usable-cert-validation icon indicating copy to clipboard operation
usable-cert-validation copied to clipboard

Mismatch of errors online/internally

Open mukrop opened this issue 3 years ago • 2 comments

Online at x509errors.org, we present 95 different OpenSSL errors. However internally, in the error overview table in gDrive, we have only 78. Where's the difference?

PS: Internally, we highlight differences in error code and the documentation code that was probably already merged in the PR by Eric. Confirm and delete the internal note.

PS2: It seems the internal table is not current also for other libraries (e.g. GnuTLS).

mukrop avatar Aug 23 '21 12:08 mukrop

I've just updated the internal OpenSSL table. It's now up to date with the library.

PS2: It seems the internal table is not current also for other libraries (e.g. GnuTLS).

It gets a bit tricky here. As an example, GnuTLS returns GNUTLS_­E_­ASN1_­DER_­ERROR for one of our certificates, so I included it in the web. However, this is a general parsing error, not necessarily related to certs. GnuTLS doesn't list it among other X.509 related errors. Do we want all such errors in our tables as well?

zacikpa avatar Oct 05 '21 18:10 zacikpa

I've just updated the internal OpenSSL table. It's now up to date with the library.

Thanks. What caused the differences? Did the OpenSSL devs add some?

PS2: It seems the internal table is not current also for other libraries (e.g. GnuTLS).

It gets a bit tricky here. As an example, GnuTLS returns GNUTLS_­E_­ASN1_­DER_­ERROR for one of our certificates, so I included it in the web. However, this is a general parsing error, not necessarily related to certs. GnuTLS doesn't list it among other X.509 related errors. Do we want all such errors in our tables as well?

I see. I'm not 100% convinced, though I'd probably prefer adding them internally as well (possibly with a note or under a line denoting them). What do you think?

mukrop avatar Oct 06 '21 09:10 mukrop