Can't parse PEM certificate

Hi I've a issue with a PEM certificate:

My code: const fs = require('fs'); const { Certificate, PrivateKey } = require('@fidm/x509'); const ed25519Cert = Certificate.fromPEM(fs.readFileSync('../data/device_cert.pem'));

Exception: /test/node_modules/@fidm/asn1/build/asn1.js:751 throw err; ^

Error: ASN.1 object validate failure for authorityKeyIdentifier.value: error tag BOOLEAN at ASN1.validate (/test/node_modules/@fidm/asn1/build/asn1.js:934:20) at ASN1.validate (/test/node_modules/@fidm/asn1/build/asn1.js:943:43) at Function.parseDERWithTemplate (/test/node_modules/@fidm/asn1/build/asn1.js:748:25) at decodeExtAuthorityKeyIdentifier (/test/node_modules/@fidm/x509/build/x509.js:652:34) at certificateExtensionFromAsn1 (/test/node_modules/@fidm/x509/build/x509.js:502:13) at certificateExtensionsFromAsn1 (/test/node_modules/@fidm/x509/build/x509.js:456:22) at new Certificate (/test/node_modules/@fidm/x509/build/x509.js:310:31) at Function.fromPEMs (/test/node_modules/@fidm/x509/build/x509.js:252:24) at Function.fromPEM (/test/node_modules/@fidm/x509/build/x509.js:264:28) at Object. (/test/test.js:5:33)

My certificate is a standard certificate generated with openssl and other tools are able to parse and open.

Can you support me?

Alessandro

Hello,

same problem here with a certificate that openssl is able to parse.

Added some debug-output to "validate(..." within "asn1/build/asn1.js":

/********************************************/
console.log('==========================');
console.log(tpl);
console.log('--------------------------');
console.log(tpl.name);
console.log('--------------------------');
console.log(tpl.class);
console.log('--------------------------');
console.log(tpl.tag);
console.log('--------------------------');
console.log(this.class);
console.log('--------------------------');
console.log(this.tag);
console.log('==========================');
/********************************************/

with this output

[...]
==========================
{ name: 'authorityKeyIdentifier.value',
  class: 128,
  tag: 0,
  capture: 'authorityKeyIdentifier' }
--------------------------
authorityKeyIdentifier.value
--------------------------
128
--------------------------
0
--------------------------
128
--------------------------
1
==========================

As "1" is not in in the Array "[0]" the mentioned error is raised.

With another certificate the module is able to decode/analyze the structure successful. So it seems to be an error/problem depending on the certificate. The working certificate was a

Signature Algorithm: sha256WithRSAEncryption
Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (4096 bit)
Signature Algorithm: sha256WithRSAEncryption

whereas the problematic certificate was a

Signature Algorithm: ecdsa-with-SHA256
Subject Public Key Info: Public Key Algorithm: id-ecPublicKey Public-Key: (256 bit)
Signature Algorithm: ecdsa-with-SHA256

If needed I can attach the certificate?

Best regards Matthias

fidm / x509

Can't parse PEM certificate #14