René's URL Explorer Experiment

{"@context":"https://schema.org","@type":"DiscussionForumPosting","headline":"Multiple certificates with the same subjectdn is still buggy","articleBody":"If multiple certificates with the same subjectdn are added to the store and used to verify, this can still fail based on the order they were placed in the store. I tried to fix this in https://github.com/jruby/jruby-openssl/pull/198.\r\n\r\nHere is a change to one of the jruby_openssl test cases (/jruby-openssl/src/test/ruby/x509/test_x509store.rb:424:in `test_verify_same_subject_ca'\r\n) that will reproduce the error:\r\n\r\n```\r\n--- a/src/test/ruby/x509/test_x509store.rb\r\n+++ b/src/test/ruby/x509/test_x509store.rb\r\n@@ -411,10 +411,10 @@ class TestX509Store \u003c TestCase\r\n     ee4_cert = issue_cert(@ee4, @dsa2, 20, ee_exts, ca4_cert, @rsa4, not_before: now - 60, not_after: now + 1800)\r\n\r\n     cert_store = OpenSSL::X509::Store.new\r\n-    cert_store.add_cert ca1_cert\r\n-    cert_store.add_cert ca2_cert\r\n-    cert_store.add_cert ca3_cert\r\n     cert_store.add_cert ca4_cert\r\n+    cert_store.add_cert ca3_cert\r\n+    cert_store.add_cert ca2_cert\r\n+    cert_store.add_cert ca1_cert\r\n\r\n     ok = cert_store.verify(ee1_cert)\r\n     assert_equal 'certificate signature failure', cert_store.error_string\r\n````\r\n\r\nI just reversed the order in which the ca certificates are added to the store and the test will fail.","author":{"url":"https://github.com/jpsikorra","@type":"Person","name":"jpsikorra"},"datePublished":"2024-09-05T09:19:04.000Z","interactionStatistic":{"@type":"InteractionCounter","interactionType":"https://schema.org/CommentAction","userInteractionCount":0},"url":"https://github.com/314/jruby-openssl/issues/314"}