Get this message when trying to extract: [stef@stef-rawhide p11-kit]$ tools/p11-kit extract --format=java-cacerts --filter=ca-anchors --overwrite --purpose server-auth /tmp/cacerts p11-kit: 'ret == ASN1_SUCCESS' not true at p11_x509_parse_basic_constraints p11-kit: invalid basic constraints certificate extension p11-kit: 'ret == ASN1_SUCCESS' not true at p11_x509_parse_basic_constraints p11-kit: invalid basic constraints certificate extension p11-kit: 'ret == ASN1_SUCCESS' not true at p11_x509_parse_basic_constraints p11-kit: invalid basic constraints certificate extension p11-kit: 'ret == ASN1_SUCCESS' not true at p11_x509_parse_basic_constraints p11-kit: invalid basic constraints certificate extension p11-kit: 'ret == ASN1_SUCCESS' not true at p11_x509_parse_basic_constraints p11-kit: invalid basic constraints certificate extension p11-kit: 'ret == ASN1_SUCCESS' not true at p11_x509_parse_basic_constraints p11-kit: invalid basic constraints certificate extension p11-kit: 'ret == ASN1_SUCCESS' not true at p11_x509_parse_basic_constraints p11-kit: invalid basic constraints certificate extension p11-kit: 'ret == ASN1_SUCCESS' not true at p11_x509_parse_basic_constraints p11-kit: invalid basic constraints certificate extension p11-kit: 'ret == ASN1_SUCCESS' not true at p11_x509_parse_basic_constraints p11-kit: invalid basic constraints certificate extension p11-kit: 'ret == ASN1_SUCCESS' not true at p11_x509_parse_basic_constraints p11-kit: invalid basic constraints certificate extension Will attach ca-bundle being used as source data.
Created attachment 76125 [details] Bundle being used as p11-kit-trust input
Created attachment 76126 [details] [review] x509: Don't break when cA field of BasicConstraints is missing
Tested by Kai Engert.
Attachment 76126 [details] pushed as 220d7b0 - x509: Don't break when cA field of BasicConstraints is missing
Use of freedesktop.org services, including Bugzilla, is subject to our Code of Conduct. How we collect and use information is described in our Privacy Policy.