Skip to content

Request.schema() validates singleRequestExtensions as a single Extension instead of [0] EXPLICIT Extensions #454

@nrtmr1211

Description

@nrtmr1211

singleRequestExtensions is defined in RFC 6960 §4.1.1 as [0] EXPLICIT Extensions, but the current Request.schema() validates it as a single Extension.

Expected: singleRequestExtensions is a context-specific constructed tag [0] wrapping an Extensions SEQUENCE (SEQUENCE OF Extension).
Actual: It’s validated as a single Extension, which rejects otherwise valid requests and leads to:

Error: Object's schema was not verified against input data for OCSPRequest

Note: toSchema() already emits an Extensions SEQUENCE under [0], creating an encode/decode mismatch. I have a patch ready that switches the validator from Extension.schema to Extensions.schema.

Metadata

Metadata

Assignees

No one assigned

    Labels

    No labels
    No labels

    Type

    No type

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions