The tests require testing many permutations and increases the level of effort from the existing X.509 requirements. For a EAL1/PP-compliant evaluation, this seems excessive. Specifically Test FIA_X509_EXT.1:1, FIA_X509_EXT.1:5, FIA_X509_EXT.1:6, and Test FIA_X509_EXT.1:7.
Additionally, FIA_X509_EXT.1:5 and FIA_X509_EXT.1:6 requires testing certificate policies, but the SFR and TSS do not provide any detail about what valid policies are, making the test impractical to run.
The tests require testing many permutations and increases the level of effort from the existing X.509 requirements. For a EAL1/PP-compliant evaluation, this seems excessive. Specifically Test FIA_X509_EXT.1:1, FIA_X509_EXT.1:5, FIA_X509_EXT.1:6, and Test FIA_X509_EXT.1:7.
Additionally, FIA_X509_EXT.1:5 and FIA_X509_EXT.1:6 requires testing certificate policies, but the SFR and TSS do not provide any detail about what valid policies are, making the test impractical to run.