third_party_openhitls

mirror of https://github.com/openharmony/third_party_openhitls.git synced 2026-07-22 00:57:09 -04:00

Files

T

Ooohui 6c91f0666a fix(pki/bsl): harden X509 verification, fix IPv6 string length, and add ASN.1 overflow check

- Reject empty issuer DN with HITLS_X509_ERR_ISSUE_CERT_NOT_FOUND instead of silently skipping
- Check validity period of partial-chain trust anchors before accepting them
- Change HITLS_VerifyCb parameter from isPreverifyOk to errCode for better error diagnostics
- Fix MAX_IP_STR_LEN from 39 to 45 for IPv4-embedded IPv6 address literals
- Add overflow check in ASN.1 UTF-8 encoding to prevent outLen wrap-around
- Fix KU check skipped when EKU is absent in purpose verification (RFC 5280 4.2.1.12)

Cherry-picked from: https://gitcode.com/openHiTLS/openhitls/merge_requests/1423

Cherry-picked from: https://gitcode.com/openHiTLS/openhitls/merge_requests/1441

Signed-off-by: Dongjianwei001 <dongjianwei1@huawei.com>

2026-05-20 20:29:41 +08:00

asn1

Fix code review issues

2026-05-20 20:28:08 +08:00

chain

fix(pki/bsl): harden X509 verification, fix IPv6 string length, and add ASN.1 overflow check

2026-05-20 20:29:41 +08:00

ed25519

CRL Generation Consistency Test Case Supplement

2025-12-09 10:28:02 +08:00

pem

Fix obj bugs