x509 parser fails to parse mldsa and ed25519 certificates.

[feynhat]

Version

5.9.2

Description

I have configured with --enable-mldsa --enable-ed25519 --enable-wolfclu --enable-debug.

When I parse the certificates certs/mldsa/mldsa44-cert.pem or certs/ed25519/ca-ed25519.pem, the tail of the debug message gives:

wolfSSL Entering wolfSSL_BIO_write
        Subject: C=US, ST=Montana, L=Bozeman, O=wolfSSL, CN=ML-DSA-44
wolfSSL Entering wolfSSL_BIO_write
        Subject Public Key Info:
Unknown key type
unable to print certificate out
wolfSSL Entering wolfSSL_ERR_get_error_line_data
No Error found in queue
wolfSSL Entering wolfSSL_BIO_free
wolfSSL Entering wolfSSL_X509_free
wolfSSL Entering ExternalFreeX509
wolfSSL Entering wolfSSL_EVP_PKEY_free
Error returned: -1.
wolfSSL Entering wolfSSL_ERR_get_error_line_data
No Error found in queue
wolfSSL Entering wolfSSL_Cleanup
wolfSSL Entering wolfCrypt_Cleanup

It seems that the parser is having problem with the Subject Public Key Info.

Both of these certificates parse alright with openssl.

[kareem-wolfssl]

Hi @feynhat,

How exactly are you parsing these certs? Are you calling a specific API, if so which one? Or are you using wolfCLU, if so what is the full command?
Does using the most recent master help?
It would be helpful if you can add --enable-debug-trace-errcodes CFLAGS='-DWOLFSSL_DEBUG_ASN_TEMPLATE' and provide a full debug log.

[feynhat]

Hello Kareem,

Thanks for the comment. I should've clarified what I meant by 'parsing'. I am using wolfCLU to parse the certificate.

wolfssl x509 -in certs/mldsa/mldsa44-cert.pem -noout -text 2>error_dump.log

error_dump.log

I am attaching the error dump. I am using the current master configured with --enable-mldsa --enable-ed25519 --enable-debug --enable-debug-trace-errcodes CFLAGS='-DWOLFSSL_DEBUG_ASN_TEMPLATE'. Let me know if you need any more information.