CertificateFactory does not conforms to JAVA specifications

Massimiliano Ziccardi <[email protected]> Fri, 15 Mar 2019 13:26:08 +0100

Newsgroups	gmane.comp.encryption.bouncy-castle.devel
Message-ID	<CAPwY8YDYtx_khigJwTO=0iS2VG8XXkktk6yuLt=AmW+ejoH2bw@mail.gmail.com>

Hello guys!

About one month ago, I opened this issue:

   - https://github.com/bcgit/bc-java/issues/457 - CertificateFactory does
   not conforms to specifications

And I created a PR that should solve/mitigate the issue:

   - https://github.com/bcgit/bc-java/pull/459

But I never received any comment.

We already discussed this issue some year ago here
<http://bouncy-castle.1462172.n4.nabble.com/Problem-in-the-bouncycastle-CertificateFactory-implementation-td4655904.html>

I really believe it should be fixed. As it is, it creates incoherent
results when passing from any compliant provider (Sun, IAIK, etc) to
BouncyCastle.

Code relying to the fact that bad input should raise an exception, could
start failing with a NullPointerException if changing the provider to
BouncyCastle.

WDYT?

Regards,
Massimiliano