-
Notifications
You must be signed in to change notification settings - Fork 2.6k
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
X.509: SubjectAlternativeName components are not parsed #2838
Labels
Comments
hanno-becker
pushed a commit
to hanno-becker/mbedtls
that referenced
this issue
Sep 13, 2019
Fixes Mbed-TLS#2838. See the issue description for more information.
hanno-becker
pushed a commit
to hanno-becker/mbedtls
that referenced
this issue
Sep 13, 2019
Fixes Mbed-TLS#2838. See the issue description for more information.
hanno-becker
pushed a commit
to hanno-becker/mbedtls
that referenced
this issue
Sep 17, 2019
Fixes Mbed-TLS#2838. See the issue description for more information.
hanno-becker
pushed a commit
to hanno-becker/mbedtls
that referenced
this issue
Sep 18, 2019
Fixes Mbed-TLS#2838. See the issue description for more information.
Patater
pushed a commit
to Patater/mbedtls
that referenced
this issue
Dec 4, 2019
Fixes Mbed-TLS#2838. See the issue description for more information.
AndrzejKurek
pushed a commit
to AndrzejKurek/mbedtls
that referenced
this issue
Jan 5, 2023
Fixes Mbed-TLS#2838. See the issue description for more information.
AndrzejKurek
pushed a commit
to AndrzejKurek/mbedtls
that referenced
this issue
Jan 5, 2023
Fixes Mbed-TLS#2838. See the issue description for more information. Signed-off-by: Andrzej Kurek <[email protected]>
davidhorstmann-arm
pushed a commit
that referenced
this issue
Jan 10, 2023
Fixes #2838. See the issue description for more information. Signed-off-by: Andrzej Kurek <[email protected]>
AndrzejKurek
pushed a commit
to AndrzejKurek/mbedtls
that referenced
this issue
Jan 12, 2023
Fixes Mbed-TLS#2838. See the issue description for more information. Signed-off-by: Andrzej Kurek <[email protected]>
AndrzejKurek
pushed a commit
to AndrzejKurek/mbedtls
that referenced
this issue
Feb 7, 2023
Fixes Mbed-TLS#2838. See the issue description for more information. Signed-off-by: Andrzej Kurek <[email protected]>
AndrzejKurek
pushed a commit
to AndrzejKurek/mbedtls
that referenced
this issue
Feb 8, 2023
Fixes Mbed-TLS#2838. See the issue description for more information. Signed-off-by: Andrzej Kurek <[email protected]>
paul-elliott-arm
pushed a commit
to paul-elliott-arm/mbedtls
that referenced
this issue
Feb 14, 2023
Fixes Mbed-TLS#2838. See the issue description for more information. Signed-off-by: Andrzej Kurek <[email protected]>
lhuang04
pushed a commit
to lhuang04/mbedtls
that referenced
this issue
Apr 2, 2024
Fixes Mbed-TLS#2838. See the issue description for more information. Signed-off-by: Andrzej Kurek <[email protected]>
lhuang04
pushed a commit
to lhuang04/mbedtls
that referenced
this issue
Apr 2, 2024
Fixes Mbed-TLS#2838. See the issue description for more information. Signed-off-by: Andrzej Kurek <[email protected]>
lhuang04
pushed a commit
to lhuang04/mbedtls
that referenced
this issue
Apr 2, 2024
Fixes Mbed-TLS#2838. See the issue description for more information. Signed-off-by: Andrzej Kurek <[email protected]>
lhuang04
pushed a commit
to lhuang04/mbedtls
that referenced
this issue
Apr 2, 2024
Fixes Mbed-TLS#2838. See the issue description for more information. Signed-off-by: Andrzej Kurek <[email protected]>
lhuang04
pushed a commit
to lhuang04/mbedtls
that referenced
this issue
Apr 2, 2024
Fixes Mbed-TLS#2838. See the issue description for more information. Signed-off-by: Andrzej Kurek <[email protected]>
lhuang04
pushed a commit
to lhuang04/mbedtls
that referenced
this issue
Apr 2, 2024
Fixes Mbed-TLS#2838. See the issue description for more information. Signed-off-by: Andrzej Kurek <[email protected]>
lhuang04
pushed a commit
to lhuang04/mbedtls
that referenced
this issue
Apr 2, 2024
Fixes Mbed-TLS#2838. See the issue description for more information. Signed-off-by: Andrzej Kurek <[email protected]>
lhuang04
pushed a commit
to lhuang04/mbedtls
that referenced
this issue
Apr 2, 2024
Fixes Mbed-TLS#2838. See the issue description for more information. Signed-off-by: Andrzej Kurek <[email protected]>
lhuang04
pushed a commit
to lhuang04/mbedtls
that referenced
this issue
May 7, 2024
Fixes Mbed-TLS#2838. See the issue description for more information. Signed-off-by: Andrzej Kurek <[email protected]>
lhuang04
pushed a commit
to lhuang04/mbedtls
that referenced
this issue
May 13, 2024
Fixes Mbed-TLS#2838. See the issue description for more information. Signed-off-by: Andrzej Kurek <[email protected]>
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Context: This is about the parsing of the
SubjectAlternativeNames
extension within an X.509 certificate. There are differently structured types of alternative name components, and while we don't store them permanently, their structural sanity is checked bymbedtls_x509_parse_subject_alt_name()
checked as part ofmbedtls_x509_crt_parse()
and friends.Issue:
mbedtls_x509_parse_subject_alt_name()
is called here:https://github.com/ARMmbed/mbedtls-restricted/blob/62be28b525076a022b31b0cff8f0e296f9b0bdc6/library/x509_crt.c#L645-L670
It can be seen that
tag
hasn't yet been stored incur->buf->tag
, so thatmbedtls_x509_parse_subject_alt_name()
cannot recognize the specific name and will always returnMBEDTLS_ERR_X509_FEATURE_UNAVAILABLE
, which is silently ignored afterwards.The text was updated successfully, but these errors were encountered: