Skip to content

Comments

fix CRL extension update by using ASN.1 INTEGER#26

Merged
corporate-gadfly merged 1 commit intoOpenVoxProject:mainfrom
corporate-gadfly:crl-extension-update
Feb 21, 2026
Merged

fix CRL extension update by using ASN.1 INTEGER#26
corporate-gadfly merged 1 commit intoOpenVoxProject:mainfrom
corporate-gadfly:crl-extension-update

Conversation

@corporate-gadfly
Copy link
Contributor

  • use ASN.1 INTEGER with DER INTEGER tag to stay compatible with JDK's X509 CRL extension parsing

    before this commit, we were seeing plain integers in the CRL extension:

35 36 39
│  │  └── '9' (0x39)
│  └───── '6' (0x36)
└──────── '5' (0x35)

after:

02 02 02 39
│  │  └──── 569 = 0x0239
│  └─────── length: 2 bytes
└────────── tag: INTEGER
  • add spec for testing DER INTEGER tag

Copy link

@bootc bootc left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Looks sensible to me

@corporate-gadfly corporate-gadfly force-pushed the crl-extension-update branch 2 times, most recently from a284542 to 3942a2b Compare February 20, 2026 21:29
@corporate-gadfly corporate-gadfly added the bug Something isn't working label Feb 20, 2026
Copy link
Member

@smortex smortex left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Looks good. Given the breakage, I understand the need for caution, but maybe we can lower the number of checks before merging because I don't think that there is much values testing 100 increments rather than 2 or 3 😄

- use ASN.1 INTEGER with DER INTEGER tag to stay compatible with JDK's
  X509 CRL extension parsing

  before this commit, we were seeing plain integers in the CRL extension:

  35 36 39
  │  │  └── '9' (0x39)
  │  └───── '6' (0x36)
  └──────── '5' (0x35)

  after:

  02 02 02 39
  │  │  └──── 569 = 0x0239
  │  └─────── length: 2 bytes
  └────────── tag: INTEGER

- add spec for testing DER INTEGER tag
@corporate-gadfly corporate-gadfly merged commit 1390dcc into OpenVoxProject:main Feb 21, 2026
10 checks passed
@corporate-gadfly corporate-gadfly deleted the crl-extension-update branch February 21, 2026 13:36
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

bug Something isn't working

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants