Jörn Heissler

iPXE on DL360 Gen9 in UEFI mode (secure boot turned off) works for me. > if I turn the verbosity up it scrolls off the screen and is unreadable Try...

You need to use `asn1crypto.cms.ContentInfo`.

I don't know if you're doing something wrong. If you could generate a minimal example (i.e. not a full PKCS#7 file) it would help a lot.

This might be a bug in asn1crypto. ```diff diff --git a/asn1crypto/tsp.py b/asn1crypto/tsp.py index f006da9..ead07cc 100644 --- a/asn1crypto/tsp.py +++ b/asn1crypto/tsp.py @@ -171,7 +171,7 @@ class MetaData(Sequence): class TimeStampAndCRL(Sequence): _fields = [...

Hi @ricardo-reis-1970 , are you trying to encode the `QuoVadis Root CA 3`? Your procedure (compare existing files to the ones you generate) is what I do too when working...

> What I find hard to understand — and impossible to replicate — is that when loading a certificate and inspecting its nodes, I get to the same `GeneralName.chosen` and...

> The issue comes up in the last extension: cRLDistributionPoints. I assume that ICAO generated an incorrect certificate by using space separated URLs, but X.509 and related standards may be...

> Let me start with the `Certificate.load(der).dump(True) == der` technique. Yes, this is a good way to sanity-check `asn1crypto` and I'm sure it's in the tests. However, this never leaves...