Closed daurnimator closed 6 years ago
The basic contraints field of ca is used directly in the output DER/PEM. To get the correct serialisation, we need to use the DER truth encoding of 0xFF.
ca
Some TLS stacks are fussy about this (e.g. go-lang's) Many thanks to this comment https://github.com/zmap/zgrab/issues/180#issuecomment-245132628
The basic contraints field of
ca
is used directly in the output DER/PEM. To get the correct serialisation, we need to use the DER truth encoding of 0xFF.Some TLS stacks are fussy about this (e.g. go-lang's) Many thanks to this comment https://github.com/zmap/zgrab/issues/180#issuecomment-245132628