From https://github.com/DMTF/SPDM-WG/issues/4416.
In a DER-encoded certificate chain, if a sequence element is equal to its default value then it is not present in the final encoding. However, BASIC_CONSTRAINTS_STRING_FALSE_CASE2 violates this when checking the leaf certificate.
|
/*leaf cert basic_constraints false case2: CA: false */ |
|
#define BASIC_CONSTRAINTS_STRING_FALSE_CASE2 {0x30, 0x03, 0x01, 0x01, 0x00} |
Will wait first for resolution of https://github.com/DMTF/SPDM-WG/issues/4416 before fixing this, since it is still an open issue.