search

kaikramer / keystore-explorer

KeyStore Explorer is a free GUI replacement for the Java command-line utilities keytool and jarsigner.
https://keystore-explorer.org/
GNU General Public License v3.0
1.7k stars 275 forks source link

PDS Object Identifier Potential Typo #155

Closed weddi-eddy closed 5 years ago

weddi-eddy commented 5 years ago

Describe the bug Some of the guys in our office use KeyStore Explorer to assist with parsing ASN.1 information from the certificates that we issue. In a recent audit, the auditor picked up a typo in one of the OIDs and thought it was due to a policy that we had set on our CA. After some extensive research, we came to the conclusion that the typo may exist only in KeyStore Explorer. The ASN.1 typo in question is:

OBJECT IDENTIFIER=EtsiQcsQcPSD (0.4.0.1862.1.5)

We believe it should be:

OBJECT IDENTIFIER=EtsiQcsQcPDS (0.4.0.1862.1.5)

Note the difference between "PSD" and "PDS" (desired).

To Reproduce Steps to reproduce the behavior:

  1. Upload a certificate that contains this OID to KeyStore Explorer.
  2. Click on the ASN.1 button.
  3. Check for the 0.4.0.1862.1.5 OID.

Expected behavior It should display OBJECT IDENTIFIER=EtsiQcsQcPDS (0.4.0.1862.1.5). Other ASN.1 checkers do not even display the name of the OID, they simply have OBJECT IDENTIFIER=0.4.0.1862.1.5.

Screenshots If applicable, add screenshots to help explain your problem.

Environment

kaikramer commented 5 years ago

Thanks for reporting!