Matt Caswell

> It is not clear to me that simply ignoring the invalid fragment is not correct behaviour. Isn't that what one might expect in light of https://datatracker.ietf.org/doc/html/rfc6347#section-4.1.2.1 and https://datatracker.ietf.org/doc/html/rfc6347#section-4.1.2.7? >...

Seems like a relatively straightforward change here: https://github.com/openssl/openssl/blob/1977c00f00ad0546421a5ec0b40c1326aee4cddb/crypto/x509/x509_txt.c#L42-L43 Adding "help wanted" to this and "good first issue"