[Bug 1129471] kernel 5.0.1-1-default: Problem loading X.509 certificate -65

http://bugzilla.opensuse.org/show_bug.cgi?id=1129471 http://bugzilla.opensuse.org/show_bug.cgi?id=1129471#c15 Joey Lee changed: What |Removed |Added ---------------------------------------------------------------------------- Status|RESOLVED |REOPENED Resolution|WONTFIX |--- --- Comment #15 from Joey Lee --- (In reply to Joey Lee from comment #14)

The DisablePW and ABO used a obsolete OID for Authority Key Identifier. It's already obsoleted before 1997:

X509v3 extensions: 2.5.29.1:

0<..P...)....d..c.X...0.1.0...U....DisablePW......B...Ib&..7..

More information here: http://www.oid-info.com/get/2.5.29.1

Now the OID of Authority Key Identifier is 2.5.29.35 which is supported by kernel now.

I will looking at that if we want print a warning message in kernel when I have time.

Set this issue to WONTFIX.

I have re-opened this issue because I didn't see "Extension:" log in dmesg after I enabled dynamic debugging log of x509_cert_parser. Using obsolete OID is bad. But it's may not the root cause of -65. In case that I missed any other problem. I re-opened this issue and tracing more detail. -- You are receiving this mail because: You are on the CC list for the bug.