From c17fb7498b027faf423d1aa8a904f77d751b2fe9 Mon Sep 17 00:00:00 2001 From: John Safranek Date: Mon, 12 Feb 2024 13:11:51 -0800 Subject: [PATCH] OCSP Revocation Reason 1. The ASN.1 parser wasn't handling the OCSP response correctly when there was a revocation reason included in the response. The encoded reason value is constructed, and was getting marked as not constructed in the parser. Changed the flag to mark it as constructed. --- wolfcrypt/src/asn.c | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/wolfcrypt/src/asn.c b/wolfcrypt/src/asn.c index ad17786c0..49ad14e9b 100644 --- a/wolfcrypt/src/asn.c +++ b/wolfcrypt/src/asn.c @@ -34937,7 +34937,7 @@ static const ASNItem singleResponseASN[] = { /* revocationTime */ /* CS_REVOKED_TIME */ { 2, ASN_GENERALIZED_TIME, 0, 0, 0 }, /* revocationReason [0] EXPLICIT CRLReason OPTIONAL */ -/* CS_REVOKED_REASON */ { 2, ASN_CONTEXT_SPECIFIC | 0, 0, 1, 1 }, +/* CS_REVOKED_REASON */ { 2, ASN_CONTEXT_SPECIFIC | 0, 1, 1, 1 }, /* crlReason */ /* CS_REVOKED_REASON_VAL */ { 3, ASN_ENUMERATED, 0, 0, 0 }, /* unknown [2] IMPLICIT UnknownInfo ::= NULL */