On 02/23/2017 11:38 AM, Miklos Vajna wrote:
Hi,

On Thu, Feb 23, 2017 at 10:44:10AM -0500, John Dennis <jden...@redhat.com> 
wrote:
You should follow the RFC specifications, in this case RFC-4514 and
RFC-4512.

Thanks for the numbers, I wasn't sure where is this specified.

The second example with the RDN 2.5.4.97=VATHU-10585560 is correct.

It does appear that ParseRFC1485AVA has a bug

    if (!PL_strncasecmp("oid.", tagBuf, 4)) {
        rv = SEC_StringToOID(arena, &derOid, tagBuf, strlen(tagBuf));

SEC_StringToOID() can handle a numericoid (e.g. dotted decimal) with or
without a "OID." prefix. The test should include a test for a numericoid.

Should I file a bug at <https://bugzilla.mozilla.org/> about this?

Yes


--
John
--
dev-tech-crypto mailing list
dev-tech-crypto@lists.mozilla.org
https://lists.mozilla.org/listinfo/dev-tech-crypto

Reply via email to