Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Bugs filed for Firefox Certificate viewer on not strict enough parsing to of invalid certificates #425

Open
mb opened this issue Dec 2, 2024 · 0 comments

Comments

@mb
Copy link

mb commented Dec 2, 2024

Hi, someone filed quite a few bugs in Firefox about the Firefox Certificate viewer accepting invalid certificates (bug list)

Firefox Certificate viewer uses PKI.js to parse the certificates and I was if you are interested in me filing bugs here for each case that was found or if summarizing them here in this issue would be good too and whether it is in scope of PKI.js to fix these discrepencies.

For example Bug 1870340:

For the DER-encoded digital certificates, if you want to represent 'Subject Type=CA' in the Basic Constraints, the correct content for the corresponding TLV structure should be '01 01 ff'. However, in our mutated certificate, we have mutated the '01 01 ff' node to '01 01 49'. But Firefox still interprets this incorrect data as 'Subject Type=CA', and it is unable to identify this data as incorrect.

Is there interest in filing bugs for these cases here? If so, how do you prefer me to move the reports here?

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

1 participant