libressl-4.0.1

Unexpected verifications

These testcases were expected to fail, but succeeded instead.

Testcase	Context
crl::crlnumber-missing	N/A
cve::cve-2025-61727	N/A
pathlen::max-chain-depth-0-exhausted	N/A
rfc5280::aki::critical-aki	N/A
rfc5280::aki::leaf-missing-aki	N/A
rfc5280::aki::intermediate-missing-aki	N/A
rfc5280::aki::cross-signed-root-missing-aki	N/A
rfc5280::eku::ee-eku-empty	N/A
rfc5280::nc::permitted-dns-match-noncritical	N/A
rfc5280::nc::excluded-self-issued-leaf	N/A
rfc5280::nc::not-allowed-in-ee-noncritical	N/A
rfc5280::nc::not-allowed-in-ee-critical	N/A
rfc5280::nc::nc-forbids-othername	N/A
rfc5280::nc::nc-forbids-dnsname-wildcard-san	N/A
rfc5280::pc::ica-noncritical-pc	N/A
rfc5280::san::noncritical-with-empty-subject	N/A
rfc5280::san::underscore-dns	N/A
rfc5280::serial::too-long	N/A
rfc5280::serial::zero	N/A
rfc5280::serial::negative	N/A
rfc5280::ski::root-missing-ski	N/A
rfc5280::ski::intermediate-missing-ski	N/A
rfc5280::ca-empty-subject	N/A
rfc5280::unknown-critical-extension-root	N/A
rfc5280::root-missing-basic-constraints	N/A
rfc5280::root-non-critical-basic-constraints	N/A
rfc5280::leaf-ku-keycertsign	N/A
webpki::aki::root-with-aki-missing-keyidentifier	N/A
webpki::aki::root-with-aki-authoritycertissuer	N/A
webpki::aki::root-with-aki-authoritycertserialnumber	N/A
webpki::aki::root-with-aki-all-fields	N/A
webpki::aki::root-with-aki-ski-mismatch	N/A
webpki::cn::ipv4-hex-mismatch	N/A
webpki::cn::ipv4-leading-zeros-mismatch	N/A
webpki::cn::ipv6-uppercase-mismatch	N/A
webpki::cn::ipv6-uncompressed-mismatch	N/A
webpki::cn::ipv6-non-rfc5952-mismatch	N/A
webpki::cn::punycode-not-in-san	N/A
webpki::cn::utf8-vs-punycode-mismatch	N/A
webpki::cn::not-in-san	N/A
webpki::cn::case-mismatch	N/A
webpki::eku::ee-anyeku	N/A
webpki::eku::ee-critical-eku	N/A
webpki::eku::ee-without-eku	N/A
webpki::eku::root-has-eku	N/A
webpki::nc::intermediate-permitted-excluded-subtrees-both-null	N/A
webpki::nc::intermediate-permitted-excluded-subtrees-both-empty-sequences	N/A
webpki::san::no-san	N/A
webpki::san::san-critical-with-nonempty-subject	N/A
webpki::explicit-curve	N/A
webpki::malformed-aia	N/A
webpki::forbidden-dsa-root	N/A
webpki::forbidden-dsa-leaf	N/A
webpki::forbidden-rsa-not-divisable-by-8-in-root	N/A
webpki::forbidden-rsa-key-not-divisable-by-8-in-leaf	N/A
webpki::v1-cert	N/A
webpki::ee-basicconstraints-ca	N/A
webpki::ca-as-leaf	N/A
bettertls::nameconstraints::tc736	N/A
bettertls::nameconstraints::tc737	N/A
bettertls::nameconstraints::tc738	N/A
bettertls::nameconstraints::tc742	N/A
bettertls::nameconstraints::tc743	N/A
bettertls::nameconstraints::tc744	N/A
bettertls::nameconstraints::tc745	N/A
bettertls::nameconstraints::tc746	N/A
bettertls::nameconstraints::tc747	N/A
bettertls::nameconstraints::tc751	N/A
bettertls::nameconstraints::tc752	N/A
bettertls::nameconstraints::tc753	N/A
bettertls::nameconstraints::tc754	N/A
bettertls::nameconstraints::tc755	N/A
bettertls::nameconstraints::tc756	N/A
bettertls::nameconstraints::tc760	N/A
bettertls::nameconstraints::tc761	N/A
bettertls::nameconstraints::tc762	N/A
bettertls::nameconstraints::tc763	N/A
bettertls::nameconstraints::tc764	N/A
bettertls::nameconstraints::tc765	N/A
bettertls::nameconstraints::tc769	N/A
bettertls::nameconstraints::tc770	N/A
bettertls::nameconstraints::tc771	N/A
bettertls::nameconstraints::tc772	N/A
bettertls::nameconstraints::tc773	N/A
bettertls::nameconstraints::tc774	N/A
bettertls::nameconstraints::tc778	N/A
bettertls::nameconstraints::tc779	N/A
bettertls::nameconstraints::tc780	N/A
bettertls::nameconstraints::tc781	N/A
bettertls::nameconstraints::tc782	N/A
bettertls::nameconstraints::tc783	N/A
bettertls::nameconstraints::tc787	N/A
bettertls::nameconstraints::tc788	N/A
bettertls::nameconstraints::tc789	N/A
bettertls::nameconstraints::tc817	N/A
bettertls::nameconstraints::tc819	N/A
bettertls::nameconstraints::tc823	N/A
bettertls::nameconstraints::tc825	N/A
bettertls::nameconstraints::tc826	N/A
bettertls::nameconstraints::tc828	N/A
bettertls::nameconstraints::tc832	N/A
bettertls::nameconstraints::tc834	N/A
bettertls::nameconstraints::tc844	N/A
bettertls::nameconstraints::tc846	N/A
bettertls::nameconstraints::tc850	N/A
bettertls::nameconstraints::tc852	N/A
bettertls::nameconstraints::tc853	N/A
bettertls::nameconstraints::tc855	N/A
bettertls::nameconstraints::tc859	N/A
bettertls::nameconstraints::tc861	N/A
bettertls::nameconstraints::tc898	N/A
bettertls::nameconstraints::tc899	N/A
bettertls::nameconstraints::tc904	N/A
bettertls::nameconstraints::tc905	N/A
bettertls::nameconstraints::tc916	N/A
bettertls::nameconstraints::tc917	N/A
bettertls::nameconstraints::tc922	N/A
bettertls::nameconstraints::tc923	N/A
bettertls::nameconstraints::tc925	N/A
bettertls::nameconstraints::tc926	N/A
bettertls::nameconstraints::tc931	N/A
bettertls::nameconstraints::tc932	N/A
bettertls::nameconstraints::tc943	N/A
bettertls::nameconstraints::tc944	N/A
bettertls::nameconstraints::tc949	N/A
bettertls::nameconstraints::tc950	N/A
bettertls::pathbuilding::tc5	N/A
bettertls::pathbuilding::tc12	N/A
bettertls::pathbuilding::tc38	N/A
bettertls::pathbuilding::tc44	N/A
bettertls::pathbuilding::tc71	N/A
bettertls::pathbuilding::tc77	N/A

Unexpected failures

These testcases were expected to succeed, but failed instead.

Testcase	Context
pathlen::max-chain-depth-1	certificate chain too long
pathlen::max-chain-depth-1-self-issued	certificate chain too long
rfc5280::nc::permitted-self-issued	subject issuer mismatch
bettertls::nameconstraints::tc1714	excluded subtree violation
bettertls::nameconstraints::tc1715	excluded subtree violation
bettertls::nameconstraints::tc1716	excluded subtree violation
bettertls::nameconstraints::tc1723	excluded subtree violation
bettertls::nameconstraints::tc1724	excluded subtree violation
bettertls::nameconstraints::tc1725	excluded subtree violation
bettertls::nameconstraints::tc1732	excluded subtree violation
bettertls::nameconstraints::tc1733	excluded subtree violation
bettertls::nameconstraints::tc1734	excluded subtree violation
bettertls::nameconstraints::tc1735	permitted subtree violation
bettertls::nameconstraints::tc1736	permitted subtree violation
bettertls::nameconstraints::tc1737	permitted subtree violation
bettertls::nameconstraints::tc1741	excluded subtree violation
bettertls::nameconstraints::tc1742	excluded subtree violation
bettertls::nameconstraints::tc1743	excluded subtree violation
bettertls::nameconstraints::tc1744	permitted subtree violation
bettertls::nameconstraints::tc1745	permitted subtree violation
bettertls::nameconstraints::tc1746	permitted subtree violation
bettertls::nameconstraints::tc1750	excluded subtree violation
bettertls::nameconstraints::tc1751	excluded subtree violation
bettertls::nameconstraints::tc1752	excluded subtree violation
bettertls::nameconstraints::tc1753	permitted subtree violation
bettertls::nameconstraints::tc1754	permitted subtree violation
bettertls::nameconstraints::tc1755	permitted subtree violation
bettertls::nameconstraints::tc1759	excluded subtree violation
bettertls::nameconstraints::tc1760	excluded subtree violation
bettertls::nameconstraints::tc1761	excluded subtree violation
bettertls::nameconstraints::tc1795	excluded subtree violation
bettertls::nameconstraints::tc1797	excluded subtree violation
bettertls::nameconstraints::tc1804	excluded subtree violation
bettertls::nameconstraints::tc1806	excluded subtree violation
bettertls::nameconstraints::tc1816	permitted subtree violation
bettertls::nameconstraints::tc1818	permitted subtree violation
bettertls::nameconstraints::tc1822	excluded subtree violation
bettertls::nameconstraints::tc1824	excluded subtree violation
bettertls::nameconstraints::tc1825	permitted subtree violation
bettertls::nameconstraints::tc1827	permitted subtree violation
bettertls::nameconstraints::tc1831	excluded subtree violation
bettertls::nameconstraints::tc1833	excluded subtree violation
bettertls::nameconstraints::tc1876	excluded subtree violation
bettertls::nameconstraints::tc1877	excluded subtree violation
bettertls::nameconstraints::tc1894	excluded subtree violation
bettertls::nameconstraints::tc1895	excluded subtree violation
bettertls::nameconstraints::tc1897	permitted subtree violation
bettertls::nameconstraints::tc1898	permitted subtree violation
bettertls::nameconstraints::tc1903	excluded subtree violation
bettertls::nameconstraints::tc1904	excluded subtree violation
bettertls::nameconstraints::tc1915	permitted subtree violation
bettertls::nameconstraints::tc1916	permitted subtree violation
bettertls::nameconstraints::tc1921	excluded subtree violation
bettertls::nameconstraints::tc1922	excluded subtree violation
bettertls::nameconstraints::tc5194	excluded subtree violation
bettertls::nameconstraints::tc5196	excluded subtree violation
bettertls::nameconstraints::tc5203	excluded subtree violation
bettertls::nameconstraints::tc5205	excluded subtree violation
bettertls::nameconstraints::tc5221	excluded subtree violation
bettertls::nameconstraints::tc5223	excluded subtree violation
bettertls::nameconstraints::tc5230	excluded subtree violation
bettertls::nameconstraints::tc5232	excluded subtree violation
bettertls::nameconstraints::tc5245	permitted subtree violation
bettertls::nameconstraints::tc5247	permitted subtree violation
bettertls::nameconstraints::tc5248	excluded subtree violation
bettertls::nameconstraints::tc5250	excluded subtree violation
bettertls::nameconstraints::tc5251	permitted subtree violation
bettertls::nameconstraints::tc5253	permitted subtree violation
bettertls::nameconstraints::tc5254	permitted subtree violation
bettertls::nameconstraints::tc5256	permitted subtree violation
bettertls::nameconstraints::tc5257	excluded subtree violation
bettertls::nameconstraints::tc5259	excluded subtree violation
bettertls::nameconstraints::tc5260	permitted subtree violation
bettertls::nameconstraints::tc5262	permitted subtree violation
bettertls::nameconstraints::tc5680	excluded subtree violation
bettertls::nameconstraints::tc5682	excluded subtree violation
bettertls::nameconstraints::tc5689	excluded subtree violation
bettertls::nameconstraints::tc5691	excluded subtree violation
bettertls::nameconstraints::tc5731	permitted subtree violation
bettertls::nameconstraints::tc5733	permitted subtree violation
bettertls::nameconstraints::tc5734	excluded subtree violation
bettertls::nameconstraints::tc5736	excluded subtree violation
bettertls::nameconstraints::tc5740	permitted subtree violation
bettertls::nameconstraints::tc5742	permitted subtree violation
bettertls::nameconstraints::tc5743	excluded subtree violation
bettertls::nameconstraints::tc5745	excluded subtree violation
bettertls::nameconstraints::tc5926	excluded subtree violation
bettertls::nameconstraints::tc5928	excluded subtree violation
bettertls::nameconstraints::tc5935	excluded subtree violation
bettertls::nameconstraints::tc5937	excluded subtree violation
bettertls::nameconstraints::tc5947	permitted subtree violation
bettertls::nameconstraints::tc5949	permitted subtree violation
bettertls::nameconstraints::tc5950	permitted subtree violation
bettertls::nameconstraints::tc5952	permitted subtree violation
bettertls::nameconstraints::tc5953	excluded subtree violation
bettertls::nameconstraints::tc5955	excluded subtree violation
bettertls::nameconstraints::tc5956	permitted subtree violation
bettertls::nameconstraints::tc5958	permitted subtree violation
bettertls::nameconstraints::tc5959	permitted subtree violation
bettertls::nameconstraints::tc5961	permitted subtree violation
bettertls::nameconstraints::tc5962	excluded subtree violation
bettertls::nameconstraints::tc5964	excluded subtree violation
bettertls::nameconstraints::tc5980	excluded subtree violation
bettertls::nameconstraints::tc5982	excluded subtree violation
bettertls::nameconstraints::tc5989	excluded subtree violation
bettertls::nameconstraints::tc5991	excluded subtree violation
bettertls::nameconstraints::tc6169	excluded subtree violation
bettertls::nameconstraints::tc6171	excluded subtree violation
bettertls::nameconstraints::tc6178	excluded subtree violation
bettertls::nameconstraints::tc6180	excluded subtree violation
bettertls::nameconstraints::tc6190	permitted subtree violation
bettertls::nameconstraints::tc6192	permitted subtree violation
bettertls::nameconstraints::tc6196	excluded subtree violation
bettertls::nameconstraints::tc6198	excluded subtree violation
bettertls::nameconstraints::tc6199	permitted subtree violation
bettertls::nameconstraints::tc6201	permitted subtree violation
bettertls::nameconstraints::tc6205	excluded subtree violation
bettertls::nameconstraints::tc6207	excluded subtree violation

Skipped tests

These testcases were skipped due to a harness or implementation limitation.

Testcase	Context
rfc5280::nc::invalid-email-address	non-SERVER testcases not supported yet
rfc5280::nc::nc-permits-invalid-email-san	non-SERVER testcases not supported yet
rfc5280::nc::nc-permits-email-exact	non-SERVER testcases not supported yet
rfc5280::nc::nc-permits-email-domain	non-SERVER testcases not supported yet
rfc5280::nc::nc-permits-email-literal-asterisk-exact-match	non-SERVER testcases not supported yet
rfc5280::nc::nc-permits-email-literal-asterisk-rejects-user	non-SERVER testcases not supported yet
rfc5280::nc::nc-permits-email-literal-asterisk-rejects-subdomain	non-SERVER testcases not supported yet
rfc5280::nc::nc-permits-email-literal-double-asterisk	non-SERVER testcases not supported yet
rfc5280::nc::nc-permits-email-literal-double-asterisk-rejects-single	non-SERVER testcases not supported yet
rfc5280::nc::nc-permits-email-literal-mid-asterisk	non-SERVER testcases not supported yet