search

zmap / zlint

X.509 Certificate Linter focused on Web PKI standards and requirements.
https://zmap.io
Apache License 2.0
363 stars 109 forks source link

Lenient parsing of signature algorithm #822

Closed joyantaDebnath closed 7 months ago

joyantaDebnath commented 7 months ago

As per RFC 5758 , when employing algorithm identifiers such as ecdsa-with-SHA224, ecdsa-with-SHA256, ecdsa-with-SHA384, or ecdsa-with-SHA512 within the AlgorithmIdentifier field, the Parameter field must be excluded from the encoding. Despite this, ZLint’s parser permits the inclusion of an explicit “NULL” parameter for ECDSA algorithms.

joyantaDebnath commented 7 months ago

This case is covered when all the linter profiles are enabled. Not just RFCs.