crypto/x509: unable to parse Attribute Certificate

[salrashid123]

What version of Go are you using (go version)?

$ go version
go version go1.17.1 linux/amd64

Does this issue reproduce with the latest release?

Yes

What did you do?

Attempt to parse Attribute Certificate uising "crypto/x509"

• An Internet Attribute Certificate Profile for Authorization

Here is the repro:

https://play.golang.org/p/2Ngkmat3bqe

Note, i got the given attribute certificate from the sample in the TCG Platform Certificate Profile (see the appendix). I also saw used java's bouncycastle provider to genrate the same here in my own repo

What did you expect to see?

Proper parsing of the structure

What did you see instead?

x509: inner and outer signature algorithm identifiers don't match

I suspect that error isn't accurately reflecting the root cause here, IMO

---

Some additional context.

• openssl does not yet support this: openssl/openssl#14648

• maybe related #47689

• ASN parsed form of the same cert

[seankhliao]

cc @FiloSottile

[salrashid123]

ref

• go-attestation@v0.3.2/attributecert#ParseAttributeCertificate