62c56f98SSadaf Ebrahimix509_get_time:MBEDTLS_ASN1_UTC_TIME:"001%30231212Z":MBEDTLS_ERR_X509_INVALID_DATE:0:0:0:0:0:0
3217*62c56f98SSadaf Ebrahimi
3218*62c56f98SSadaf EbrahimiX509 Get time (UTC invalid character in day)
3219*62c56f98SSadaf Ebrahimidepends_on:MBEDTLS_X509_USE_C
3220*62c56f98SSadaf Ebrahimix509_get_time:MBEDTLS_ASN1_UTC_TIME:"0011`0231212Z":MBEDTLS_ERR_X509_INVALID_DATE:0:0:0:0:0:0
3221*62c56f98SSadaf Ebrahimi
3222*62c56f98SSadaf EbrahimiX509 Get time (UTC invalid character in hour)
3223*62c56f98SSadaf Ebrahimidepends_on:MBEDTLS_X509_USE_C
3224*62c56f98SSadaf Ebrahimix509_get_time:MBEDTLS_ASN1_UTC_TIME:"0011302h1212Z":MBEDTLS_ERR_X509_INVALID_DATE:0:0:0:0:0:0
3225*62c56f98SSadaf Ebrahimi
3226*62c56f98SSadaf EbrahimiX509 Get time (UTC invalid character in min)
3227*62c56f98SSadaf Ebrahimidepends_on:MBEDTLS_X509_USE_C
3228*62c56f98SSadaf Ebrahimix509_get_time:MBEDTLS_ASN1_UTC_TIME:"00113023u012Z":MBEDTLS_ERR_X509_INVALID_DATE:0:0:0:0:0:0
3229*62c56f98SSadaf Ebrahimi
3230*62c56f98SSadaf EbrahimiX509 Get time (UTC invalid character in sec)
3231*62c56f98SSadaf Ebrahimidepends_on:MBEDTLS_X509_USE_C
3232*62c56f98SSadaf Ebrahimix509_get_time:MBEDTLS_ASN1_UTC_TIME:"0011302359n0Z":MBEDTLS_ERR_X509_INVALID_DATE:0:0:0:0:0:0
3233*62c56f98SSadaf Ebrahimi
3234*62c56f98SSadaf EbrahimiX509 Get time (Generalized Time, year multiple of 100 but not 400 is not a leap year)
3235*62c56f98SSadaf Ebrahimidepends_on:MBEDTLS_X509_USE_C
3236*62c56f98SSadaf Ebrahimix509_get_time:MBEDTLS_ASN1_GENERALIZED_TIME:"19000229000000Z":MBEDTLS_ERR_X509_INVALID_DATE:0:0:0:0:0:0
3237*62c56f98SSadaf Ebrahimi
3238*62c56f98SSadaf EbrahimiX509 Get time (Generalized Time, year multiple of 4 but not 100 is a leap year)
3239*62c56f98SSadaf Ebrahimidepends_on:MBEDTLS_X509_USE_C
3240*62c56f98SSadaf Ebrahimix509_get_time:MBEDTLS_ASN1_GENERALIZED_TIME:"19920229000000Z":0:1992:2:29:0:0:0
3241*62c56f98SSadaf Ebrahimi
3242*62c56f98SSadaf EbrahimiX509 Get time (Generalized Time, year multiple of 400 is a leap year)
3243*62c56f98SSadaf Ebrahimidepends_on:MBEDTLS_X509_USE_C
3244*62c56f98SSadaf Ebrahimix509_get_time:MBEDTLS_ASN1_GENERALIZED_TIME:"20000229000000Z":0:2000:2:29:0:0:0
3245*62c56f98SSadaf Ebrahimi
3246*62c56f98SSadaf EbrahimiX509 Get time (Generalized Time invalid leap year not multiple of 4, 100 or 400)
3247*62c56f98SSadaf Ebrahimidepends_on:MBEDTLS_X509_USE_C
3248*62c56f98SSadaf Ebrahimix509_get_time:MBEDTLS_ASN1_GENERALIZED_TIME:"19910229000000Z":MBEDTLS_ERR_X509_INVALID_DATE:0:0:0:0:0:0
3249*62c56f98SSadaf Ebrahimi
3250*62c56f98SSadaf EbrahimiX509 CRT verify restart: trusted EE, max_ops=0 (disabled)
3251*62c56f98SSadaf Ebrahimidepends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_MD_CAN_SHA256:MBEDTLS_ECP_HAVE_SECP256R1
3252*62c56f98SSadaf Ebrahimix509_verify_restart:"data_files/server5-selfsigned.crt":"data_files/server5-selfsigned.crt":0:0:0:0:0
3253*62c56f98SSadaf Ebrahimi
3254*62c56f98SSadaf EbrahimiX509 CRT verify restart: trusted EE, max_ops=1
3255*62c56f98SSadaf Ebrahimidepends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_MD_CAN_SHA256:MBEDTLS_ECP_HAVE_SECP256R1
3256*62c56f98SSadaf Ebrahimix509_verify_restart:"data_files/server5-selfsigned.crt":"data_files/server5-selfsigned.crt":0:0:1:0:0
3257*62c56f98SSadaf Ebrahimi
3258*62c56f98SSadaf EbrahimiX509 CRT verify restart: no intermediate, max_ops=0 (disabled)
3259*62c56f98SSadaf Ebrahimidepends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_MD_CAN_SHA256:MBEDTLS_ECP_HAVE_SECP256R1:MBEDTLS_ECP_HAVE_SECP384R1
3260*62c56f98SSadaf Ebrahimix509_verify_restart:"data_files/server5.crt":"data_files/test-ca2.crt":0:0:0:0:0
3261*62c56f98SSadaf Ebrahimi
3262*62c56f98SSadaf EbrahimiX509 CRT verify restart: no intermediate, max_ops=1
3263*62c56f98SSadaf Ebrahimidepends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_MD_CAN_SHA256:MBEDTLS_ECP_HAVE_SECP256R1:MBEDTLS_ECP_HAVE_SECP384R1
3264*62c56f98SSadaf Ebrahimix509_verify_restart:"data_files/server5.crt":"data_files/test-ca2.crt":0:0:1:100:10000
3265*62c56f98SSadaf Ebrahimi
3266*62c56f98SSadaf EbrahimiX509 CRT verify restart: no intermediate, max_ops=40000
3267*62c56f98SSadaf Ebrahimidepends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_MD_CAN_SHA256:MBEDTLS_ECP_HAVE_SECP256R1:MBEDTLS_ECP_HAVE_SECP384R1
3268*62c56f98SSadaf Ebrahimix509_verify_restart:"data_files/server5.crt":"data_files/test-ca2.crt":0:0:40000:0:0
3269*62c56f98SSadaf Ebrahimi
3270*62c56f98SSadaf EbrahimiX509 CRT verify restart: no intermediate, max_ops=500
3271*62c56f98SSadaf Ebrahimidepends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_MD_CAN_SHA256:MBEDTLS_ECP_HAVE_SECP256R1:MBEDTLS_ECP_HAVE_SECP384R1
3272*62c56f98SSadaf Ebrahimix509_verify_restart:"data_files/server5.crt":"data_files/test-ca2.crt":0:0:500:20:80
3273*62c56f98SSadaf Ebrahimi
3274*62c56f98SSadaf EbrahimiX509 CRT verify restart: no intermediate, badsign, max_ops=0 (disabled)
3275*62c56f98SSadaf Ebrahimidepends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_MD_CAN_SHA256:MBEDTLS_ECP_HAVE_SECP256R1:MBEDTLS_ECP_HAVE_SECP384R1
3276*62c56f98SSadaf Ebrahimix509_verify_restart:"data_files/server5-badsign.crt":"data_files/test-ca2.crt":MBEDTLS_ERR_X509_CERT_VERIFY_FAILED:MBEDTLS_X509_BADCERT_NOT_TRUSTED:0:0:0
3277*62c56f98SSadaf Ebrahimi
3278*62c56f98SSadaf EbrahimiX509 CRT verify restart: no intermediate, badsign, max_ops=1
3279*62c56f98SSadaf Ebrahimidepends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_MD_CAN_SHA256:MBEDTLS_ECP_HAVE_SECP256R1:MBEDTLS_ECP_HAVE_SECP384R1
3280*62c56f98SSadaf Ebrahimix509_verify_restart:"data_files/server5-badsign.crt":"data_files/test-ca2.crt":MBEDTLS_ERR_X509_CERT_VERIFY_FAILED:MBEDTLS_X509_BADCERT_NOT_TRUSTED:1:100:10000
3281*62c56f98SSadaf Ebrahimi
3282*62c56f98SSadaf EbrahimiX509 CRT verify restart: no intermediate, badsign, max_ops=40000
3283*62c56f98SSadaf Ebrahimidepends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_MD_CAN_SHA256:MBEDTLS_ECP_HAVE_SECP256R1:MBEDTLS_ECP_HAVE_SECP384R1
3284*62c56f98SSadaf Ebrahimix509_verify_restart:"data_files/server5-badsign.crt":"data_files/test-ca2.crt":MBEDTLS_ERR_X509_CERT_VERIFY_FAILED:MBEDTLS_X509_BADCERT_NOT_TRUSTED:40000:0:0
3285*62c56f98SSadaf Ebrahimi
3286*62c56f98SSadaf EbrahimiX509 CRT verify restart: no intermediate, badsign, max_ops=500
3287*62c56f98SSadaf Ebrahimidepends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_MD_CAN_SHA256:MBEDTLS_ECP_HAVE_SECP256R1:MBEDTLS_ECP_HAVE_SECP384R1
3288*62c56f98SSadaf Ebrahimix509_verify_restart:"data_files/server5-badsign.crt":"data_files/test-ca2.crt":MBEDTLS_ERR_X509_CERT_VERIFY_FAILED:MBEDTLS_X509_BADCERT_NOT_TRUSTED:500:20:80
3289*62c56f98SSadaf Ebrahimi
3290*62c56f98SSadaf EbrahimiX509 CRT verify restart: one int, max_ops=0 (disabled)
3291*62c56f98SSadaf Ebrahimidepends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_MD_CAN_SHA256:MBEDTLS_ECP_HAVE_SECP256R1:MBEDTLS_ECP_HAVE_SECP384R1:MBEDTLS_RSA_C
3292*62c56f98SSadaf Ebrahimix509_verify_restart:"data_files/server10_int3_int-ca2.crt":"data_files/test-int-ca2.crt":0:0:0:0:0
3293*62c56f98SSadaf Ebrahimi
3294*62c56f98SSadaf EbrahimiX509 CRT verify restart: one int, max_ops=1
3295*62c56f98SSadaf Ebrahimidepends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_MD_CAN_SHA256:MBEDTLS_ECP_HAVE_SECP256R1:MBEDTLS_ECP_HAVE_SECP384R1:MBEDTLS_RSA_C
3296*62c56f98SSadaf Ebrahimix509_verify_restart:"data_files/server10_int3_int-ca2.crt":"data_files/test-int-ca2.crt":0:0:1:100:10000
3297*62c56f98SSadaf Ebrahimi
3298*62c56f98SSadaf EbrahimiX509 CRT verify restart: one int, max_ops=30000
3299*62c56f98SSadaf Ebrahimidepends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_MD_CAN_SHA256:MBEDTLS_ECP_HAVE_SECP256R1:MBEDTLS_ECP_HAVE_SECP384R1:MBEDTLS_RSA_C
3300*62c56f98SSadaf Ebrahimix509_verify_restart:"data_files/server10_int3_int-ca2.crt":"data_files/test-int-ca2.crt":0:0:30000:0:0
3301*62c56f98SSadaf Ebrahimi
3302*62c56f98SSadaf EbrahimiX509 CRT verify restart: one int, max_ops=500
3303*62c56f98SSadaf Ebrahimidepends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_MD_CAN_SHA256:MBEDTLS_ECP_HAVE_SECP256R1:MBEDTLS_ECP_HAVE_SECP384R1:MBEDTLS_RSA_C
3304*62c56f98SSadaf Ebrahimix509_verify_restart:"data_files/server10_int3_int-ca2.crt":"data_files/test-int-ca2.crt":0:0:500:25:100
3305*62c56f98SSadaf Ebrahimi
3306*62c56f98SSadaf EbrahimiX509 CRT verify restart: one int, EE badsign, max_ops=0 (disabled)
3307*62c56f98SSadaf Ebrahimidepends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_MD_CAN_SHA256:MBEDTLS_ECP_HAVE_SECP256R1:MBEDTLS_ECP_HAVE_SECP384R1:MBEDTLS_RSA_C
3308*62c56f98SSadaf Ebrahimix509_verify_restart:"data_files/server10-bs_int3.pem":"data_files/test-int-ca2.crt":MBEDTLS_ERR_X509_CERT_VERIFY_FAILED:MBEDTLS_X509_BADCERT_NOT_TRUSTED:0:0:0
3309*62c56f98SSadaf Ebrahimi
3310*62c56f98SSadaf EbrahimiX509 CRT verify restart: one int, EE badsign, max_ops=1
3311*62c56f98SSadaf Ebrahimidepends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_MD_CAN_SHA256:MBEDTLS_ECP_HAVE_SECP256R1:MBEDTLS_ECP_HAVE_SECP384R1:MBEDTLS_RSA_C
3312*62c56f98SSadaf Ebrahimix509_verify_restart:"data_files/server10-bs_int3.pem":"data_files/test-int-ca2.crt":MBEDTLS_ERR_X509_CERT_VERIFY_FAILED:MBEDTLS_X509_BADCERT_NOT_TRUSTED:1:100:10000
3313*62c56f98SSadaf Ebrahimi
3314*62c56f98SSadaf EbrahimiX509 CRT verify restart: one int, EE badsign, max_ops=30000
3315*62c56f98SSadaf Ebrahimidepends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_MD_CAN_SHA256:MBEDTLS_ECP_HAVE_SECP256R1:MBEDTLS_ECP_HAVE_SECP384R1:MBEDTLS_RSA_C
3316*62c56f98SSadaf Ebrahimix509_verify_restart:"data_files/server10-bs_int3.pem":"data_files/test-int-ca2.crt":MBEDTLS_ERR_X509_CERT_VERIFY_FAILED:MBEDTLS_X509_BADCERT_NOT_TRUSTED:30000:0:0
3317*62c56f98SSadaf Ebrahimi
3318*62c56f98SSadaf EbrahimiX509 CRT verify restart: one int, EE badsign, max_ops=500
3319*62c56f98SSadaf Ebrahimidepends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_MD_CAN_SHA256:MBEDTLS_ECP_HAVE_SECP256R1:MBEDTLS_ECP_HAVE_SECP384R1:MBEDTLS_RSA_C
3320*62c56f98SSadaf Ebrahimix509_verify_restart:"data_files/server10-bs_int3.pem":"data_files/test-int-ca2.crt":MBEDTLS_ERR_X509_CERT_VERIFY_FAILED:MBEDTLS_X509_BADCERT_NOT_TRUSTED:500:25:100
3321*62c56f98SSadaf Ebrahimi
3322*62c56f98SSadaf EbrahimiX509 CRT verify restart: one int, int badsign, max_ops=0 (disabled)
3323*62c56f98SSadaf Ebrahimidepends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_MD_CAN_SHA256:MBEDTLS_ECP_HAVE_SECP256R1:MBEDTLS_ECP_HAVE_SECP384R1:MBEDTLS_RSA_C
3324*62c56f98SSadaf Ebrahimix509_verify_restart:"data_files/server10_int3-bs.pem":"data_files/test-int-ca2.crt":MBEDTLS_ERR_X509_CERT_VERIFY_FAILED:MBEDTLS_X509_BADCERT_NOT_TRUSTED:0:0:0
3325*62c56f98SSadaf Ebrahimi
3326*62c56f98SSadaf EbrahimiX509 CRT verify restart: one int, int badsign, max_ops=1
3327*62c56f98SSadaf Ebrahimidepends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_MD_CAN_SHA256:MBEDTLS_ECP_HAVE_SECP256R1:MBEDTLS_ECP_HAVE_SECP384R1:MBEDTLS_RSA_C
3328*62c56f98SSadaf Ebrahimix509_verify_restart:"data_files/server10_int3-bs.pem":"data_files/test-int-ca2.crt":MBEDTLS_ERR_X509_CERT_VERIFY_FAILED:MBEDTLS_X509_BADCERT_NOT_TRUSTED:1:100:10000
3329*62c56f98SSadaf Ebrahimi
3330*62c56f98SSadaf EbrahimiX509 CRT verify restart: one int, int badsign, max_ops=30000
3331*62c56f98SSadaf Ebrahimidepends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_MD_CAN_SHA256:MBEDTLS_ECP_HAVE_SECP256R1:MBEDTLS_ECP_HAVE_SECP384R1:MBEDTLS_RSA_C
3332*62c56f98SSadaf Ebrahimix509_verify_restart:"data_files/server10_int3-bs.pem":"data_files/test-int-ca2.crt":MBEDTLS_ERR_X509_CERT_VERIFY_FAILED:MBEDTLS_X509_BADCERT_NOT_TRUSTED:30000:0:0
3333*62c56f98SSadaf Ebrahimi
3334*62c56f98SSadaf EbrahimiX509 CRT verify restart: one int, int badsign, max_ops=500
3335*62c56f98SSadaf Ebrahimidepends_on:MBEDTLS_PEM_PARSE_C:MBEDTLS_MD_CAN_SHA256:MBEDTLS_ECP_HAVE_SECP256R1:MBEDTLS_ECP_HAVE_SECP384R1:MBEDTLS_RSA_C
3336*62c56f98SSadaf Ebrahimix509_verify_restart:"data_files/server10_int3-bs.pem":"data_files/test-int-ca2.crt":MBEDTLS_ERR_X509_CERT_VERIFY_FAILED:MBEDTLS_X509_BADCERT_NOT_TRUSTED:500:25:100
3337*62c56f98SSadaf Ebrahimi
3338*62c56f98SSadaf EbrahimiX509 ext types accessor: ext type present
3339*62c56f98SSadaf Ebrahimidepends_on:MBEDTLS_X509_CRT_PARSE_C
3340*62c56f98SSadaf Ebrahimix509_accessor_ext_types:MBEDTLS_X509_EXT_KEY_USAGE:MBEDTLS_X509_EXT_KEY_USAGE
3341*62c56f98SSadaf Ebrahimi
3342*62c56f98SSadaf EbrahimiX509 ext types accessor: ext type not present
3343*62c56f98SSadaf Ebrahimidepends_on:MBEDTLS_X509_CRT_PARSE_C
3344*62c56f98SSadaf Ebrahimix509_accessor_ext_types:MBEDTLS_X509_EXT_KEY_USAGE:MBEDTLS_X509_EXT_SUBJECT_ALT_NAME
3345*62c56f98SSadaf Ebrahimi
3346*62c56f98SSadaf EbrahimiX509 CRT parse Subject Key Id - Correct Subject Key ID
3347*62c56f98SSadaf Ebrahimidepends_on:MBEDTLS_MD_CAN_SHA256:MBEDTLS_RSA_C
3348*62c56f98SSadaf Ebrahimix509_crt_parse_subjectkeyid:"data_files/authorityKeyId_subjectKeyId.crt.der":"A505E864B8DCDF600F50124D60A864AF4D8B4393":0
3349*62c56f98SSadaf Ebrahimi
3350*62c56f98SSadaf EbrahimiX509 CRT parse Subject Key Id - Wrong OCTET_STRING tag
3351*62c56f98SSadaf Ebrahimidepends_on:MBEDTLS_MD_CAN_SHA256:MBEDTLS_RSA_C
3352*62c56f98SSadaf Ebrahimix509_crt_parse_subjectkeyid:"data_files/authorityKeyId_subjectKeyId_tag_malformed.crt.der":"":MBEDTLS_ERR_X509_INVALID_EXTENSIONS+MBEDTLS_ERR_ASN1_UNEXPECTED_TAG
3353*62c56f98SSadaf Ebrahimi
3354*62c56f98SSadaf EbrahimiX509 CRT parse Subject Key Id - Wrong OCTET_STRING length
3355*62c56f98SSadaf Ebrahimidepends_on:MBEDTLS_MD_CAN_SHA256:MBEDTLS_RSA_C
3356*62c56f98SSadaf Ebrahimix509_crt_parse_subjectkeyid:"data_files/authorityKeyId_subjectKeyId_tag_len_malformed.crt.der":"":MBEDTLS_ERR_X509_INVALID_EXTENSIONS+MBEDTLS_ERR_ASN1_LENGTH_MISMATCH
3357*62c56f98SSadaf Ebrahimi
3358*62c56f98SSadaf EbrahimiX509 CRT parse Authority Key Id - Correct Authority Key ID
3359*62c56f98SSadaf Ebrahimidepends_on:MBEDTLS_MD_CAN_SHA256:MBEDTLS_RSA_C
3360*62c56f98SSadaf Ebrahimix509_crt_parse_authoritykeyid:"data_files/authorityKeyId_subjectKeyId.crt.der":"A505E864B8DCDF600F50124D60A864AF4D8B4393":"C=NL, OU=PolarSSL, CN=PolarSSL Test CA":"680430CD074DE63FCDC051260FD042C2B512B6BA":0
3361*62c56f98SSadaf Ebrahimi
3362*62c56f98SSadaf EbrahimiX509 CRT parse Authority Key Id - Correct Authority Key ID (no keyid)
3363*62c56f98SSadaf Ebrahimidepends_on:MBEDTLS_MD_CAN_SHA256:MBEDTLS_RSA_C
3364*62c56f98SSadaf Ebrahimix509_crt_parse_authoritykeyid:"data_files/authorityKeyId_no_keyid.crt.der":"":"C=NL, OU=PolarSSL, CN=PolarSSL Test CA":"680430CD074DE63FCDC051260FD042C2B512B6BA":0
3365*62c56f98SSadaf Ebrahimi
3366*62c56f98SSadaf EbrahimiX509 CRT parse Authority Key Id - Correct Authority Key ID (no issuer)
3367*62c56f98SSadaf Ebrahimidepends_on:MBEDTLS_MD_CAN_SHA256:MBEDTLS_RSA_C
3368*62c56f98SSadaf Ebrahimix509_crt_parse_authoritykeyid:"data_files/authorityKeyId_no_issuer.crt.der":"A505E864B8DCDF600F50124D60A864AF4D8B4393":"":"":0
3369*62c56f98SSadaf Ebrahimi
3370*62c56f98SSadaf EbrahimiX509 CRT parse Authority Key Id - no Authority Key ID
3371*62c56f98SSadaf Ebrahimidepends_on:MBEDTLS_MD_CAN_SHA256:MBEDTLS_RSA_C
3372*62c56f98SSadaf Ebrahimix509_crt_parse_authoritykeyid:"data_files/authorityKeyId_no_authorityKeyId.crt.der":"":"":"":0
3373*62c56f98SSadaf Ebrahimi
3374*62c56f98SSadaf EbrahimiX509 CRT parse Authority Key Id - Wrong Length
3375*62c56f98SSadaf Ebrahimidepends_on:MBEDTLS_MD_CAN_SHA256:MBEDTLS_RSA_C
3376*62c56f98SSadaf Ebrahimix509_crt_parse_authoritykeyid:"data_files/authorityKeyId_subjectKeyId_length_malformed.crt.der":"":"":"":MBEDTLS_ERR_X509_INVALID_EXTENSIONS+MBEDTLS_ERR_ASN1_LENGTH_MISMATCH
3377*62c56f98SSadaf Ebrahimi
3378*62c56f98SSadaf EbrahimiX509 CRT parse Authority Key Id - Wrong Sequence tag
3379*62c56f98SSadaf Ebrahimidepends_on:MBEDTLS_MD_CAN_SHA256:MBEDTLS_RSA_C
3380*62c56f98SSadaf Ebrahimix509_crt_parse_authoritykeyid:"data_files/authorityKeyId_subjectKeyId_sequence_tag_malformed.crt.der":"":"":"":MBEDTLS_ERR_X509_INVALID_EXTENSIONS+MBEDTLS_ERR_ASN1_UNEXPECTED_TAG
3381*62c56f98SSadaf Ebrahimi
3382*62c56f98SSadaf EbrahimiX509 CRT parse Authority Key Id - Wrong KeyId Tag
3383*62c56f98SSadaf Ebrahimidepends_on:MBEDTLS_MD_CAN_SHA256:MBEDTLS_RSA_C
3384*62c56f98SSadaf Ebrahimix509_crt_parse_authoritykeyid:"data_files/authorityKeyId_subjectKeyId_keyid_tag_malformed.crt.der":"":"":"":MBEDTLS_ERR_X509_INVALID_EXTENSIONS+MBEDTLS_ERR_ASN1_UNEXPECTED_TAG
3385*62c56f98SSadaf Ebrahimi
3386*62c56f98SSadaf EbrahimiX509 CRT parse Authority Key Id - Wrong KeyId Tag Length
3387*62c56f98SSadaf Ebrahimidepends_on:MBEDTLS_MD_CAN_SHA256:MBEDTLS_RSA_C
3388*62c56f98SSadaf Ebrahimix509_crt_parse_authoritykeyid:"data_files/authorityKeyId_subjectKeyId_keyid_tag_len_malformed.crt.der":"":"":"":MBEDTLS_ERR_X509_INVALID_EXTENSIONS+MBEDTLS_ERR_ASN1_INVALID_LENGTH
3389*62c56f98SSadaf Ebrahimi
3390*62c56f98SSadaf EbrahimiX509 CRT parse Authority Key Id - Wrong Issuer Tag
3391*62c56f98SSadaf Ebrahimidepends_on:MBEDTLS_MD_CAN_SHA256:MBEDTLS_RSA_C
3392*62c56f98SSadaf Ebrahimix509_crt_parse_authoritykeyid:"data_files/authorityKeyId_subjectKeyId_issuer_tag1_malformed.crt.der":"":"":"":MBEDTLS_ERR_X509_INVALID_EXTENSIONS+MBEDTLS_ERR_ASN1_UNEXPECTED_TAG
3393*62c56f98SSadaf Ebrahimi
3394*62c56f98SSadaf EbrahimiX509 CRT parse Authority Key Id - Wrong DirectoryName tag in issuer field
3395*62c56f98SSadaf Ebrahimidepends_on:MBEDTLS_MD_CAN_SHA256:MBEDTLS_RSA_C
3396*62c56f98SSadaf Ebrahimix509_crt_parse_authoritykeyid:"data_files/authorityKeyId_subjectKeyId_issuer_tag2_malformed.crt.der":"":"":"":MBEDTLS_ERR_X509_INVALID_EXTENSIONS+MBEDTLS_ERR_ASN1_UNEXPECTED_TAG
3397*62c56f98SSadaf Ebrahimi
3398*62c56f98SSadaf EbrahimiX509 CRT parse Authority Key Id - Wrong Serial Number Tag
3399*62c56f98SSadaf Ebrahimidepends_on:MBEDTLS_MD_CAN_SHA256:MBEDTLS_RSA_C
3400*62c56f98SSadaf Ebrahimix509_crt_parse_authoritykeyid:"data_files/authorityKeyId_subjectKeyId_sn_tag_malformed.crt.der":"":"":"":MBEDTLS_ERR_X509_INVALID_EXTENSIONS+MBEDTLS_ERR_ASN1_UNEXPECTED_TAG
3401*62c56f98SSadaf Ebrahimi
3402*62c56f98SSadaf EbrahimiX509 CRT parse Authority Key Id - Wrong Serial Number Tag length
3403*62c56f98SSadaf Ebrahimidepends_on:MBEDTLS_MD_CAN_SHA256:MBEDTLS_RSA_C
3404*62c56f98SSadaf Ebrahimix509_crt_parse_authoritykeyid:"data_files/authorityKeyId_subjectKeyId_sn_len_malformed.crt.der":"":"":"":MBEDTLS_ERR_X509_INVALID_EXTENSIONS+MBEDTLS_ERR_ASN1_LENGTH_MISMATCH
3405*62c56f98SSadaf Ebrahimi
3406*62c56f98SSadaf Ebrahimi# clusterfuzz-testcase-minimized-fuzz_x509crt-6666050834661376: test for bad sequence of names in authorityCertIssuer (see issue #7576)
3407*62c56f98SSadaf EbrahimiX509 CRT parse Authority Key Id - Wrong Issuer sequence
3408*62c56f98SSadaf Ebrahimidepends_on:MBEDTLS_MD_CAN_MD5:MBEDTLS_RSA_C
3409*62c56f98SSadaf Ebrahimix509_crt_parse_authoritykeyid:"data_files/clusterfuzz-testcase-minimized-fuzz_x509crt-6666050834661376.crt.der":"":"":"":MBEDTLS_ERR_X509_INVALID_EXTENSIONS+MBEDTLS_ERR_ASN1_OUT_OF_DATA
3410