Skip to content

Commit 649a32f

Browse files
SparkiDevSparkiDev
authored
Merge pull request #10169 from embhorn/zd21565
Fix for peer cert verify with IP address
2 parents b17755b + 1e40b15 commit 649a32f

7 files changed

Lines changed: 238 additions & 1 deletion

File tree

‎certs/test/cn-ip-literal.der‎

691 Bytes
Binary file not shown.

‎certs/test/cn-ip-wildcard.der‎

687 Bytes
Binary file not shown.

‎certs/test/gen-testcerts.sh‎

Lines changed: 24 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -229,6 +229,30 @@ generate_expired_certs expired/expired-cert ../server-key.pem
229229

230230
generate_test_trusted_cert ossl-trusted-cert localhost "" 1
231231

232+
# Generate CN-IP test certs (no SAN, CN contains IP literal or wildcard)
233+
# These are simple self-signed V1 certs with only a CN field, no extensions.
234+
# Used to test peer cert verification with IP address matching in CN.
235+
generate_cn_ip_cert() {
236+
rm -f "$1".der "$1".pem
237+
238+
echo "step 1 create self-signed cert with CN=$2"
239+
openssl req -new -x509 -days 3652 -sha256 \
240+
-key ../server-key.pem \
241+
-out "$1".pem \
242+
-subj "/CN=$2"
243+
check_result $?
244+
245+
echo "step 2 make binary der version"
246+
openssl x509 -inform pem -in "$1".pem -outform der -out "$1".der
247+
check_result $?
248+
249+
rm -f "$1".pem
250+
}
251+
252+
generate_cn_ip_cert cn-ip-literal 127.0.0.1
253+
generate_cn_ip_cert cn-ip-wildcard "*.0.0.1"
254+
255+
232256
# Note on certs/empty-issuer-cert.pem:
233257
# OpenSSL did not like to generate this certificate with an empty CN in the
234258
# conf file.

‎gencertbuf.pl‎

Lines changed: 25 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -164,6 +164,13 @@
164164
["certs/sphincs/bench_sphincs_small_level5_key.der", "bench_sphincs_small_level5_key" ],
165165
);
166166

167+
# CN-IP test certs (no SAN, CN contains IP literal or wildcard)
168+
# Used with OPENSSL_EXTRA && !NO_RSA
169+
my @fileList_cn_ip = (
170+
[ "./certs/test/cn-ip-literal.der", "cn_ip_literal_der" ],
171+
[ "./certs/test/cn-ip-wildcard.der", "cn_ip_wildcard_der" ],
172+
);
173+
167174

168175
# ----------------------------------------------------------------------------
169176

@@ -178,6 +185,7 @@
178185
my $num_sm2_der = @fileList_sm2_der;
179186
my $num_falcon = @fileList_falcon;
180187
my $num_sphincs = @fileList_sphincs;
188+
my $num_cn_ip = @fileList_cn_ip;
181189

182190
# open our output file, "+>" creates and/or truncates
183191
open OUT_FILE, "+>", $outputFile or die $!;
@@ -2236,6 +2244,23 @@
22362244
print OUT_FILE "#endif /* USE_CERT_BUFFERS_25519 */\n\n";
22372245

22382246

2247+
# convert and print CN-IP test certs
2248+
print OUT_FILE "#if defined(OPENSSL_EXTRA) && !defined(NO_RSA)\n\n";
2249+
for (my $i = 0; $i < $num_cn_ip; $i++) {
2250+
2251+
my $fname = $fileList_cn_ip[$i][0];
2252+
my $sname = $fileList_cn_ip[$i][1];
2253+
2254+
print OUT_FILE "/* $fname */\n";
2255+
print OUT_FILE "static const unsigned char $sname\[] =\n";
2256+
print OUT_FILE "{\n";
2257+
file_to_hex($fname);
2258+
print OUT_FILE "};\n";
2259+
print OUT_FILE "#define sizeof_$sname (sizeof($sname))\n\n"
2260+
}
2261+
print OUT_FILE "#endif /* OPENSSL_EXTRA && !NO_RSA */\n\n";
2262+
2263+
22392264
print OUT_FILE "#endif /* WOLFSSL_CERTS_TEST_H */\n\n";
22402265

22412266
# close certs_test.h file

‎src/internal.c‎

Lines changed: 4 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -13488,7 +13488,10 @@ int CheckHostName(DecodedCert* dCert, const char *domainName,
1348813488
}
1348913489

1349013490
#ifndef WOLFSSL_HOSTNAME_VERIFY_ALT_NAME_ONLY
13491-
if (checkCN == 1) {
13491+
/* RFC 6125: IP address identities must appear in an iPAddress SAN and
13492+
* must never be matched against the Subject Common Name. Skip the CN
13493+
* fallback when verifying an IP address. */
13494+
if (checkCN == 1 && !isIP) {
1349213495
if (MatchDomainName(dCert->subjectCN, dCert->subjectCNLen,
1349313496
domainName, (word32)domainNameLen, flags) == 1) {
1349413497
ret = 0;

‎tests/api/test_ossl_x509.c‎

Lines changed: 30 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -1060,6 +1060,36 @@ int test_wolfSSL_X509_check_ip_asc(void)
10601060
ExpectIntEQ(wolfSSL_X509_check_ip_asc(NULL, "0.0.0.0", 0), 0);
10611061
ExpectIntEQ(wolfSSL_X509_check_ip_asc(empty, "127.128.0.255", 0), 0);
10621062

1063+
/* Regression test: a certificate with CN=<ip> and no SAN extension
1064+
* must NOT be accepted for IP verification. RFC 6125 requires that IP
1065+
* identities appear in an iPAddress SAN; the Subject CN must never be
1066+
* matched against an IP address. Likewise a CN of "*.0.0.1" must not
1067+
* wildcard-match "127.0.0.1" -- RFC 6125 Section 7.2 prohibits wildcard
1068+
* matching for IP addresses. */
1069+
{
1070+
WOLFSSL_X509 *cn_lit = NULL;
1071+
WOLFSSL_X509 *cn_wild = NULL;
1072+
1073+
ExpectNotNull(cn_lit = wolfSSL_X509_load_certificate_buffer(
1074+
cn_ip_literal_der, (int)sizeof(cn_ip_literal_der),
1075+
WOLFSSL_FILETYPE_ASN1));
1076+
ExpectNotNull(cn_wild = wolfSSL_X509_load_certificate_buffer(
1077+
cn_ip_wildcard_der, (int)sizeof(cn_ip_wildcard_der),
1078+
WOLFSSL_FILETYPE_ASN1));
1079+
1080+
/* CN=127.0.0.1 with no SAN must NOT match the IP "127.0.0.1". */
1081+
ExpectIntEQ(wolfSSL_X509_check_ip_asc(cn_lit, "127.0.0.1", 0), 0);
1082+
/* CN=*.0.0.1 with no SAN must NOT wildcard-match "127.0.0.1". */
1083+
ExpectIntEQ(wolfSSL_X509_check_ip_asc(cn_wild, "127.0.0.1", 0), 0);
1084+
/* CN-based hostname matching must still work for hostname checks
1085+
* (sanity check that the fix didn't over-correct). */
1086+
ExpectIntEQ(wolfSSL_X509_check_host(cn_wild, "1.0.0.1",
1087+
XSTRLEN("1.0.0.1"), 0, NULL), 1);
1088+
1089+
wolfSSL_X509_free(cn_wild);
1090+
wolfSSL_X509_free(cn_lit);
1091+
}
1092+
10631093
wolfSSL_X509_free(empty);
10641094
wolfSSL_X509_free(x509);
10651095
#endif

‎wolfssl/certs_test.h‎

Lines changed: 155 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -7069,5 +7069,160 @@ static const unsigned char x25519_pub_statickey_der[] =
70697069

70707070
#endif /* USE_CERT_BUFFERS_25519 */
70717071

7072+
#if defined(OPENSSL_EXTRA) && !defined(NO_RSA)
7073+
7074+
/* ./certs/test/cn-ip-literal.der */
7075+
static const unsigned char cn_ip_literal_der[] =
7076+
{
7077+
0x30, 0x82, 0x02, 0xAF, 0x30, 0x82, 0x01, 0x97, 0x02, 0x14,
7078+
0x03, 0xE8, 0x5C, 0xB5, 0x56, 0x65, 0x58, 0xD4, 0xD9, 0x86,
7079+
0x9C, 0xE7, 0x5B, 0x71, 0xE9, 0xD3, 0x33, 0xE1, 0xA2, 0xDC,
7080+
0x30, 0x0D, 0x06, 0x09, 0x2A, 0x86, 0x48, 0x86, 0xF7, 0x0D,
7081+
0x01, 0x01, 0x0B, 0x05, 0x00, 0x30, 0x14, 0x31, 0x12, 0x30,
7082+
0x10, 0x06, 0x03, 0x55, 0x04, 0x03, 0x0C, 0x09, 0x31, 0x32,
7083+
0x37, 0x2E, 0x30, 0x2E, 0x30, 0x2E, 0x31, 0x30, 0x1E, 0x17,
7084+
0x0D, 0x32, 0x36, 0x30, 0x34, 0x30, 0x38, 0x32, 0x30, 0x32,
7085+
0x35, 0x33, 0x33, 0x5A, 0x17, 0x0D, 0x33, 0x36, 0x30, 0x34,
7086+
0x30, 0x35, 0x32, 0x30, 0x32, 0x35, 0x33, 0x33, 0x5A, 0x30,
7087+
0x14, 0x31, 0x12, 0x30, 0x10, 0x06, 0x03, 0x55, 0x04, 0x03,
7088+
0x0C, 0x09, 0x31, 0x32, 0x37, 0x2E, 0x30, 0x2E, 0x30, 0x2E,
7089+
0x31, 0x30, 0x82, 0x01, 0x22, 0x30, 0x0D, 0x06, 0x09, 0x2A,
7090+
0x86, 0x48, 0x86, 0xF7, 0x0D, 0x01, 0x01, 0x01, 0x05, 0x00,
7091+
0x03, 0x82, 0x01, 0x0F, 0x00, 0x30, 0x82, 0x01, 0x0A, 0x02,
7092+
0x82, 0x01, 0x01, 0x00, 0xB9, 0xCC, 0x99, 0xF7, 0xBF, 0x7C,
7093+
0x4F, 0xEC, 0x7F, 0xE6, 0x17, 0x4E, 0xE3, 0xD9, 0xE5, 0x25,
7094+
0x7D, 0xAB, 0xA8, 0x66, 0xB0, 0x4D, 0x41, 0x5C, 0x20, 0xD8,
7095+
0x67, 0xF5, 0xA3, 0xCD, 0x9E, 0x12, 0x7F, 0x09, 0x00, 0xEB,
7096+
0x6B, 0xFC, 0x7E, 0x14, 0x10, 0xA0, 0x10, 0x2E, 0x1F, 0xE8,
7097+
0xAD, 0xEC, 0xE8, 0x86, 0x54, 0xA2, 0xC4, 0x58, 0x65, 0x26,
7098+
0x95, 0x76, 0xA1, 0xE1, 0x02, 0x52, 0x81, 0xCB, 0x7E, 0x8E,
7099+
0xB2, 0x31, 0xC9, 0x58, 0x9A, 0xDC, 0x69, 0xAB, 0x8D, 0x23,
7100+
0xCD, 0x96, 0x19, 0x1C, 0x68, 0x69, 0xB5, 0x7D, 0x23, 0xE3,
7101+
0x58, 0xE6, 0x26, 0xCC, 0x05, 0x40, 0xD2, 0xA9, 0xB1, 0x09,
7102+
0x9C, 0xC8, 0x4A, 0xFC, 0x0A, 0x20, 0xBA, 0xC0, 0x12, 0x3B,
7103+
0x97, 0x44, 0x2B, 0x30, 0x50, 0x86, 0x0B, 0x27, 0x13, 0x76,
7104+
0xB5, 0xF7, 0x80, 0xF0, 0xF2, 0xF0, 0x93, 0x3B, 0x8D, 0xA8,
7105+
0x4F, 0xA3, 0xA9, 0xD2, 0xEA, 0xD3, 0xC3, 0xCB, 0xCC, 0x70,
7106+
0xA0, 0x0B, 0xC7, 0xC6, 0x3E, 0xC9, 0x27, 0x4C, 0xB5, 0x23,
7107+
0x35, 0x6C, 0xB0, 0x30, 0xA2, 0xC1, 0x6D, 0x07, 0xD0, 0x9B,
7108+
0x55, 0x6A, 0xF9, 0x18, 0xF0, 0x30, 0x74, 0x3F, 0xF6, 0x17,
7109+
0x85, 0xB7, 0xCF, 0xA5, 0xD4, 0x91, 0xAA, 0x54, 0x85, 0xEC,
7110+
0xAE, 0xC5, 0x32, 0xF2, 0xB0, 0x21, 0x5A, 0x90, 0x22, 0x66,
7111+
0x8B, 0x4B, 0x0D, 0xC3, 0x57, 0x81, 0x86, 0xF2, 0xBB, 0xD2,
7112+
0x3B, 0x8C, 0xFC, 0xEE, 0xBD, 0xED, 0xF0, 0xFB, 0xA5, 0xE1,
7113+
0x91, 0x5A, 0x68, 0x07, 0x60, 0x38, 0x38, 0xE7, 0x48, 0xE3,
7114+
0x83, 0xD6, 0xAF, 0xF0, 0x03, 0x7E, 0x2E, 0x95, 0x0C, 0x33,
7115+
0xCF, 0x13, 0xE9, 0xEC, 0xE7, 0xA4, 0x5E, 0xED, 0x02, 0xAE,
7116+
0xF2, 0x30, 0x6F, 0x3F, 0xC4, 0x1B, 0x3A, 0x0A, 0xE8, 0xD3,
7117+
0x66, 0x32, 0xD6, 0xFD, 0x58, 0x3A, 0x65, 0x93, 0x99, 0xC7,
7118+
0x02, 0x03, 0x01, 0x00, 0x01, 0x30, 0x0D, 0x06, 0x09, 0x2A,
7119+
0x86, 0x48, 0x86, 0xF7, 0x0D, 0x01, 0x01, 0x0B, 0x05, 0x00,
7120+
0x03, 0x82, 0x01, 0x01, 0x00, 0x3C, 0xA7, 0xDF, 0xD1, 0x44,
7121+
0xC5, 0x4D, 0x29, 0x38, 0x51, 0x9D, 0xF6, 0xEE, 0x2F, 0x0C,
7122+
0xA3, 0x8A, 0x2A, 0x7C, 0xA1, 0xB1, 0x26, 0x6D, 0xFB, 0x8B,
7123+
0x5D, 0xED, 0xDC, 0x1F, 0xF2, 0xF1, 0x99, 0x3C, 0xD8, 0x36,
7124+
0xCD, 0x48, 0xF5, 0x91, 0x5B, 0x42, 0x98, 0x89, 0x29, 0xBA,
7125+
0x46, 0xAD, 0x93, 0xEA, 0xEA, 0x53, 0x17, 0xE4, 0x6D, 0xB7,
7126+
0xDC, 0xB5, 0x4A, 0xD8, 0xED, 0x5C, 0x39, 0x0C, 0xF6, 0x1D,
7127+
0x19, 0xFB, 0x22, 0x5D, 0xE4, 0x3F, 0x07, 0x20, 0x6D, 0x2E,
7128+
0xDC, 0x92, 0xA5, 0x56, 0xB3, 0x92, 0x74, 0x05, 0xB2, 0x7C,
7129+
0xED, 0x73, 0x83, 0x70, 0x5F, 0x0E, 0x75, 0xE1, 0x71, 0x4C,
7130+
0xC5, 0xF0, 0x26, 0xC5, 0xA6, 0xD4, 0xB6, 0xB4, 0x79, 0x99,
7131+
0x54, 0xD9, 0x21, 0x48, 0x2F, 0x52, 0x6E, 0x47, 0x1D, 0x1C,
7132+
0x3A, 0x3B, 0x2A, 0x36, 0xA8, 0x88, 0x95, 0x47, 0x67, 0x59,
7133+
0xD5, 0xEE, 0xB6, 0xE9, 0x5B, 0x86, 0x1B, 0x8B, 0x6C, 0xA6,
7134+
0xB2, 0x91, 0x81, 0x0C, 0xCA, 0x91, 0x33, 0x32, 0xE5, 0x0D,
7135+
0x8F, 0xDA, 0xC7, 0x5B, 0xA6, 0x80, 0x3F, 0x71, 0x50, 0x56,
7136+
0xD2, 0x88, 0xFC, 0x53, 0xC5, 0x11, 0x45, 0x1E, 0x8A, 0xB7,
7137+
0x0A, 0x83, 0x9E, 0x89, 0x63, 0x24, 0x3E, 0x8C, 0xBD, 0xED,
7138+
0xEC, 0xF4, 0x19, 0x32, 0x13, 0xCF, 0xE7, 0xDD, 0xE6, 0x84,
7139+
0xED, 0xE7, 0xF7, 0xF9, 0x50, 0x2F, 0x7B, 0xAC, 0x7D, 0xF9,
7140+
0x0F, 0x61, 0xD1, 0xF7, 0x59, 0xF0, 0x91, 0x73, 0x26, 0x5A,
7141+
0xBA, 0x24, 0xC8, 0x49, 0x86, 0xC1, 0x1A, 0x42, 0x68, 0x70,
7142+
0xBF, 0x94, 0x69, 0xD0, 0xD5, 0x26, 0x7E, 0x3C, 0xA9, 0x69,
7143+
0x6F, 0xB1, 0xCC, 0xDF, 0x4D, 0xED, 0x91, 0x6D, 0xDF, 0x45,
7144+
0x71, 0xF0, 0x88, 0x69, 0x74, 0x49, 0x2C, 0x5E, 0x77, 0xED,
7145+
0x92, 0x36, 0x7F, 0x1A, 0x83, 0x36, 0x42, 0x17, 0x5A, 0xDA,
7146+
0x91
7147+
};
7148+
#define sizeof_cn_ip_literal_der (sizeof(cn_ip_literal_der))
7149+
7150+
/* ./certs/test/cn-ip-wildcard.der */
7151+
static const unsigned char cn_ip_wildcard_der[] =
7152+
{
7153+
0x30, 0x82, 0x02, 0xAB, 0x30, 0x82, 0x01, 0x93, 0x02, 0x14,
7154+
0x3A, 0x4E, 0xFC, 0xF1, 0x5F, 0xCB, 0xE3, 0x6A, 0xAE, 0x7F,
7155+
0xD6, 0x79, 0xBD, 0x40, 0xC9, 0x64, 0x41, 0xC6, 0xF0, 0x56,
7156+
0x30, 0x0D, 0x06, 0x09, 0x2A, 0x86, 0x48, 0x86, 0xF7, 0x0D,
7157+
0x01, 0x01, 0x0B, 0x05, 0x00, 0x30, 0x12, 0x31, 0x10, 0x30,
7158+
0x0E, 0x06, 0x03, 0x55, 0x04, 0x03, 0x0C, 0x07, 0x2A, 0x2E,
7159+
0x30, 0x2E, 0x30, 0x2E, 0x31, 0x30, 0x1E, 0x17, 0x0D, 0x32,
7160+
0x36, 0x30, 0x34, 0x30, 0x38, 0x32, 0x30, 0x32, 0x35, 0x33,
7161+
0x33, 0x5A, 0x17, 0x0D, 0x33, 0x36, 0x30, 0x34, 0x30, 0x35,
7162+
0x32, 0x30, 0x32, 0x35, 0x33, 0x33, 0x5A, 0x30, 0x12, 0x31,
7163+
0x10, 0x30, 0x0E, 0x06, 0x03, 0x55, 0x04, 0x03, 0x0C, 0x07,
7164+
0x2A, 0x2E, 0x30, 0x2E, 0x30, 0x2E, 0x31, 0x30, 0x82, 0x01,
7165+
0x22, 0x30, 0x0D, 0x06, 0x09, 0x2A, 0x86, 0x48, 0x86, 0xF7,
7166+
0x0D, 0x01, 0x01, 0x01, 0x05, 0x00, 0x03, 0x82, 0x01, 0x0F,
7167+
0x00, 0x30, 0x82, 0x01, 0x0A, 0x02, 0x82, 0x01, 0x01, 0x00,
7168+
0xB9, 0xCC, 0x99, 0xF7, 0xBF, 0x7C, 0x4F, 0xEC, 0x7F, 0xE6,
7169+
0x17, 0x4E, 0xE3, 0xD9, 0xE5, 0x25, 0x7D, 0xAB, 0xA8, 0x66,
7170+
0xB0, 0x4D, 0x41, 0x5C, 0x20, 0xD8, 0x67, 0xF5, 0xA3, 0xCD,
7171+
0x9E, 0x12, 0x7F, 0x09, 0x00, 0xEB, 0x6B, 0xFC, 0x7E, 0x14,
7172+
0x10, 0xA0, 0x10, 0x2E, 0x1F, 0xE8, 0xAD, 0xEC, 0xE8, 0x86,
7173+
0x54, 0xA2, 0xC4, 0x58, 0x65, 0x26, 0x95, 0x76, 0xA1, 0xE1,
7174+
0x02, 0x52, 0x81, 0xCB, 0x7E, 0x8E, 0xB2, 0x31, 0xC9, 0x58,
7175+
0x9A, 0xDC, 0x69, 0xAB, 0x8D, 0x23, 0xCD, 0x96, 0x19, 0x1C,
7176+
0x68, 0x69, 0xB5, 0x7D, 0x23, 0xE3, 0x58, 0xE6, 0x26, 0xCC,
7177+
0x05, 0x40, 0xD2, 0xA9, 0xB1, 0x09, 0x9C, 0xC8, 0x4A, 0xFC,
7178+
0x0A, 0x20, 0xBA, 0xC0, 0x12, 0x3B, 0x97, 0x44, 0x2B, 0x30,
7179+
0x50, 0x86, 0x0B, 0x27, 0x13, 0x76, 0xB5, 0xF7, 0x80, 0xF0,
7180+
0xF2, 0xF0, 0x93, 0x3B, 0x8D, 0xA8, 0x4F, 0xA3, 0xA9, 0xD2,
7181+
0xEA, 0xD3, 0xC3, 0xCB, 0xCC, 0x70, 0xA0, 0x0B, 0xC7, 0xC6,
7182+
0x3E, 0xC9, 0x27, 0x4C, 0xB5, 0x23, 0x35, 0x6C, 0xB0, 0x30,
7183+
0xA2, 0xC1, 0x6D, 0x07, 0xD0, 0x9B, 0x55, 0x6A, 0xF9, 0x18,
7184+
0xF0, 0x30, 0x74, 0x3F, 0xF6, 0x17, 0x85, 0xB7, 0xCF, 0xA5,
7185+
0xD4, 0x91, 0xAA, 0x54, 0x85, 0xEC, 0xAE, 0xC5, 0x32, 0xF2,
7186+
0xB0, 0x21, 0x5A, 0x90, 0x22, 0x66, 0x8B, 0x4B, 0x0D, 0xC3,
7187+
0x57, 0x81, 0x86, 0xF2, 0xBB, 0xD2, 0x3B, 0x8C, 0xFC, 0xEE,
7188+
0xBD, 0xED, 0xF0, 0xFB, 0xA5, 0xE1, 0x91, 0x5A, 0x68, 0x07,
7189+
0x60, 0x38, 0x38, 0xE7, 0x48, 0xE3, 0x83, 0xD6, 0xAF, 0xF0,
7190+
0x03, 0x7E, 0x2E, 0x95, 0x0C, 0x33, 0xCF, 0x13, 0xE9, 0xEC,
7191+
0xE7, 0xA4, 0x5E, 0xED, 0x02, 0xAE, 0xF2, 0x30, 0x6F, 0x3F,
7192+
0xC4, 0x1B, 0x3A, 0x0A, 0xE8, 0xD3, 0x66, 0x32, 0xD6, 0xFD,
7193+
0x58, 0x3A, 0x65, 0x93, 0x99, 0xC7, 0x02, 0x03, 0x01, 0x00,
7194+
0x01, 0x30, 0x0D, 0x06, 0x09, 0x2A, 0x86, 0x48, 0x86, 0xF7,
7195+
0x0D, 0x01, 0x01, 0x0B, 0x05, 0x00, 0x03, 0x82, 0x01, 0x01,
7196+
0x00, 0x7F, 0x3A, 0xF8, 0x93, 0x41, 0x6F, 0xAA, 0xB7, 0xCA,
7197+
0x17, 0x81, 0xA7, 0x3E, 0x9F, 0x0C, 0x6D, 0x14, 0x7B, 0x6F,
7198+
0x13, 0xF8, 0xBF, 0x63, 0x6E, 0x28, 0x57, 0x0B, 0x9A, 0xC2,
7199+
0x2A, 0x88, 0xC0, 0x35, 0x4B, 0xE3, 0x77, 0x31, 0x61, 0xFF,
7200+
0xB4, 0x03, 0xE6, 0x11, 0x80, 0x1F, 0x35, 0x65, 0xF6, 0x47,
7201+
0x94, 0xE6, 0xB9, 0x60, 0x1E, 0xAE, 0x9C, 0x90, 0xE8, 0x53,
7202+
0x8A, 0x46, 0x61, 0x28, 0xFA, 0x4B, 0xE0, 0x71, 0x98, 0xF4,
7203+
0x9E, 0xC8, 0x31, 0x98, 0x27, 0x71, 0x6E, 0x3C, 0x85, 0x15,
7204+
0x6D, 0x56, 0x20, 0x3B, 0x16, 0xE7, 0x64, 0xB8, 0x51, 0x9A,
7205+
0x72, 0x75, 0xA1, 0xD2, 0x2F, 0xCF, 0x2B, 0x61, 0xA2, 0xA8,
7206+
0x8B, 0x59, 0x27, 0x4C, 0x18, 0x59, 0x33, 0xBF, 0x9E, 0x5C,
7207+
0xEF, 0xBE, 0x71, 0x62, 0x62, 0x20, 0xC8, 0xDC, 0xAF, 0x74,
7208+
0xAA, 0x7B, 0xAA, 0xAF, 0x37, 0x81, 0x65, 0xCA, 0xF1, 0x7D,
7209+
0xD4, 0x58, 0x11, 0xD7, 0x18, 0xF7, 0x50, 0xA2, 0xA8, 0x89,
7210+
0x90, 0x7C, 0x30, 0xDE, 0x2E, 0xF6, 0xBD, 0x3E, 0xBF, 0x14,
7211+
0x1E, 0xD4, 0x85, 0x8C, 0x38, 0x1C, 0xA4, 0x26, 0xB7, 0x86,
7212+
0xE5, 0x17, 0xFC, 0x67, 0x93, 0x86, 0x1C, 0x1F, 0x91, 0x6F,
7213+
0x8C, 0x99, 0xA6, 0x7F, 0x93, 0x92, 0xDB, 0x45, 0x75, 0xBB,
7214+
0xB0, 0x78, 0xA3, 0x8B, 0x67, 0xF7, 0x94, 0x26, 0xAC, 0xB9,
7215+
0x4A, 0xCA, 0x1F, 0x73, 0xFC, 0x52, 0x78, 0xB8, 0x14, 0x02,
7216+
0xBF, 0x69, 0x6F, 0x70, 0x21, 0xAE, 0xD4, 0x12, 0x4F, 0xD1,
7217+
0x9F, 0xE6, 0x56, 0x11, 0x80, 0x39, 0x66, 0xE0, 0xD4, 0x56,
7218+
0x5B, 0x32, 0xC6, 0x6C, 0xB8, 0xD2, 0xF4, 0x23, 0x7F, 0xBB,
7219+
0x62, 0x2F, 0x5D, 0x67, 0x37, 0x38, 0x74, 0xCA, 0xB3, 0x3F,
7220+
0x17, 0x53, 0x97, 0xA4, 0xBD, 0xDA, 0x26, 0x6A, 0xB3, 0xD9,
7221+
0x9F, 0xAC, 0xD2, 0x58, 0x4F, 0x24, 0x8C
7222+
};
7223+
#define sizeof_cn_ip_wildcard_der (sizeof(cn_ip_wildcard_der))
7224+
7225+
#endif /* OPENSSL_EXTRA && !NO_RSA */
7226+
70727227
#endif /* WOLFSSL_CERTS_TEST_H */
70737228

0 commit comments

Comments
 (0)