Gilles Peskine 6c8ae1ea48 Fix lax basicConstraints parsing ... When parsing the basicConstraints extension, reject junk after the SEQUENCE inside the extension (which is probably benign), and reject a SEQUENCE that extends beyond the extension (could be very dangerous). Add a non-regression test where a certificate that is technically malformed, but accepted as a leaf certificate by OpenSSL and other X.509 implementations, to be accepted as a CA certificate by Mbed TLS. Signed-off-by: Gilles Peskine <Gilles.Peskine@arm.com>		2026-05-26 21:07:09 +02:00
..
.jenkins
configs	Remove deprecated items	2025-08-01 11:45:14 +01:00
git-scripts	Header updates	2023-11-03 12:21:36 +00:00
include	Fix dependencies	2026-03-16 12:28:36 +00:00
opt-testcases	Do not check fail cases for verify skipped	2026-03-13 18:04:16 +00:00
scripts	Merge pull request #10631 from yiwu0b11/destdir_install_env_support	2026-04-29 14:37:29 +00:00
src	Fix some compile time guards	2026-03-16 12:27:21 +00:00
suites	Fix lax basicConstraints parsing	2026-05-26 21:07:09 +02:00
.gitignore	cmake: Generate test_keys.h and test_certs.h in the build tree	2025-03-26 21:19:28 +01:00
CMakeLists.txt	cmake: Introduce TF_PSA_CRYPTO_PRIVATE_INCLUDE_DIRS	2026-03-09 08:28:51 +01:00
compat-in-docker.sh	Header updates	2023-11-03 12:21:36 +00:00
compat.sh	Revert "ssl_server2.c: DTLS: Attempt to read the response to the close notification"	2026-03-24 18:38:37 +01:00
context-info.sh	Fix test and formatting in ssl_context_info	2025-04-29 22:02:24 +02:00
Descriptions.txt
make-in-docker.sh	Header updates	2023-11-03 12:21:36 +00:00
Makefile	Remove PSA status coverage log test	2026-03-12 10:18:33 +01:00
ssl-opt.sh	ssl: narrow TLS 1.2 RSA-PSS handling and add interop coverage	2026-04-16 04:36:48 +03:00