openssl-3.2.3

Unexpected verifications

These testcases were expected to fail, but succeeded instead.

Testcase	Context
rfc5280::aki::cross-signed-root-missing-aki	N/A
rfc5280::eku::ee-eku-empty	N/A
rfc5280::nc::permitted-dns-match-noncritical	N/A
rfc5280::nc::invalid-dnsname-leading-period	N/A
rfc5280::nc::not-allowed-in-ee-noncritical	N/A
rfc5280::nc::not-allowed-in-ee-critical	N/A
rfc5280::nc::nc-permits-invalid-dns-san	N/A
rfc5280::pc::ica-noncritical-pc	N/A
rfc5280::san::underscore-dns	N/A
rfc5280::serial::too-long	N/A
rfc5280::serial::zero	N/A
rfc5280::serial::negative	N/A
webpki::aki::root-with-aki-missing-keyidentifier	N/A
webpki::aki::root-with-aki-authoritycertissuer	N/A
webpki::aki::root-with-aki-authoritycertserialnumber	N/A
webpki::aki::root-with-aki-all-fields	N/A
webpki::aki::root-with-aki-ski-mismatch	N/A
webpki::eku::ee-anyeku	N/A
webpki::eku::ee-critical-eku	N/A
webpki::eku::ee-without-eku	N/A
webpki::eku::root-has-eku	N/A
webpki::nc::intermediate-permitted-excluded-subtrees-both-null	N/A
webpki::nc::intermediate-permitted-excluded-subtrees-both-empty-sequences	N/A
webpki::san::no-san	N/A
webpki::san::san-critical-with-nonempty-subject	N/A
webpki::malformed-aia	N/A
webpki::forbidden-dsa-root	N/A
webpki::forbidden-dsa-leaf	N/A
webpki::forbidden-rsa-not-divisable-by-8-in-root	N/A
webpki::forbidden-rsa-key-not-divisable-by-8-in-leaf	N/A
webpki::v1-cert	N/A
webpki::ee-basicconstraints-ca	N/A
webpki::ca-as-leaf	N/A
bettertls::nameconstraints::tc736	N/A
bettertls::nameconstraints::tc737	N/A
bettertls::nameconstraints::tc738	N/A
bettertls::nameconstraints::tc742	N/A
bettertls::nameconstraints::tc743	N/A
bettertls::nameconstraints::tc744	N/A
bettertls::nameconstraints::tc745	N/A
bettertls::nameconstraints::tc746	N/A
bettertls::nameconstraints::tc747	N/A
bettertls::nameconstraints::tc751	N/A
bettertls::nameconstraints::tc752	N/A
bettertls::nameconstraints::tc753	N/A
bettertls::nameconstraints::tc754	N/A
bettertls::nameconstraints::tc755	N/A
bettertls::nameconstraints::tc756	N/A
bettertls::nameconstraints::tc760	N/A
bettertls::nameconstraints::tc761	N/A
bettertls::nameconstraints::tc762	N/A
bettertls::nameconstraints::tc763	N/A
bettertls::nameconstraints::tc764	N/A
bettertls::nameconstraints::tc765	N/A
bettertls::nameconstraints::tc769	N/A
bettertls::nameconstraints::tc770	N/A
bettertls::nameconstraints::tc771	N/A
bettertls::nameconstraints::tc772	N/A
bettertls::nameconstraints::tc773	N/A
bettertls::nameconstraints::tc774	N/A
bettertls::nameconstraints::tc778	N/A
bettertls::nameconstraints::tc779	N/A
bettertls::nameconstraints::tc780	N/A
bettertls::nameconstraints::tc781	N/A
bettertls::nameconstraints::tc782	N/A
bettertls::nameconstraints::tc783	N/A
bettertls::nameconstraints::tc787	N/A
bettertls::nameconstraints::tc788	N/A
bettertls::nameconstraints::tc789	N/A
bettertls::nameconstraints::tc817	N/A
bettertls::nameconstraints::tc819	N/A
bettertls::nameconstraints::tc823	N/A
bettertls::nameconstraints::tc825	N/A
bettertls::nameconstraints::tc826	N/A
bettertls::nameconstraints::tc828	N/A
bettertls::nameconstraints::tc832	N/A
bettertls::nameconstraints::tc834	N/A
bettertls::nameconstraints::tc844	N/A
bettertls::nameconstraints::tc846	N/A
bettertls::nameconstraints::tc850	N/A
bettertls::nameconstraints::tc852	N/A
bettertls::nameconstraints::tc853	N/A
bettertls::nameconstraints::tc855	N/A
bettertls::nameconstraints::tc859	N/A
bettertls::nameconstraints::tc861	N/A
bettertls::nameconstraints::tc898	N/A
bettertls::nameconstraints::tc899	N/A
bettertls::nameconstraints::tc904	N/A
bettertls::nameconstraints::tc905	N/A
bettertls::nameconstraints::tc916	N/A
bettertls::nameconstraints::tc917	N/A
bettertls::nameconstraints::tc922	N/A
bettertls::nameconstraints::tc923	N/A
bettertls::nameconstraints::tc925	N/A
bettertls::nameconstraints::tc926	N/A
bettertls::nameconstraints::tc931	N/A
bettertls::nameconstraints::tc932	N/A
bettertls::nameconstraints::tc943	N/A
bettertls::nameconstraints::tc944	N/A
bettertls::nameconstraints::tc949	N/A
bettertls::nameconstraints::tc950	N/A
bettertls::pathbuilding::tc5	N/A
bettertls::pathbuilding::tc12	N/A
bettertls::pathbuilding::tc38	N/A

Unexpected failures

These testcases were expected to succeed, but failed instead.

Testcase	Context
pathlen::max-chain-depth-1-self-issued	certificate chain too long
rfc5280::nc::nc-forbids-alternate-chain-ica	unable to get local issuer certificate
rfc5280::nc::nc-forbids-same-chain-ica	excluded subtree violation
rfc5280::validity::notafter-exact	certificate has expired
rfc5280::validity::notafter-fractional	certificate has expired
bettertls::nameconstraints::tc5194	excluded subtree violation
bettertls::nameconstraints::tc5196	excluded subtree violation
bettertls::nameconstraints::tc5203	excluded subtree violation
bettertls::nameconstraints::tc5205	excluded subtree violation
bettertls::nameconstraints::tc5221	excluded subtree violation
bettertls::nameconstraints::tc5223	excluded subtree violation
bettertls::nameconstraints::tc5230	excluded subtree violation
bettertls::nameconstraints::tc5232	excluded subtree violation
bettertls::nameconstraints::tc5245	permitted subtree violation
bettertls::nameconstraints::tc5247	permitted subtree violation
bettertls::nameconstraints::tc5248	permitted subtree violation
bettertls::nameconstraints::tc5250	permitted subtree violation
bettertls::nameconstraints::tc5251	permitted subtree violation
bettertls::nameconstraints::tc5253	permitted subtree violation
bettertls::nameconstraints::tc5254	permitted subtree violation
bettertls::nameconstraints::tc5256	permitted subtree violation
bettertls::nameconstraints::tc5257	permitted subtree violation
bettertls::nameconstraints::tc5259	permitted subtree violation
bettertls::nameconstraints::tc5260	permitted subtree violation
bettertls::nameconstraints::tc5262	permitted subtree violation
bettertls::nameconstraints::tc5926	excluded subtree violation
bettertls::nameconstraints::tc5928	excluded subtree violation
bettertls::nameconstraints::tc5935	excluded subtree violation
bettertls::nameconstraints::tc5937	excluded subtree violation
bettertls::nameconstraints::tc5947	permitted subtree violation
bettertls::nameconstraints::tc5949	permitted subtree violation
bettertls::nameconstraints::tc5950	permitted subtree violation
bettertls::nameconstraints::tc5952	permitted subtree violation
bettertls::nameconstraints::tc5953	permitted subtree violation
bettertls::nameconstraints::tc5955	permitted subtree violation
bettertls::nameconstraints::tc5956	permitted subtree violation
bettertls::nameconstraints::tc5958	permitted subtree violation
bettertls::nameconstraints::tc5959	permitted subtree violation
bettertls::nameconstraints::tc5961	permitted subtree violation
bettertls::nameconstraints::tc5962	permitted subtree violation
bettertls::nameconstraints::tc5964	permitted subtree violation
bettertls::nameconstraints::tc5980	excluded subtree violation
bettertls::nameconstraints::tc5982	excluded subtree violation
bettertls::nameconstraints::tc5989	excluded subtree violation
bettertls::nameconstraints::tc5991	excluded subtree violation
bettertls::nameconstraints::tc7405	permitted subtree violation
bettertls::nameconstraints::tc7407	permitted subtree violation
bettertls::nameconstraints::tc7408	permitted subtree violation
bettertls::nameconstraints::tc7410	permitted subtree violation
bettertls::nameconstraints::tc7411	permitted subtree violation
bettertls::nameconstraints::tc7413	permitted subtree violation
bettertls::nameconstraints::tc7414	permitted subtree violation
bettertls::nameconstraints::tc7416	permitted subtree violation
bettertls::nameconstraints::tc7417	permitted subtree violation
bettertls::nameconstraints::tc7419	permitted subtree violation
bettertls::nameconstraints::tc7420	permitted subtree violation
bettertls::nameconstraints::tc7422	permitted subtree violation
bettertls::nameconstraints::tc7432	permitted subtree violation
bettertls::nameconstraints::tc7434	permitted subtree violation
bettertls::nameconstraints::tc7435	permitted subtree violation
bettertls::nameconstraints::tc7437	permitted subtree violation
bettertls::nameconstraints::tc7438	permitted subtree violation
bettertls::nameconstraints::tc7440	permitted subtree violation
bettertls::nameconstraints::tc7441	permitted subtree violation
bettertls::nameconstraints::tc7443	permitted subtree violation
bettertls::nameconstraints::tc7444	permitted subtree violation
bettertls::nameconstraints::tc7446	permitted subtree violation
bettertls::nameconstraints::tc7447	permitted subtree violation
bettertls::nameconstraints::tc7449	permitted subtree violation
bettertls::nameconstraints::tc8134	permitted subtree violation
bettertls::nameconstraints::tc8136	permitted subtree violation
bettertls::nameconstraints::tc8137	permitted subtree violation
bettertls::nameconstraints::tc8139	permitted subtree violation
bettertls::nameconstraints::tc8140	permitted subtree violation
bettertls::nameconstraints::tc8142	permitted subtree violation
bettertls::nameconstraints::tc8143	permitted subtree violation
bettertls::nameconstraints::tc8145	permitted subtree violation
bettertls::nameconstraints::tc8146	permitted subtree violation
bettertls::nameconstraints::tc8148	permitted subtree violation
bettertls::nameconstraints::tc8149	permitted subtree violation
bettertls::nameconstraints::tc8151	permitted subtree violation
bettertls::nameconstraints::tc8161	permitted subtree violation
bettertls::nameconstraints::tc8163	permitted subtree violation
bettertls::nameconstraints::tc8164	permitted subtree violation
bettertls::nameconstraints::tc8166	permitted subtree violation
bettertls::nameconstraints::tc8167	permitted subtree violation
bettertls::nameconstraints::tc8169	permitted subtree violation
bettertls::nameconstraints::tc8170	permitted subtree violation
bettertls::nameconstraints::tc8172	permitted subtree violation
bettertls::nameconstraints::tc8173	permitted subtree violation
bettertls::nameconstraints::tc8175	permitted subtree violation
bettertls::nameconstraints::tc8176	permitted subtree violation
bettertls::nameconstraints::tc8178	permitted subtree violation
bettertls::pathbuilding::tc2	unable to get local issuer certificate
bettertls::pathbuilding::tc23	unable to get local issuer certificate
bettertls::pathbuilding::tc30	unable to get local issuer certificate
bettertls::pathbuilding::tc31	unable to get local issuer certificate
bettertls::pathbuilding::tc32	unable to get local issuer certificate
bettertls::pathbuilding::tc33	unable to get local issuer certificate
bettertls::pathbuilding::tc34	unable to get local issuer certificate
bettertls::pathbuilding::tc35	unable to get local issuer certificate
bettertls::pathbuilding::tc50	permitted subtree violation
bettertls::pathbuilding::tc52	invalid CA certificate
bettertls::pathbuilding::tc53	invalid CA certificate
bettertls::pathbuilding::tc54	CA signature digest algorithm too weak
bettertls::pathbuilding::tc56	permitted subtree violation
bettertls::pathbuilding::tc58	invalid CA certificate
bettertls::pathbuilding::tc59	invalid CA certificate
bettertls::pathbuilding::tc60	CA signature digest algorithm too weak
bettertls::pathbuilding::tc61	unable to get local issuer certificate
bettertls::pathbuilding::tc62	unable to get local issuer certificate
bettertls::pathbuilding::tc63	unable to get local issuer certificate
bettertls::pathbuilding::tc64	unable to get local issuer certificate
bettertls::pathbuilding::tc65	unable to get local issuer certificate
bettertls::pathbuilding::tc66	unable to get local issuer certificate
bettertls::pathbuilding::tc67	unable to get local issuer certificate
bettertls::pathbuilding::tc68	unable to get local issuer certificate

Skipped tests

These testcases were skipped due to a harness or implementation limitation.

Testcase	Context
rfc5280::nc::invalid-email-address	non-SERVER testcases not supported yet
rfc5280::nc::nc-permits-invalid-email-san	non-SERVER testcases not supported yet
rfc5280::nc::nc-permits-email-exact	non-SERVER testcases not supported yet
rfc5280::nc::nc-permits-email-domain	non-SERVER testcases not supported yet