wolfSSL/wolfssl
1
0
Fork 1
mirror of https://github.com/wolfSSL/wolfssl.git synced 2026-07-08 10:40:48 +02:00
Code Issues Packages Projects Releases Wiki Activity

Restore error code from DecodeGeneralName

Browse Source
This commit is contained in:
Eric Blankenhorn
2026-06-26 11:11:22 -05:00
parent 0cecccdf6e
commit e1a2ba3b02
6 changed files with 112 additions and 53 deletions
Download Patch File Download Diff File Expand all files Collapse all files
tests/api/test_asn.c
+21 -4
View File
@@ -1378,7 +1378,9 @@ int test_wc_DecodeRsaPssParams(void)
}
/* Test that DecodeAltNames rejects a SAN entry whose length exceeds the
* remaining SEQUENCE length (integer underflow on the length tracker). */
* remaining SEQUENCE length (integer underflow on the length tracker), and
* that a dNSName SAN carrying an embedded NUL is stored rather than rejected
* so verification reports a name mismatch instead of a parse error. */
int test_DecodeAltNames_length_underflow(void)
{
EXPECT_DECLS;
@@ -1481,14 +1483,29 @@ int test_DecodeAltNames_length_underflow(void)
WC_NO_ERR_TRACE(ASN_PARSE_E));
wc_FreeDecodedCert(&cert);
/* NUL in dNSName SAN must be rejected per RFC 5280 4.2.1.6. */
/* An embedded NUL in a dNSName SAN is an invalid presented identifier
* (RFC 6125 Sec. 6.3 / RFC 9525 Sec. 6.3), not a malformed certificate.
* Set the third byte of the 4-byte dNSName ("a*b*") to NUL, giving
* "a*\0*". The certificate must still parse: the entry is stored with
* its embedded NUL intact (length 4, not truncated) so that hostname
* verification reports DOMAIN_NAME_MISMATCH rather than the parser
* aborting with ASN_PARSE_E (regression from curl test 311). */
XMEMCPY(bad_san_cert, good_san_cert, sizeof(good_san_cert));
bad_san_cert[SAN_SEQ_LEN_OFFSET + 5] = 0x00;
wc_InitDecodedCert(&cert, bad_san_cert, (word32)sizeof(bad_san_cert),
NULL);
ExpectIntEQ(wc_ParseCert(&cert, CERT_TYPE, NO_VERIFY, NULL),
WC_NO_ERR_TRACE(ASN_PARSE_E));
ExpectIntEQ(wc_ParseCert(&cert, CERT_TYPE, NO_VERIFY, NULL), 0);
ExpectNotNull(cert.altNames);
if (cert.altNames != NULL) {
ExpectIntEQ(cert.altNames->type, ASN_DNS_TYPE);
ExpectIntEQ(cert.altNames->len, 4);
/* Embedded NUL preserved at offset 2: stored, not truncated. */
ExpectNotNull(cert.altNames->name);
if (cert.altNames->name != NULL) {
ExpectIntEQ(cert.altNames->name[2], 0x00);
}
}
wc_FreeDecodedCert(&cert);
#endif /* !NO_CERTS && !NO_RSA && !NO_ASN */
tests/api/test_ossl_x509.c
+67
View File
@@ -1795,6 +1795,73 @@ int test_wolfSSL_MatchDomainName_idn(void)
return EXPECT_RESULT();
}
/* Regression test mirroring curl test 311 ("HTTPS wrong subjectAltName but
* right CN"). The leaf Subject CN is the wanted host ("localhost") while its
* only dNSName SAN carries an embedded NUL ("localhost\0h"). Such a SAN is an
* invalid presented identifier (RFC 6125 Sec. 6.3 / RFC 9525 Sec. 6.3), not a
* malformed certificate, so the certificate must parse. Verification must then
* report DOMAIN_NAME_MISMATCH: the SAN presence suppresses Subject CN fallback
* and the NUL name can never match the NUL-free reference host, so the
* otherwise-correct CN must not rescue it. Before the parser stored rather than
* rejected the entry, verification aborted earlier with ASN_PARSE_E. */
int test_wolfSSL_X509_check_host_embedded_nul_san(void)
{
EXPECT_DECLS;
#if !defined(NO_FILESYSTEM) && !defined(NO_CERTS) && !defined(NO_RSA) && \
defined(OPENSSL_EXTRA) && defined(WOLFSSL_CERT_GEN) && \
defined(WOLFSSL_CERT_EXT) && defined(WOLFSSL_ALT_NAMES) && \
!defined(NO_SHA256) && !defined(NO_ASN)
WOLFSSL_EVP_PKEY* priv = NULL;
WOLFSSL_X509* leaf = NULL;
const char* server_cert = "./certs/test/server-goodcn.pem";
const char host[] = "localhost";
/* dNSName "localhost" + embedded NUL + 'h', length 11. */
static const byte nulSan[] = {
'l', 'o', 'c', 'a', 'l', 'h', 'o', 's', 't', '\0', 'h'
};
byte* keyPt = NULL;
const byte* der = NULL;
int derSz = 0;
DecodedCert dCert;
int parseRet = -1;
keyPt = (byte*)server_key_der_2048;
ExpectNotNull(priv = wolfSSL_d2i_PrivateKey(EVP_PKEY_RSA, NULL,
(const unsigned char**)&keyPt, sizeof_server_key_der_2048));
/* server-goodcn.pem has CN=localhost and no SAN; add one dNSName SAN that
* carries an embedded NUL, then re-sign so the SAN is serialized. */
ExpectNotNull(leaf = wolfSSL_X509_load_certificate_file(server_cert,
WOLFSSL_FILETYPE_PEM));
ExpectIntEQ(wolfSSL_X509_add_altname_ex(leaf, (const char*)nulSan,
sizeof(nulSan), ASN_DNS_TYPE), WOLFSSL_SUCCESS);
ExpectIntGT(wolfSSL_X509_sign(leaf, priv, EVP_sha256()), 0);
/* Regression pin: the signed certificate must parse despite the embedded
* NUL (it aborted with ASN_PARSE_E before the parser stored the entry). */
ExpectNotNull(der = wolfSSL_X509_get_der(leaf, &derSz));
ExpectIntGT(derSz, 0);
if ((der != NULL) && (derSz > 0)) {
wc_InitDecodedCert(&dCert, der, (word32)derSz, NULL);
parseRet = wc_ParseCert(&dCert, CERT_TYPE, NO_VERIFY, NULL);
ExpectIntEQ(parseRet, 0);
wc_FreeDecodedCert(&dCert);
}
/* Security pin: the host must still be rejected. With parsing now
* succeeding, the only remaining failure path in check_host for a
* non-IP host is the hostname comparison, so a failure here means
* DOMAIN_NAME_MISMATCH: the SAN presence suppressed CN fallback and the
* NUL name did not match. The correct CN must not rescue the wrong SAN. */
ExpectIntEQ(wolfSSL_X509_check_host(leaf, host, XSTRLEN(host), 0, NULL),
WC_NO_ERR_TRACE(WOLFSSL_FAILURE));
wolfSSL_X509_free(leaf);
wolfSSL_EVP_PKEY_free(priv);
#endif
return EXPECT_RESULT();
}
int test_wolfSSL_X509_max_altnames(void)
{
EXPECT_DECLS;
tests/api/test_ossl_x509.h
+2
View File
@@ -50,6 +50,7 @@ int test_wolfSSL_X509_name_match2(void);
int test_wolfSSL_X509_name_match3(void);
int test_wolfssl_local_IsValidFQDN(void);
int test_wolfSSL_MatchDomainName_idn(void);
int test_wolfSSL_X509_check_host_embedded_nul_san(void);
int test_wolfSSL_X509_max_altnames(void);
int test_wolfSSL_X509_max_name_constraints(void);
int test_wolfSSL_X509_check_ca(void);
@@ -83,6 +84,7 @@ int test_wolfSSL_X509_cmp(void);
TEST_DECL_GROUP("ossl_x509", test_wolfSSL_X509_name_match3), \
TEST_DECL_GROUP("ossl_x509", test_wolfssl_local_IsValidFQDN), \
TEST_DECL_GROUP("ossl_x509", test_wolfSSL_MatchDomainName_idn), \
TEST_DECL_GROUP("ossl_x509", test_wolfSSL_X509_check_host_embedded_nul_san),\
TEST_DECL_GROUP("ossl_x509", test_wolfSSL_X509_max_altnames), \
TEST_DECL_GROUP("ossl_x509", test_wolfSSL_X509_max_name_constraints), \
TEST_DECL_GROUP("ossl_x509", test_wolfSSL_X509_check_ca), \