GnuTLS | RFC 5280 compliance: GnuTLS accepted the CRL file with an incorrect inner algorithm identifier. (#1795)

Read-only notification of GnuTLS library development activities <[email protected]>
Newsgroups gmane.comp.encryption.gpg.gnutls.devel
Message-ID <[email protected]>

One happy person created an issue: https://gitlab.com/gnutls/gnutls/-/issues/1795



## Description of problem:
Hello developers,
I successfully parsed a CRL file with an inner algorithm identifier of 1.2.840.98445.1.1.11 using GnuTLS, although GnuTLS did not display the specific information of the inner algorithm identifier in the parsing results. When Go parsed this CRL file, it displayed the error: "inner and outer signature algorithm identifiers don't match".

## Version of gnutls used:
GnuTLS 3.8.9

## Distributor of gnutls (e.g., Ubuntu, Fedora, RHEL)
Ubuntu

## How reproducible:
certtool --crl-info --inder --infile crl_wrong_inner_signature_oid.der

## Actual results:
[crl_wrong_inner_signature_oid.der](/uploads/28ee3b442af58491839a61c5dd69f71a/crl_wrong_inner_signature_oid.der)

## Expected results:

-- 
Reply to this email directly or view it on GitLab: https://gitlab.com/gnutls/gnutls/-/issues/1795
You're receiving this email because of your account on gitlab.com.

_______________________________________________
Gnutls-devel mailing list
[email protected]
http://lists.gnupg.org/mailman/listinfo/gnutls-devel
lmpx.com only provides a reader for public news (NNTP) servers. It is not affiliated with the servers or forums shown here and is not responsible for the content of articles, which is written by their respective authors.