1*62c56f98SSadaf EbrahimiCertificate Request check Server1 SHA1 2*62c56f98SSadaf Ebrahimidepends_on:MBEDTLS_MD_CAN_SHA1:MBEDTLS_RSA_C:MBEDTLS_PKCS1_V15 3*62c56f98SSadaf Ebrahimix509_csr_check:"data_files/server1.key":"data_files/server1.req.sha1":MBEDTLS_MD_SHA1:0:0:0:0:0 4*62c56f98SSadaf Ebrahimi 5*62c56f98SSadaf EbrahimiCertificate Request check Server1 SHA224 6*62c56f98SSadaf Ebrahimidepends_on:MBEDTLS_MD_CAN_SHA224:MBEDTLS_RSA_C:MBEDTLS_PKCS1_V15 7*62c56f98SSadaf Ebrahimix509_csr_check:"data_files/server1.key":"data_files/server1.req.sha224":MBEDTLS_MD_SHA224:0:0:0:0:0 8*62c56f98SSadaf Ebrahimi 9*62c56f98SSadaf EbrahimiCertificate Request check Server1 SHA256 10*62c56f98SSadaf Ebrahimidepends_on:MBEDTLS_MD_CAN_SHA256:MBEDTLS_RSA_C:MBEDTLS_PKCS1_V15 11*62c56f98SSadaf Ebrahimix509_csr_check:"data_files/server1.key":"data_files/server1.req.sha256":MBEDTLS_MD_SHA256:0:0:0:0:0 12*62c56f98SSadaf Ebrahimi 13*62c56f98SSadaf EbrahimiCertificate Request check Server1 SHA384 14*62c56f98SSadaf Ebrahimidepends_on:MBEDTLS_MD_CAN_SHA384:MBEDTLS_RSA_C:MBEDTLS_PKCS1_V15 15*62c56f98SSadaf Ebrahimix509_csr_check:"data_files/server1.key":"data_files/server1.req.sha384":MBEDTLS_MD_SHA384:0:0:0:0:0 16*62c56f98SSadaf Ebrahimi 17*62c56f98SSadaf EbrahimiCertificate Request check Server1 SHA512 18*62c56f98SSadaf Ebrahimidepends_on:MBEDTLS_MD_CAN_SHA512:MBEDTLS_RSA_C:MBEDTLS_PKCS1_V15 19*62c56f98SSadaf Ebrahimix509_csr_check:"data_files/server1.key":"data_files/server1.req.sha512":MBEDTLS_MD_SHA512:0:0:0:0:0 20*62c56f98SSadaf Ebrahimi 21*62c56f98SSadaf EbrahimiCertificate Request check Server1 MD5 22*62c56f98SSadaf Ebrahimidepends_on:MBEDTLS_MD_CAN_MD5:MBEDTLS_RSA_C:MBEDTLS_PKCS1_V15 23*62c56f98SSadaf Ebrahimix509_csr_check:"data_files/server1.key":"data_files/server1.req.md5":MBEDTLS_MD_MD5:0:0:0:0:0 24*62c56f98SSadaf Ebrahimi 25*62c56f98SSadaf EbrahimiCertificate Request check Server1 key_usage 26*62c56f98SSadaf Ebrahimidepends_on:MBEDTLS_MD_CAN_SHA1:MBEDTLS_RSA_C:MBEDTLS_PKCS1_V15 27*62c56f98SSadaf Ebrahimix509_csr_check:"data_files/server1.key":"data_files/server1.req.key_usage":MBEDTLS_MD_SHA1:MBEDTLS_X509_KU_DIGITAL_SIGNATURE | MBEDTLS_X509_KU_NON_REPUDIATION | MBEDTLS_X509_KU_KEY_ENCIPHERMENT:1:0:0:0 28*62c56f98SSadaf Ebrahimi 29*62c56f98SSadaf EbrahimiCertificate Request check opaque Server1 key_usage 30*62c56f98SSadaf Ebrahimidepends_on:MBEDTLS_MD_CAN_SHA1:MBEDTLS_RSA_C:MBEDTLS_PKCS1_V15 31*62c56f98SSadaf Ebrahimix509_csr_check_opaque:"data_files/server1.key":MBEDTLS_MD_SHA1:MBEDTLS_X509_KU_DIGITAL_SIGNATURE | MBEDTLS_X509_KU_NON_REPUDIATION:0 32*62c56f98SSadaf Ebrahimi 33*62c56f98SSadaf EbrahimiCertificate Request check Server1 key_usage empty 34*62c56f98SSadaf Ebrahimidepends_on:MBEDTLS_MD_CAN_SHA1:MBEDTLS_RSA_C:MBEDTLS_PKCS1_V15 35*62c56f98SSadaf Ebrahimix509_csr_check:"data_files/server1.key":"data_files/server1.req.key_usage_empty":MBEDTLS_MD_SHA1:0:1:0:0:0 36*62c56f98SSadaf Ebrahimi 37*62c56f98SSadaf EbrahimiCertificate Request check Server1 ns_cert_type 38*62c56f98SSadaf Ebrahimidepends_on:MBEDTLS_MD_CAN_SHA1:MBEDTLS_RSA_C:MBEDTLS_PKCS1_V15 39*62c56f98SSadaf Ebrahimix509_csr_check:"data_files/server1.key":"data_files/server1.req.cert_type":MBEDTLS_MD_SHA1:0:0:MBEDTLS_X509_NS_CERT_TYPE_SSL_SERVER:1:0 40*62c56f98SSadaf Ebrahimi 41*62c56f98SSadaf EbrahimiCertificate Request check Server1 ns_cert_type empty 42*62c56f98SSadaf Ebrahimidepends_on:MBEDTLS_MD_CAN_SHA1:MBEDTLS_RSA_C:MBEDTLS_PKCS1_V15 43*62c56f98SSadaf Ebrahimix509_csr_check:"data_files/server1.key":"data_files/server1.req.cert_type_empty":MBEDTLS_MD_SHA1:0:0:0:1:0 44*62c56f98SSadaf Ebrahimi 45*62c56f98SSadaf EbrahimiCertificate Request check Server1 key_usage + ns_cert_type 46*62c56f98SSadaf Ebrahimidepends_on:MBEDTLS_MD_CAN_SHA1:MBEDTLS_RSA_C:MBEDTLS_PKCS1_V15 47*62c56f98SSadaf Ebrahimix509_csr_check:"data_files/server1.key":"data_files/server1.req.ku-ct":MBEDTLS_MD_SHA1:MBEDTLS_X509_KU_DIGITAL_SIGNATURE | MBEDTLS_X509_KU_NON_REPUDIATION | MBEDTLS_X509_KU_KEY_ENCIPHERMENT:1:MBEDTLS_X509_NS_CERT_TYPE_SSL_SERVER:1:0 48*62c56f98SSadaf Ebrahimi 49*62c56f98SSadaf EbrahimiCertificate Request check Server5 ECDSA, key_usage 50*62c56f98SSadaf Ebrahimidepends_on:MBEDTLS_MD_CAN_SHA1:MBEDTLS_PK_CAN_ECDSA_SIGN:MBEDTLS_ECDSA_DETERMINISTIC:MBEDTLS_ECP_HAVE_SECP256R1 51*62c56f98SSadaf Ebrahimix509_csr_check:"data_files/server5.key":"data_files/server5.req.ku.sha1":MBEDTLS_MD_SHA1:MBEDTLS_X509_KU_DIGITAL_SIGNATURE | MBEDTLS_X509_KU_NON_REPUDIATION:1:0:0:0 52*62c56f98SSadaf Ebrahimi 53*62c56f98SSadaf EbrahimiCertificate Request check Server1, set_extension 54*62c56f98SSadaf Ebrahimidepends_on:MBEDTLS_MD_CAN_SHA256:MBEDTLS_RSA_C:MBEDTLS_PKCS1_V15 55*62c56f98SSadaf Ebrahimix509_csr_check:"data_files/server1.key":"data_files/server1.req.sha256.ext":MBEDTLS_MD_SHA256:0:0:0:0:1 56*62c56f98SSadaf Ebrahimi 57*62c56f98SSadaf EbrahimiCertificate Request check opaque Server5 ECDSA, key_usage 58*62c56f98SSadaf Ebrahimidepends_on:MBEDTLS_MD_CAN_SHA256:MBEDTLS_PK_CAN_ECDSA_SIGN:MBEDTLS_ECP_HAVE_SECP256R1 59*62c56f98SSadaf Ebrahimix509_csr_check_opaque:"data_files/server5.key":MBEDTLS_MD_SHA256:MBEDTLS_X509_KU_DIGITAL_SIGNATURE | MBEDTLS_X509_KU_NON_REPUDIATION:0 60*62c56f98SSadaf Ebrahimi 61*62c56f98SSadaf EbrahimiCertificate write check Server1 SHA1 62*62c56f98SSadaf Ebrahimidepends_on:MBEDTLS_RSA_C:MBEDTLS_PKCS1_V15:MBEDTLS_AES_C:MBEDTLS_CIPHER_MODE_CBC:MBEDTLS_MD_CAN_MD5 63*62c56f98SSadaf Ebrahimix509_crt_check:"data_files/server1.key":"":"C=NL,O=PolarSSL,CN=PolarSSL Server 1":"data_files/test-ca.key":"PolarSSLTest":"C=NL,O=PolarSSL,CN=PolarSSL Test CA":"01":"20190210144406":"20290210144406":MBEDTLS_MD_SHA1:0:0:"NULL":0:0:1:-1:"data_files/server1.crt":0:0:"data_files/test-ca.crt":0 64*62c56f98SSadaf Ebrahimi 65*62c56f98SSadaf EbrahimiCertificate write check Server1 SHA1, not before 1970 66*62c56f98SSadaf Ebrahimidepends_on:MBEDTLS_RSA_C:MBEDTLS_PKCS1_V15:MBEDTLS_AES_C:MBEDTLS_CIPHER_MODE_CBC:MBEDTLS_MD_CAN_MD5 67*62c56f98SSadaf Ebrahimix509_crt_check:"data_files/server1.key":"":"C=NL,O=PolarSSL,CN=PolarSSL Server 1":"data_files/test-ca.key":"PolarSSLTest":"C=NL,O=PolarSSL,CN=PolarSSL Test CA":"01":"19700210144406":"20290210144406":MBEDTLS_MD_SHA1:0:0:"NULL":0:0:1:-1:"":0:0:"data_files/test-ca.crt":0 68*62c56f98SSadaf Ebrahimi 69*62c56f98SSadaf EbrahimiCertificate write check Server1 SHA1, not after 2050 70*62c56f98SSadaf Ebrahimidepends_on:MBEDTLS_RSA_C:MBEDTLS_PKCS1_V15:MBEDTLS_AES_C:MBEDTLS_CIPHER_MODE_CBC:MBEDTLS_MD_CAN_MD5 71*62c56f98SSadaf Ebrahimix509_crt_check:"data_files/server1.key":"":"C=NL,O=PolarSSL,CN=PolarSSL Server 1":"data_files/test-ca.key":"PolarSSLTest":"C=NL,O=PolarSSL,CN=PolarSSL Test CA":"01":"20190210144406":"20500210144406":MBEDTLS_MD_SHA1:0:0:"NULL":0:0:1:-1:"":0:0:"data_files/test-ca.crt":0 72*62c56f98SSadaf Ebrahimi 73*62c56f98SSadaf EbrahimiCertificate write check Server1 SHA1, not before 1970, not after 2050 74*62c56f98SSadaf Ebrahimidepends_on:MBEDTLS_RSA_C:MBEDTLS_PKCS1_V15:MBEDTLS_AES_C:MBEDTLS_CIPHER_MODE_CBC:MBEDTLS_MD_CAN_MD5 75*62c56f98SSadaf Ebrahimix509_crt_check:"data_files/server1.key":"":"C=NL,O=PolarSSL,CN=PolarSSL Server 1":"data_files/test-ca.key":"PolarSSLTest":"C=NL,O=PolarSSL,CN=PolarSSL Test CA":"01":"19700210144406":"20500210144406":MBEDTLS_MD_SHA1:0:0:"NULL":0:0:1:-1:"":0:0:"data_files/test-ca.crt":0 76*62c56f98SSadaf Ebrahimi 77*62c56f98SSadaf EbrahimiCertificate write check Server1 SHA1, not before 2050, not after 2059 78*62c56f98SSadaf Ebrahimidepends_on:MBEDTLS_RSA_C:MBEDTLS_PKCS1_V15:MBEDTLS_AES_C:MBEDTLS_CIPHER_MODE_CBC:MBEDTLS_MD_CAN_MD5 79*62c56f98SSadaf Ebrahimix509_crt_check:"data_files/server1.key":"":"C=NL,O=PolarSSL,CN=PolarSSL Server 1":"data_files/test-ca.key":"PolarSSLTest":"C=NL,O=PolarSSL,CN=PolarSSL Test CA":"01":"20500210144406":"20590210144406":MBEDTLS_MD_SHA1:0:0:"NULL":0:0:1:-1:"":0:0:"data_files/test-ca.crt":0 80*62c56f98SSadaf Ebrahimi 81*62c56f98SSadaf EbrahimiCertificate write check Server1 SHA1, key_usage 82*62c56f98SSadaf Ebrahimidepends_on:MBEDTLS_RSA_C:MBEDTLS_PKCS1_V15:MBEDTLS_AES_C:MBEDTLS_CIPHER_MODE_CBC:MBEDTLS_MD_CAN_MD5 83*62c56f98SSadaf Ebrahimix509_crt_check:"data_files/server1.key":"":"C=NL,O=PolarSSL,CN=PolarSSL Server 1":"data_files/test-ca.key":"PolarSSLTest":"C=NL,O=PolarSSL,CN=PolarSSL Test CA":"01":"20190210144406":"20290210144406":MBEDTLS_MD_SHA1:MBEDTLS_X509_KU_DIGITAL_SIGNATURE | MBEDTLS_X509_KU_NON_REPUDIATION | MBEDTLS_X509_KU_KEY_ENCIPHERMENT:1:"NULL":0:0:1:-1:"data_files/server1.key_usage.crt":0:0:"data_files/test-ca.crt":0 84*62c56f98SSadaf Ebrahimi 85*62c56f98SSadaf EbrahimiCertificate write check Server1 SHA1, one ext_key_usage 86*62c56f98SSadaf Ebrahimidepends_on:MBEDTLS_RSA_C:MBEDTLS_PKCS1_V15:MBEDTLS_AES_C:MBEDTLS_CIPHER_MODE_CBC:MBEDTLS_MD_CAN_MD5 87*62c56f98SSadaf Ebrahimix509_crt_check:"data_files/server1.key":"":"C=NL,O=PolarSSL,CN=PolarSSL Server 1":"data_files/test-ca.key":"PolarSSLTest":"C=NL,O=PolarSSL,CN=PolarSSL Test CA":"01":"20110212144406":"20210212144406":MBEDTLS_MD_SHA1:0:0:"serverAuth":0:0:1:-1:"data_files/server1.key_ext_usage.crt":0:0:"data_files/test-ca.crt":0 88*62c56f98SSadaf Ebrahimi 89*62c56f98SSadaf EbrahimiCertificate write check Server1 SHA1, two ext_key_usages 90*62c56f98SSadaf Ebrahimidepends_on:MBEDTLS_RSA_C:MBEDTLS_PKCS1_V15:MBEDTLS_AES_C:MBEDTLS_CIPHER_MODE_CBC:MBEDTLS_MD_CAN_MD5 91*62c56f98SSadaf Ebrahimix509_crt_check:"data_files/server1.key":"":"C=NL,O=PolarSSL,CN=PolarSSL Server 1":"data_files/test-ca.key":"PolarSSLTest":"C=NL,O=PolarSSL,CN=PolarSSL Test CA":"01":"20110212144406":"20210212144406":MBEDTLS_MD_SHA1:0:0:"codeSigning,timeStamping":0:0:1:-1:"data_files/server1.key_ext_usages.crt":0:0:"data_files/test-ca.crt":0 92*62c56f98SSadaf Ebrahimi 93*62c56f98SSadaf EbrahimiCertificate write check Server1 SHA1, ns_cert_type 94*62c56f98SSadaf Ebrahimidepends_on:MBEDTLS_RSA_C:MBEDTLS_PKCS1_V15:MBEDTLS_AES_C:MBEDTLS_CIPHER_MODE_CBC:MBEDTLS_MD_CAN_MD5 95*62c56f98SSadaf Ebrahimix509_crt_check:"data_files/server1.key":"":"C=NL,O=PolarSSL,CN=PolarSSL Server 1":"data_files/test-ca.key":"PolarSSLTest":"C=NL,O=PolarSSL,CN=PolarSSL Test CA":"01":"20190210144406":"20290210144406":MBEDTLS_MD_SHA1:0:0:"NULL":MBEDTLS_X509_NS_CERT_TYPE_SSL_SERVER:1:1:-1:"data_files/server1.cert_type.crt":0:0:"data_files/test-ca.crt":0 96*62c56f98SSadaf Ebrahimi 97*62c56f98SSadaf EbrahimiCertificate write check Server1 SHA1, version 1 98*62c56f98SSadaf Ebrahimidepends_on:MBEDTLS_RSA_C:MBEDTLS_PKCS1_V15:MBEDTLS_AES_C:MBEDTLS_CIPHER_MODE_CBC:MBEDTLS_MD_CAN_MD5 99*62c56f98SSadaf Ebrahimix509_crt_check:"data_files/server1.key":"":"C=NL,O=PolarSSL,CN=PolarSSL Server 1":"data_files/test-ca.key":"PolarSSLTest":"C=NL,O=PolarSSL,CN=PolarSSL Test CA":"01":"20190210144406":"20290210144406":MBEDTLS_MD_SHA1:0:0:"NULL":0:0:1:MBEDTLS_X509_CRT_VERSION_1:"data_files/server1.v1.crt":0:0:"data_files/test-ca.crt":0 100*62c56f98SSadaf Ebrahimi 101*62c56f98SSadaf EbrahimiCertificate write check Server1 SHA1, CA 102*62c56f98SSadaf Ebrahimidepends_on:MBEDTLS_RSA_C:MBEDTLS_PKCS1_V15:MBEDTLS_AES_C:MBEDTLS_CIPHER_MODE_CBC:MBEDTLS_MD_CAN_MD5 103*62c56f98SSadaf Ebrahimix509_crt_check:"data_files/server1.key":"":"C=NL,O=PolarSSL,CN=PolarSSL Server 1":"data_files/test-ca.key":"PolarSSLTest":"C=NL,O=PolarSSL,CN=PolarSSL Test CA":"01":"20190210144406":"20290210144406":MBEDTLS_MD_SHA1:0:0:"NULL":0:0:1:-1:"data_files/server1.ca.crt":0:1:"data_files/test-ca.crt":0 104*62c56f98SSadaf Ebrahimi 105*62c56f98SSadaf EbrahimiCertificate write check Server1 SHA1, RSA_ALT 106*62c56f98SSadaf Ebrahimidepends_on:MBEDTLS_RSA_C:MBEDTLS_PKCS1_V15:MBEDTLS_AES_C:MBEDTLS_CIPHER_MODE_CBC:MBEDTLS_MD_CAN_MD5 107*62c56f98SSadaf Ebrahimix509_crt_check:"data_files/server1.key":"":"C=NL,O=PolarSSL,CN=PolarSSL Server 1":"data_files/test-ca.key":"PolarSSLTest":"C=NL,O=PolarSSL,CN=PolarSSL Test CA":"01":"20190210144406":"20290210144406":MBEDTLS_MD_SHA1:0:0:"NULL":0:0:0:-1:"data_files/server1.noauthid.crt":1:0:"data_files/test-ca.crt":0 108*62c56f98SSadaf Ebrahimi 109*62c56f98SSadaf EbrahimiCertificate write check Server1 SHA1, RSA_ALT, key_usage 110*62c56f98SSadaf Ebrahimidepends_on:MBEDTLS_RSA_C:MBEDTLS_PKCS1_V15:MBEDTLS_AES_C:MBEDTLS_CIPHER_MODE_CBC:MBEDTLS_MD_CAN_MD5 111*62c56f98SSadaf Ebrahimix509_crt_check:"data_files/server1.key":"":"C=NL,O=PolarSSL,CN=PolarSSL Server 1":"data_files/test-ca.key":"PolarSSLTest":"C=NL,O=PolarSSL,CN=PolarSSL Test CA":"01":"20190210144406":"20290210144406":MBEDTLS_MD_SHA1:MBEDTLS_X509_KU_DIGITAL_SIGNATURE | MBEDTLS_X509_KU_NON_REPUDIATION | MBEDTLS_X509_KU_KEY_ENCIPHERMENT:1:"NULL":0:0:0:-1:"data_files/server1.key_usage_noauthid.crt":1:0:"data_files/test-ca.crt":0 112*62c56f98SSadaf Ebrahimi 113*62c56f98SSadaf EbrahimiCertificate write check Server1 SHA1, RSA_ALT, ns_cert_type 114*62c56f98SSadaf Ebrahimidepends_on:MBEDTLS_RSA_C:MBEDTLS_PKCS1_V15:MBEDTLS_AES_C:MBEDTLS_CIPHER_MODE_CBC:MBEDTLS_MD_CAN_MD5 115*62c56f98SSadaf Ebrahimix509_crt_check:"data_files/server1.key":"":"C=NL,O=PolarSSL,CN=PolarSSL Server 1":"data_files/test-ca.key":"PolarSSLTest":"C=NL,O=PolarSSL,CN=PolarSSL Test CA":"01":"20190210144406":"20290210144406":MBEDTLS_MD_SHA1:0:0:"NULL":MBEDTLS_X509_NS_CERT_TYPE_SSL_SERVER:1:0:-1:"data_files/server1.cert_type_noauthid.crt":1:0:"data_files/test-ca.crt":0 116*62c56f98SSadaf Ebrahimi 117*62c56f98SSadaf EbrahimiCertificate write check Server1 SHA1, RSA_ALT, version 1 118*62c56f98SSadaf Ebrahimidepends_on:MBEDTLS_RSA_C:MBEDTLS_PKCS1_V15:MBEDTLS_AES_C:MBEDTLS_CIPHER_MODE_CBC:MBEDTLS_MD_CAN_MD5 119*62c56f98SSadaf Ebrahimix509_crt_check:"data_files/server1.key":"":"C=NL,O=PolarSSL,CN=PolarSSL Server 1":"data_files/test-ca.key":"PolarSSLTest":"C=NL,O=PolarSSL,CN=PolarSSL Test CA":"01":"20190210144406":"20290210144406":MBEDTLS_MD_SHA1:0:0:"NULL":0:0:0:MBEDTLS_X509_CRT_VERSION_1:"data_files/server1.v1.crt":1:0:"data_files/test-ca.crt":0 120*62c56f98SSadaf Ebrahimi 121*62c56f98SSadaf EbrahimiCertificate write check Server1 SHA1, RSA_ALT, CA 122*62c56f98SSadaf Ebrahimidepends_on:MBEDTLS_RSA_C:MBEDTLS_PKCS1_V15:MBEDTLS_AES_C:MBEDTLS_CIPHER_MODE_CBC:MBEDTLS_MD_CAN_MD5 123*62c56f98SSadaf Ebrahimix509_crt_check:"data_files/server1.key":"":"C=NL,O=PolarSSL,CN=PolarSSL Server 1":"data_files/test-ca.key":"PolarSSLTest":"C=NL,O=PolarSSL,CN=PolarSSL Test CA":"01":"20190210144406":"20290210144406":MBEDTLS_MD_SHA1:0:0:"NULL":0:0:0:-1:"data_files/server1.ca_noauthid.crt":1:1:"data_files/test-ca.crt":0 124*62c56f98SSadaf Ebrahimi 125*62c56f98SSadaf EbrahimiCertificate write check Server1 SHA1, Opaque 126*62c56f98SSadaf Ebrahimidepends_on:MBEDTLS_RSA_C:MBEDTLS_PKCS1_V15:MBEDTLS_AES_C:MBEDTLS_CIPHER_MODE_CBC:MBEDTLS_MD_CAN_MD5:MBEDTLS_USE_PSA_CRYPTO 127*62c56f98SSadaf Ebrahimix509_crt_check:"data_files/server1.key":"":"C=NL,O=PolarSSL,CN=PolarSSL Server 1":"data_files/test-ca.key":"PolarSSLTest":"C=NL,O=PolarSSL,CN=PolarSSL Test CA":"01":"20190210144406":"20290210144406":MBEDTLS_MD_SHA1:0:0:"NULL":0:0:1:-1:"data_files/server1.crt":2:0:"data_files/test-ca.crt":0 128*62c56f98SSadaf Ebrahimi 129*62c56f98SSadaf EbrahimiCertificate write check Server1 SHA1, Opaque, key_usage 130*62c56f98SSadaf Ebrahimidepends_on:MBEDTLS_RSA_C:MBEDTLS_PKCS1_V15:MBEDTLS_AES_C:MBEDTLS_CIPHER_MODE_CBC:MBEDTLS_MD_CAN_MD5:MBEDTLS_USE_PSA_CRYPTO 131*62c56f98SSadaf Ebrahimix509_crt_check:"data_files/server1.key":"":"C=NL,O=PolarSSL,CN=PolarSSL Server 1":"data_files/test-ca.key":"PolarSSLTest":"C=NL,O=PolarSSL,CN=PolarSSL Test CA":"01":"20190210144406":"20290210144406":MBEDTLS_MD_SHA1:MBEDTLS_X509_KU_DIGITAL_SIGNATURE | MBEDTLS_X509_KU_NON_REPUDIATION | MBEDTLS_X509_KU_KEY_ENCIPHERMENT:1:"NULL":0:0:1:-1:"data_files/server1.key_usage.crt":2:0:"data_files/test-ca.crt":0 132*62c56f98SSadaf Ebrahimi 133*62c56f98SSadaf EbrahimiCertificate write check Server1 SHA1, Opaque, ns_cert_type 134*62c56f98SSadaf Ebrahimidepends_on:MBEDTLS_RSA_C:MBEDTLS_PKCS1_V15:MBEDTLS_AES_C:MBEDTLS_CIPHER_MODE_CBC:MBEDTLS_MD_CAN_MD5:MBEDTLS_USE_PSA_CRYPTO 135*62c56f98SSadaf Ebrahimix509_crt_check:"data_files/server1.key":"":"C=NL,O=PolarSSL,CN=PolarSSL Server 1":"data_files/test-ca.key":"PolarSSLTest":"C=NL,O=PolarSSL,CN=PolarSSL Test CA":"01":"20190210144406":"20290210144406":MBEDTLS_MD_SHA1:0:0:"NULL":MBEDTLS_X509_NS_CERT_TYPE_SSL_SERVER:1:1:-1:"data_files/server1.cert_type.crt":2:0:"data_files/test-ca.crt":0 136*62c56f98SSadaf Ebrahimi 137*62c56f98SSadaf EbrahimiCertificate write check Server1 SHA1, Opaque, version 1 138*62c56f98SSadaf Ebrahimidepends_on:MBEDTLS_RSA_C:MBEDTLS_PKCS1_V15:MBEDTLS_AES_C:MBEDTLS_CIPHER_MODE_CBC:MBEDTLS_MD_CAN_MD5:MBEDTLS_USE_PSA_CRYPTO 139*62c56f98SSadaf Ebrahimix509_crt_check:"data_files/server1.key":"":"C=NL,O=PolarSSL,CN=PolarSSL Server 1":"data_files/test-ca.key":"PolarSSLTest":"C=NL,O=PolarSSL,CN=PolarSSL Test CA":"01":"20190210144406":"20290210144406":MBEDTLS_MD_SHA1:0:0:"NULL":0:0:1:MBEDTLS_X509_CRT_VERSION_1:"data_files/server1.v1.crt":2:0:"data_files/test-ca.crt":0 140*62c56f98SSadaf Ebrahimi 141*62c56f98SSadaf EbrahimiCertificate write check Server1 SHA1, Opaque, CA 142*62c56f98SSadaf Ebrahimidepends_on:MBEDTLS_RSA_C:MBEDTLS_PKCS1_V15:MBEDTLS_AES_C:MBEDTLS_CIPHER_MODE_CBC:MBEDTLS_MD_CAN_MD5:MBEDTLS_USE_PSA_CRYPTO 143*62c56f98SSadaf Ebrahimix509_crt_check:"data_files/server1.key":"":"C=NL,O=PolarSSL,CN=PolarSSL Server 1":"data_files/test-ca.key":"PolarSSLTest":"C=NL,O=PolarSSL,CN=PolarSSL Test CA":"01":"20190210144406":"20290210144406":MBEDTLS_MD_SHA1:0:0:"NULL":0:0:1:-1:"data_files/server1.ca.crt":2:1:"data_files/test-ca.crt":0 144*62c56f98SSadaf Ebrahimi 145*62c56f98SSadaf EbrahimiCertificate write check Server1 SHA1, Full length serial 146*62c56f98SSadaf Ebrahimidepends_on:MBEDTLS_RSA_C:MBEDTLS_PKCS1_V15:MBEDTLS_AES_C:MBEDTLS_CIPHER_MODE_CBC:MBEDTLS_MD_CAN_MD5 147*62c56f98SSadaf Ebrahimix509_crt_check:"data_files/server1.key":"":"C=NL,O=PolarSSL,CN=PolarSSL Server 1":"data_files/test-ca.key":"PolarSSLTest":"C=NL,O=PolarSSL,CN=PolarSSL Test CA":"112233445566778899aabbccddeeff0011223344":"20190210144406":"20290210144406":MBEDTLS_MD_SHA1:0:0:"NULL":0:0:1:-1:"data_files/server1.long_serial.crt":0:0:"data_files/test-ca.crt":0 148*62c56f98SSadaf Ebrahimi 149*62c56f98SSadaf EbrahimiCertificate write check Server1 SHA1, Serial starting with 0x80 150*62c56f98SSadaf Ebrahimidepends_on:MBEDTLS_RSA_C:MBEDTLS_PKCS1_V15:MBEDTLS_AES_C:MBEDTLS_CIPHER_MODE_CBC:MBEDTLS_MD_CAN_MD5 151*62c56f98SSadaf Ebrahimix509_crt_check:"data_files/server1.key":"":"C=NL,O=PolarSSL,CN=PolarSSL Server 1":"data_files/test-ca.key":"PolarSSLTest":"C=NL,O=PolarSSL,CN=PolarSSL Test CA":"8011223344":"20190210144406":"20290210144406":MBEDTLS_MD_SHA1:0:0:"NULL":0:0:1:-1:"data_files/server1.80serial.crt":0:0:"data_files/test-ca.crt":0 152*62c56f98SSadaf Ebrahimi 153*62c56f98SSadaf EbrahimiCertificate write check Server1 SHA1, All 0xFF full length serial 154*62c56f98SSadaf Ebrahimidepends_on:MBEDTLS_RSA_C:MBEDTLS_PKCS1_V15:MBEDTLS_AES_C:MBEDTLS_CIPHER_MODE_CBC:MBEDTLS_MD_CAN_MD5 155*62c56f98SSadaf Ebrahimix509_crt_check:"data_files/server1.key":"":"C=NL,O=PolarSSL,CN=PolarSSL Server 1":"data_files/test-ca.key":"PolarSSLTest":"C=NL,O=PolarSSL,CN=PolarSSL Test CA":"ffffffffffffffffffffffffffffffff":"20190210144406":"20290210144406":MBEDTLS_MD_SHA1:0:0:"NULL":0:0:1:-1:"data_files/server1.long_serial_FF.crt":0:0:"data_files/test-ca.crt":0 156*62c56f98SSadaf Ebrahimi 157*62c56f98SSadaf EbrahimiCertificate write check Server5 ECDSA 158*62c56f98SSadaf Ebrahimidepends_on:MBEDTLS_MD_CAN_SHA256:MBEDTLS_PK_CAN_ECDSA_SIGN:MBEDTLS_ECDSA_DETERMINISTIC:MBEDTLS_ECP_HAVE_SECP384R1:MBEDTLS_ECP_HAVE_SECP256R1 159*62c56f98SSadaf Ebrahimix509_crt_check:"data_files/server5.key":"":"C=NL,O=PolarSSL,CN=PolarSSL Server 1":"data_files/test-ca2.key":"PolarSSLTest":"C=NL,O=PolarSSL,CN=Polarssl Test EC CA":"01":"20190210144406":"20290210144406":MBEDTLS_MD_SHA256:0:0:"NULL":0:0:1:-1:"data_files/server5.crt":0:0:"data_files/test-ca2.crt":0 160*62c56f98SSadaf Ebrahimi 161*62c56f98SSadaf EbrahimiCertificate write check Server5 ECDSA, Opaque 162*62c56f98SSadaf Ebrahimidepends_on:MBEDTLS_MD_CAN_SHA256:MBEDTLS_PK_CAN_ECDSA_SIGN:MBEDTLS_ECDSA_DETERMINISTIC:MBEDTLS_ECP_HAVE_SECP384R1:MBEDTLS_ECP_HAVE_SECP256R1:MBEDTLS_USE_PSA_CRYPTO 163*62c56f98SSadaf Ebrahimix509_crt_check:"data_files/server5.key":"":"C=NL,O=PolarSSL,CN=PolarSSL Server 1":"data_files/test-ca2.key":"PolarSSLTest":"C=NL,O=PolarSSL,CN=Polarssl Test EC CA":"01":"20190210144406":"20290210144406":MBEDTLS_MD_SHA256:0:0:"NULL":0:0:1:-1:"":2:0:"data_files/test-ca2.crt":0 164*62c56f98SSadaf Ebrahimi 165*62c56f98SSadaf EbrahimiCertificate write check Server1 SHA1, SubjectAltNames 166*62c56f98SSadaf Ebrahimidepends_on:MBEDTLS_RSA_C:MBEDTLS_PKCS1_V15:MBEDTLS_DES_C:MBEDTLS_CIPHER_MODE_CBC:MBEDTLS_MD_CAN_MD5:MBEDTLS_AES_C 167*62c56f98SSadaf Ebrahimix509_crt_check:"data_files/server1.key":"":"C=NL,O=PolarSSL,CN=PolarSSL Server 1":"data_files/test-ca.key":"PolarSSLTest":"C=NL,O=PolarSSL,CN=PolarSSL Test CA":"01":"20190210144406":"20290210144406":MBEDTLS_MD_SHA1:0:0:"NULL":0:0:1:-1:"data_files/server1.allSubjectAltNames.crt":0:0:"data_files/test-ca.crt":1 168*62c56f98SSadaf Ebrahimi 169*62c56f98SSadaf EbrahimiX509 String to Names #1 170*62c56f98SSadaf Ebrahimimbedtls_x509_string_to_names:"C=NL,O=Offspark\\, Inc., OU=PolarSSL":"C=NL, O=Offspark\\, Inc., OU=PolarSSL":0:0 171*62c56f98SSadaf Ebrahimi 172*62c56f98SSadaf EbrahimiX509 String to Names #2 173*62c56f98SSadaf Ebrahimimbedtls_x509_string_to_names:"C=NL, O=Offspark, Inc., OU=PolarSSL":"":MBEDTLS_ERR_X509_INVALID_NAME:0 174*62c56f98SSadaf Ebrahimi 175*62c56f98SSadaf EbrahimiX509 String to Names #3 (Name precisely 255 bytes) 176*62c56f98SSadaf Ebrahimimbedtls_x509_string_to_names:"C=NL, O=123456789012345678901234567890123456789012345678901234567890123456789012345678901234567890123456789012345678901234567890123456789012345678901234567890123456789012345678901234567890123456789012345678901234567890123456789012345678901234567890123456789012345,OU=PolarSSL":"C=NL, O=123456789012345678901234567890123456789012345678901234567890123456789012345678901234567890123456789012345678901234567890123456789012345678901234567890123456789012345678901234567890123456789012345678901234567890123456789012345678901234567890123456789012345, OU=PolarSSL":0:0 177*62c56f98SSadaf Ebrahimi 178*62c56f98SSadaf EbrahimiX509 String to Names #4 (Name larger than 255 bytes) 179*62c56f98SSadaf Ebrahimimbedtls_x509_string_to_names:"C=NL, O=1234567890123456789012345678901234567890123456789012345678901234567890123456789012345678901234567890123456789012345678901234567890123456789012345678901234567890123456789012345678901234567890123456789012345678901234567890123456789012345678901234567890123456, OU=PolarSSL":"":MBEDTLS_ERR_X509_INVALID_NAME:0 180*62c56f98SSadaf Ebrahimi 181*62c56f98SSadaf EbrahimiX509 String to Names #5 (Escape non-allowed characters) 182*62c56f98SSadaf Ebrahimimbedtls_x509_string_to_names:"C=NL, O=Offspark\\a Inc., OU=PolarSSL":"":MBEDTLS_ERR_X509_INVALID_NAME:0 183*62c56f98SSadaf Ebrahimi 184*62c56f98SSadaf EbrahimiX509 String to Names #6 (Escape at end) 185*62c56f98SSadaf Ebrahimimbedtls_x509_string_to_names:"C=NL, O=Offspark\\":"":MBEDTLS_ERR_X509_INVALID_NAME:0 186*62c56f98SSadaf Ebrahimi 187*62c56f98SSadaf EbrahimiX509 String to Names #7 (Invalid, no '=' or ',') 188*62c56f98SSadaf Ebrahimimbedtls_x509_string_to_names:"ABC123":"":MBEDTLS_ERR_X509_INVALID_NAME:0 189*62c56f98SSadaf Ebrahimi 190*62c56f98SSadaf EbrahimiX509 String to Names #8 (Escaped valid characters) 191*62c56f98SSadaf Ebrahimimbedtls_x509_string_to_names:"C=NL, O=Offspark\\+ \\> \\=, OU=PolarSSL":"C=NL, O=Offspark\\+ \\> \\=, OU=PolarSSL":0:0 192*62c56f98SSadaf Ebrahimi 193*62c56f98SSadaf EbrahimiX509 String to Names #9 (Escaped ascii hexpairs uppercase encoded) 194*62c56f98SSadaf Ebrahimimbedtls_x509_string_to_names:"C=NL, O=\\4F\\66\\66\\73\\70\\61\\72\\6B, OU=PolarSSL":"C=NL, O=Offspark, OU=PolarSSL":0:0 195*62c56f98SSadaf Ebrahimi 196*62c56f98SSadaf EbrahimiX509 String to Names #10 (Escaped ascii hexpairs lowercase encoded) 197*62c56f98SSadaf Ebrahimimbedtls_x509_string_to_names:"C=NL, O=\\4f\\66\\66\\73\\70\\61\\72\\6b, OU=PolarSSL":"C=NL, O=Offspark, OU=PolarSSL":0:0 198*62c56f98SSadaf Ebrahimi 199*62c56f98SSadaf EbrahimiX509 String to Names #11 (Invalid hexpair escape at end of string) 200*62c56f98SSadaf Ebrahimimbedtls_x509_string_to_names:"C=NL, O=\\4f\\66\\66\\73\\70\\61\\72\\6, OU=PolarSSL":"":MBEDTLS_ERR_X509_INVALID_NAME:0 201*62c56f98SSadaf Ebrahimi 202*62c56f98SSadaf EbrahimiX509 String to Names #12 (Reject escaped null hexpair) 203*62c56f98SSadaf Ebrahimimbedtls_x509_string_to_names:"C=NL, O=Of\\00spark, OU=PolarSSL":"":MBEDTLS_ERR_X509_INVALID_NAME:0 204*62c56f98SSadaf Ebrahimi 205*62c56f98SSadaf EbrahimiX509 String to Names #13 (Invalid hexpairs) 206*62c56f98SSadaf Ebrahimimbedtls_x509_string_to_names:"C=NL, O=Of\\flspark, OU=PolarSSL":"":MBEDTLS_ERR_X509_INVALID_NAME:0 207*62c56f98SSadaf Ebrahimi 208*62c56f98SSadaf EbrahimiX509 String to Names #14 (Accept numercoid/hexstring) 209*62c56f98SSadaf Ebrahimimbedtls_x509_string_to_names:"C=NL, 2.5.4.10=#0C084F6666737061726B, OU=PolarSSL":"C=NL, O=Offspark, OU=PolarSSL":0:0 210*62c56f98SSadaf Ebrahimi 211*62c56f98SSadaf Ebrahimi# TODO: Should the trailing garbage be ignored? 212*62c56f98SSadaf EbrahimiX509 String to Names (hexstring: trailing garbage after DER is ignored) 213*62c56f98SSadaf Ebrahimimbedtls_x509_string_to_names:"C=NL, 2.5.4.10=#0C084F6666737061726Baa, OU=PolarSSL":"C=NL, O=Offspark, OU=PolarSSL":0:0 214*62c56f98SSadaf Ebrahimi 215*62c56f98SSadaf EbrahimiX509 String to Names: long hexstring (payload=256 bytes) 216*62c56f98SSadaf Ebrahimimbedtls_x509_string_to_names:"C=NL, 2.5.4.10=#0C82010041414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141, OU=PolarSSL":"C=NL, O=AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA, OU=PolarSSL":0:MAY_FAIL_DN_GETS 217*62c56f98SSadaf Ebrahimi 218*62c56f98SSadaf EbrahimiX509 String to Names: long hexstring (payload=257 bytes) 219*62c56f98SSadaf Ebrahimimbedtls_x509_string_to_names:"C=NL, 2.5.4.10=#0C820101aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa, OU=PolarSSL":"C=NL, O=Offspark, OU=PolarSSL":MBEDTLS_ERR_X509_INVALID_NAME:0 220*62c56f98SSadaf Ebrahimi 221*62c56f98SSadaf EbrahimiX509 String to Names #15 (Odd length DER hexstring) 222*62c56f98SSadaf Ebrahimimbedtls_x509_string_to_names:"C=NL, 2.5.4.10=#0C084F6666737061726, OU=PolarSSL":"":MBEDTLS_ERR_X509_INVALID_NAME:0 223*62c56f98SSadaf Ebrahimi 224*62c56f98SSadaf EbrahimiX509 String to Names (empty DER hexstring) 225*62c56f98SSadaf Ebrahimimbedtls_x509_string_to_names:"C=NL, 2.5.4.10=#, OU=PolarSSL":"":MBEDTLS_ERR_X509_INVALID_NAME:0 226*62c56f98SSadaf Ebrahimi 227*62c56f98SSadaf EbrahimiX509 String to Names (empty DER hexstring at end) 228*62c56f98SSadaf Ebrahimimbedtls_x509_string_to_names:"C=NL, 2.5.4.10=#":"":MBEDTLS_ERR_X509_INVALID_NAME:0 229*62c56f98SSadaf Ebrahimi 230*62c56f98SSadaf EbrahimiX509 String to Names (1-byte DER hexstring) 231*62c56f98SSadaf Ebrahimimbedtls_x509_string_to_names:"C=NL, 2.5.4.10=#0C, OU=PolarSSL":"":MBEDTLS_ERR_X509_INVALID_NAME:0 232*62c56f98SSadaf Ebrahimi 233*62c56f98SSadaf EbrahimiX509 String to Names (1-byte DER hexstring at end) 234*62c56f98SSadaf Ebrahimimbedtls_x509_string_to_names:"C=NL, 2.5.4.10=#0C":"":MBEDTLS_ERR_X509_INVALID_NAME:0 235*62c56f98SSadaf Ebrahimi 236*62c56f98SSadaf EbrahimiX509 String to Names #16 (hexstring: DER length exceeds available data) 237*62c56f98SSadaf Ebrahimimbedtls_x509_string_to_names:"C=NL, 2.5.4.10=#0C0B4F6666737061726B, OU=PolarSSL":"":MBEDTLS_ERR_X509_INVALID_NAME:0 238*62c56f98SSadaf Ebrahimi 239*62c56f98SSadaf EbrahimiX509 String to Names #17 (hexstring: Invalid OID) 240*62c56f98SSadaf Ebrahimimbedtls_x509_string_to_names:"C=NL, 10.5.4.10=#0C084F6666737061726B, OU=PolarSSL":"":MBEDTLS_ERR_X509_INVALID_NAME:0 241*62c56f98SSadaf Ebrahimi 242*62c56f98SSadaf EbrahimiX509 String to Names #18 (short name and hexstring) 243*62c56f98SSadaf Ebrahimimbedtls_x509_string_to_names:"C=NL, O=#0C084F6666737061726B, OU=PolarSSL":"C=NL, O=Offspark, OU=PolarSSL":0:0 244*62c56f98SSadaf Ebrahimi 245*62c56f98SSadaf EbrahimiX509 String to Names (null byte in hexstring with string type) 246*62c56f98SSadaf Ebrahimimbedtls_x509_string_to_names:"C=NL, O=#0C0100, OU=PolarSSL":"C=NL, O=Offspark, OU=PolarSSL":MBEDTLS_ERR_X509_INVALID_NAME:0 247*62c56f98SSadaf Ebrahimi 248*62c56f98SSadaf EbrahimiX509 String to Names (null byte in hexstring with non-string type) 249*62c56f98SSadaf Ebrahimimbedtls_x509_string_to_names:"C=NL, O=#040100, OU=PolarSSL":"C=NL, O=\\x00, OU=PolarSSL":0:MAY_FAIL_GET_NAME 250*62c56f98SSadaf Ebrahimi 251*62c56f98SSadaf EbrahimiX509 String to Names #19 (Accept non-ascii hexpairs) 252*62c56f98SSadaf Ebrahimimbedtls_x509_string_to_names:"C=NL, O=Of\\CCspark, OU=PolarSSL":"C=NL, O=Of\\CCspark, OU=PolarSSL":0:0 253*62c56f98SSadaf Ebrahimi 254*62c56f98SSadaf EbrahimiX509 String to Names #20 (Reject empty AttributeValue) 255*62c56f98SSadaf Ebrahimimbedtls_x509_string_to_names:"C=NL, O=, OU=PolarSSL":"":MBEDTLS_ERR_X509_INVALID_NAME:0 256*62c56f98SSadaf Ebrahimi 257*62c56f98SSadaf EbrahimiX509 Round trip test (Escaped characters) 258*62c56f98SSadaf Ebrahimimbedtls_x509_string_to_names:"CN=Lu\\C4\\8Di\\C4\\87, O=Offspark, OU=PolarSSL":"CN=Lu\\C4\\8Di\\C4\\87, O=Offspark, OU=PolarSSL":0:0 259*62c56f98SSadaf Ebrahimi 260*62c56f98SSadaf EbrahimiX509 Round trip test (hexstring output for non string input) 261*62c56f98SSadaf Ebrahimimbedtls_x509_string_to_names:"C=NL, 2.5.4.10=#03084F6666737061726B, OU=PolarSSL":"C=NL, O=#03084F6666737061726B, OU=PolarSSL":0:0 262*62c56f98SSadaf Ebrahimi 263*62c56f98SSadaf EbrahimiX509 Round trip test (numercoid hexstring output for unknown OID) 264*62c56f98SSadaf Ebrahimimbedtls_x509_string_to_names:"C=NL, 2.5.4.10.234.532=#0C084F6666737061726B, OU=PolarSSL":"C=NL, 2.5.4.10.234.532=#0C084F6666737061726B, OU=PolarSSL":0:0 265*62c56f98SSadaf Ebrahimi 266*62c56f98SSadaf EbrahimiCheck max serial length 267*62c56f98SSadaf Ebrahimix509_set_serial_check: 268*62c56f98SSadaf Ebrahimi 269*62c56f98SSadaf EbrahimiCheck max extension length 270*62c56f98SSadaf Ebrahimix509_set_extension_length_check: 271