New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Several potential implementation errors in : eu.europa.ec.eudi.iso18013.transfer.internal.readerauth.ReaderTrustStoreImpl #36

Open

ielaslaoui opened this issue Dec 12, 2024 · 0 comments

ielaslaoui commented Dec 12, 2024

The Cert chain validation implementation is based on loop over certificates chain and for every one check :

Path validation
Profile validation
Revok validation (based on crl)
And send "True" (validation is OK) if Profile validation is OK

This can make several validation errors :

If only one certificate of chain meet these validation -> The chain validation is considered Ok even if other certificate are revoked or not profile valide
the profile validation applies all validator to all certificate -> (for exemple extendedKeyUsage must not be required for CA certificates)

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment