What version of Go are you using (go version)?
$ go version
go version go1.17.1 linux/amd64
Does this issue reproduce with the latest release?
Yes
What did you do?
Attempt to parse Attribute Certificate uising "crypto/x509"
Here is the repro:
https://play.golang.org/p/2Ngkmat3bqe
Note, i got the given attribute certificate from the sample in the TCG Platform Certificate Profile (see the appendix). I also saw used java's bouncycastle provider to genrate the same here in my own repo
What did you expect to see?
Proper parsing of the structure
What did you see instead?
x509: inner and outer signature algorithm identifiers don't match
I suspect that error isn't accurately reflecting the root cause here, IMO
Some additional context.
What version of Go are you using (
go version)?Does this issue reproduce with the latest release?
Yes
What did you do?
Attempt to parse Attribute Certificate uising
"crypto/x509"Here is the repro:
https://play.golang.org/p/2Ngkmat3bqe
Note, i got the given attribute certificate from the sample in the TCG Platform Certificate Profile (see the appendix). I also saw used java's bouncycastle provider to genrate the same here in my own repo
What did you expect to see?
Proper parsing of the structure
What did you see instead?
x509: inner and outer signature algorithm identifiers don't matchI suspect that error isn't accurately reflecting the root cause here, IMO
Some additional context.
openssl does not yet support this: Support for Attribute Certificate RFC-5755 openssl/openssl#14648
maybe related crypto/x509: inner and outer signature algorithm identifiers don't match #47689
ASN parsed form of the same cert