Index | Thread | Search

From:
Job Snijders <job@openbsd.org>
Subject:
Re: rpki-client: more validation on printable strings
To:
Theo Buehler <tb@theobuehler.org>
Cc:
tech@openbsd.org
Date:
Mon, 17 Nov 2025 15:51:41 +0000

Download raw body.

Thread
On Mon, Nov 17, 2025 at 04:06:38PM +0100, Theo Buehler wrote:
> We should not only be checking that the commonName has the proper
> PrintableString type, we should also check that its octets belong
> to the limited character set allowed by this type. You can get a
> a copy of X.680 here; table 10 is on page 86 (logical page 75):
> 
> https://www.itu.int/rec/T-REC-X.680-202102-I/en

OK job@