@@ -69,6 +69,7 @@ def data_file(*name):
|
69 | 69 | BADKEY = data_file("badkey.pem") |
70 | 70 | NOKIACERT = data_file("nokia.pem") |
71 | 71 | NULLBYTECERT = data_file("nullbytecert.pem") |
| 72 | +TALOS_INVALID_CRLDP = data_file("talos-2019-0758.pem") |
72 | 73 | |
73 | 74 | DHFILE = data_file("dh1024.pem") |
74 | 75 | BYTES_DHFILE = os.fsencode(DHFILE) |
@@ -252,6 +253,27 @@ def test_parse_cert(self):
|
252 | 253 | self.assertEqual(p['crlDistributionPoints'], |
253 | 254 | ('http://SVRIntl-G3-crl.verisign.com/SVRIntlG3.crl',)) |
254 | 255 | |
| 256 | +def test_parse_cert_CVE_2019_5010(self): |
| 257 | +p = ssl._ssl._test_decode_cert(TALOS_INVALID_CRLDP) |
| 258 | +if support.verbose: |
| 259 | +sys.stdout.write("\n" + pprint.pformat(p) + "\n") |
| 260 | +self.assertEqual( |
| 261 | +p, |
| 262 | + { |
| 263 | +'issuer': ( |
| 264 | + (('countryName', 'UK'),), (('commonName', 'cody-ca'),)), |
| 265 | +'notAfter': 'Jun 14 18:00:58 2028 GMT', |
| 266 | +'notBefore': 'Jun 18 18:00:58 2018 GMT', |
| 267 | +'serialNumber': '02', |
| 268 | +'subject': ((('countryName', 'UK'),), |
| 269 | + (('commonName', |
| 270 | +'codenomicon-vm-2.test.lal.cisco.com'),)), |
| 271 | +'subjectAltName': ( |
| 272 | + ('DNS', 'codenomicon-vm-2.test.lal.cisco.com'),), |
| 273 | +'version': 3 |
| 274 | + } |
| 275 | + ) |
| 276 | + |
255 | 277 | def test_parse_cert_CVE_2013_4238(self): |
256 | 278 | p = ssl._ssl._test_decode_cert(NULLBYTECERT) |
257 | 279 | if support.verbose: |
|