Re: CERT_AsciiToName() and unknown OIDs

Hi,

On Thu, Feb 23, 2017 at 10:44:10AM -0500, John Dennis <[email protected]> wrote:
> You should follow the RFC specifications, in this case RFC-4514 and
> RFC-4512.

Thanks for the numbers, I wasn't sure where is this specified.

> The second example with the RDN 2.5.4.97=VATHU-10585560 is correct.
> 
> It does appear that ParseRFC1485AVA has a bug
> 
>     if (!PL_strncasecmp("oid.", tagBuf, 4)) {
>         rv = SEC_StringToOID(arena, &derOid, tagBuf, strlen(tagBuf));
> 
> SEC_StringToOID() can handle a numericoid (e.g. dotted decimal) with or
> without a "OID." prefix. The test should include a test for a numericoid.

Should I file a bug at <https://bugzilla.mozilla.org/> about this?

Regards,

Miklos
-- 
dev-tech-crypto mailing list
[email protected]
https://lists.mozilla.org/listinfo/dev-tech-crypto