wahern / luaossl

Most comprehensive OpenSSL module in the Lua universe.
http://25thandclement.com/~william/projects/luaossl.html
Other
142 stars 48 forks source link

Use DER true value of 0xFF #149

Closed daurnimator closed 6 years ago

daurnimator commented 6 years ago

The basic contraints field of ca is used directly in the output DER/PEM. To get the correct serialisation, we need to use the DER truth encoding of 0xFF.

Some TLS stacks are fussy about this (e.g. go-lang's) Many thanks to this comment https://github.com/zmap/zgrab/issues/180#issuecomment-245132628