Will Bond
Will Bond
Please post the PEM encoded certs in a comment here. My hunch is that the certificate isn’t using properly encoded strings, as the error message includes what appears to be...
> You have all the certs in DER format. The issue is, I don't have time and you want help, so I am asking you do leg work. Downloading, extracting...
Can you post the PEM inline here so we can just copy paste to https://lapo.it/asn1js/?
> I've checked the chain step by step with openssl and it says it is good. That doesn't really help in this situation, as we don't use OpenSSL's chain building,...
Can you provide the code that resulted in the backtrace? So far it looks like the encoding on the leaf is good, so it is like that the encoding corruption...
No, currently I don’t have time for development of this package, and it doesn’t appear anyone has sent a PR with tests.
@stof What version of asn1crypto are you using? The error message indicates that asn1crypto is finding an ASN.1 construction it doesn't expect in one of the certificates.
Sorry about that!
@chrisdlangton See above ^
Yes, it does seem that currently it will short circuit and fail if for some reason the first OCSP response is invalid.