Verification failure with .pem list

AndyQ / NFCPassportReader

NFCPassportReader for iOS 13

MIT License

733 stars 235 forks source link

Verification failure with .pem list #199

Closed nicop2000 closed 5 months ago

nicop2000 commented 7 months ago

I downloaded the icaopkd-002-complete-000244.ldif from icao, used the extract.py script on it, copied the list into my project and wanted to verify a passport. This is when I got an 'Verification of certificate failed' with error code 25 which is X509_V_ERR_PATH_LENGTH_EXCEEDED. Any idea why this comes up or how to fix it? I'm not an expert with certs. Thanks in advance :)

trungnl08 commented 6 months ago

Did you fix this issue ? I have the same problem but cannot handle after many days :)

AndyQ commented 5 months ago

Interesting. I just downloaded the latest icaopkd-002-complete-000252.ldif and ran that through and it completed fine with no errors.

Would you be able to either send me a copy of the 244.ldif file (and I'll check it) or try the latest version from the icao site?

nicop2000 commented 5 months ago

@AndyQ We're talking about this site, right? ICAO

I downloaded this file icaopkd-002-complete-000252.ldif under "The latest collection of CSCA Master Lists." with 7.7 MB size. This still fails. I set the Master List URL and the verification failed: OpenSSLError

UnableToVerifyX509CertificateForSOD : "Verification of certificate failed - errorCode 20"

nicop2000 commented 5 months ago

A fresh installation of python3 and resetting all Xcode caches solved it