Permit the decoding of non-minimally-encoded ASN.1 INTEGERs

Open robstradling opened this issue 7 years ago • 0 comments

ZLint throws a fatal error for this certificate: https://crt.sh/?id=628153824&opt=zlint

The problem is that the public exponent is DER-encoded as 0x020400010001 instead of 0x0203010001. Whilst I'd expect the Go standard library's encoding/asn1 decoder to complain about this, ISTM that zcrypto/ct/asn1 should be more permissive here.

Sep 04 '18 12:09 robstradling