2 ms·
Can you elaborate?
by l33t233372 4y ago
Can you elaborate?
- blibble 4y agotrying to parse ASN.1/X.509 in C is, to put it mildly: error prone
- cryptonector 4y agoNot if you have an ASN.1 compiler and library, but otherwise yes. OpenSSL has hand-coded templates that correspond to ASN.1 modules for PKIX. That hand-coding can have mistakes, but otherwise the OpenSSL template system is pretty solid. Here we had a mistake in that hand-coding. If they had an ASN.1 compiler then that wouldn't have happened because they could have just compiled the modules from RFC 5280.