Re: CERT_AsciiToName() and unknown OIDs

John Dennis <[email protected]>
Newsgroups gmane.comp.mozilla.crypto
Message-ID <[email protected]>
On 02/23/2017 11:38 AM, Miklos Vajna wrote:
> Hi,
>
> On Thu, Feb 23, 2017 at 10:44:10AM -0500, John Dennis <[email protected]> wrote:
>> You should follow the RFC specifications, in this case RFC-4514 and
>> RFC-4512.
>
> Thanks for the numbers, I wasn't sure where is this specified.
>
>> The second example with the RDN 2.5.4.97=VATHU-10585560 is correct.
>>
>> It does appear that ParseRFC1485AVA has a bug
>>
>>     if (!PL_strncasecmp("oid.", tagBuf, 4)) {
>>         rv = SEC_StringToOID(arena, &derOid, tagBuf, strlen(tagBuf));
>>
>> SEC_StringToOID() can handle a numericoid (e.g. dotted decimal) with or
>> without a "OID." prefix. The test should include a test for a numericoid.
>
> Should I file a bug at <https://bugzilla.mozilla.org/> about this?

Yes


-- 
John
-- 
dev-tech-crypto mailing list
[email protected]
https://lists.mozilla.org/listinfo/dev-tech-crypto
lmpx.com only provides a reader for public news (NNTP) servers. It is not affiliated with the servers or forums shown here and is not responsible for the content of articles, which is written by their respective authors.