3 ms·
Also, a more correct ASN.1 parser (at the CA, or in the client) could have saved them. The CN field is a PrintableString type which has a limited character set
by agl 17y ago
Also, a more correct ASN.1 parser (at the CA, or in the client) could have saved them. The CN field is a PrintableString type which has a limited character set specified. NUL is not an allowed character in a PrintableString.
- tptacek 17y agoI've tested a lot of ASN.1 implementations and I've never seen a BER or DER parser that even managed to check lengths or parse pathological OID arcs properly, let alone handling restricted character sets in strings. You might as well say they'd have been better served with a unicorn.