[gnutls-devel] GnuTLS | Incorrect results returned when converting pem file to der (#973)

Development of GNU's TLS library gnutls-devel at lists.gnutls.org
Sun Apr 19 13:36:57 CEST 2020




Tim Rühsen commented:


```
$ GNUTLS_DEBUG_LEVEL=9 src/certtool -i --infile /tmp/issue_973.pem
...
|<2>| signatureAlgorithm.algorithm differs from tbsCertificate.signature.algorithm: 1.2.840.66.15245.1.1.4, 1.2.840.113549.1.1.4
|<3>| ASSERT: x509.c[compare_sig_algorithm]:330
|<3>| ASSERT: x509.c[gnutls_x509_crt_import]:615
|<3>| ASSERT: x509.c[gnutls_x509_crt_list_import]:3834
import error: Error in the certificate.
```

GnuTLS is a bit nitpicking about what is allowed and may have stricter constraints then other X509 libraries.

-- 
Reply to this email directly or view it on GitLab: https://gitlab.com/gnutls/gnutls/-/issues/973#note_326826120
You're receiving this email because of your account on gitlab.com.


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.gnupg.org/pipermail/gnutls-devel/attachments/20200419/446a9fe0/attachment.html>


More information about the Gnutls-devel mailing list