pyca-cryptography-49.0.0

Unexpected verifications

These testcases were expected to fail, but succeeded instead.

Testcase	Context
webpki::aki::root-with-aki-authoritycertissuer	chain built successfully
webpki::aki::root-with-aki-authoritycertserialnumber	chain built successfully
webpki::aki::root-with-aki-all-fields	chain built successfully
webpki::cn::ipv4-hex-mismatch	chain built successfully
webpki::cn::ipv4-leading-zeros-mismatch	chain built successfully
webpki::cn::ipv6-uppercase-mismatch	chain built successfully
webpki::cn::ipv6-uncompressed-mismatch	chain built successfully
webpki::cn::ipv6-non-rfc5952-mismatch	chain built successfully
webpki::cn::punycode-not-in-san	chain built successfully
webpki::cn::utf8-vs-punycode-mismatch	chain built successfully
webpki::cn::not-in-san	chain built successfully
webpki::cn::case-mismatch	chain built successfully
webpki::forbidden-rsa-not-divisible-by-8-in-root	chain built successfully

Unexpected failures

These testcases were expected to succeed, but failed instead.

Testcase	Context
rfc9881::ml-dsa-44	validation failed: candidates exhausted: Forbidden public key algorithm: AlgorithmIdentifier { oid: DefinedByMarker(PhantomData), params: MlDsa44 }
rfc9881::ml-dsa-65	validation failed: candidates exhausted: Forbidden public key algorithm: AlgorithmIdentifier { oid: DefinedByMarker(PhantomData), params: MlDsa65 }
rfc9881::ml-dsa-87	validation failed: candidates exhausted: Forbidden public key algorithm: AlgorithmIdentifier { oid: DefinedByMarker(PhantomData), params: MlDsa87 }

Skipped tests

These testcases were skipped due to a harness or implementation limitation.

Testcase	Context
crl::revoked-certificate-with-crl	testcase skipped (explicit unsupported feature)
crl::crlnumber-missing	testcase skipped (explicit unsupported feature)
crl::certificate-not-on-crl	testcase skipped (explicit unsupported feature)
crl::certificate-serial-on-crl-different-issuer	testcase skipped (explicit unsupported feature)
crl::crlnumber-critical	testcase skipped (explicit unsupported feature)
crl::issuer-missing-crlsign	testcase skipped (explicit unsupported feature)
crl::issuer-no-keyusage-extension	testcase skipped (explicit unsupported feature)
crl::issuer-valid-crlsign-and-keycertsign	testcase skipped (explicit unsupported feature)
pathlen::validation-ignores-pathlen-in-leaf	testcase skipped (explicitly unsupported case)
pathlen::self-issued-certs-pathlen	testcase skipped (explicitly unsupported case)
pathlen::max-chain-depth-1-self-issued	testcase skipped (explicitly unsupported case)
pathological::pathological-chain-same-subject-same-key	testcase skipped (explicitly unsupported case)
rfc5280::aki::intermediate-missing-aki	testcase skipped (explicitly unsupported case)
rfc5280::aki::cross-signed-root-missing-aki	testcase skipped (explicit unsupported feature)
rfc5280::nc::permitted-dns-match-noncritical	testcase skipped (explicit unsupported feature)
rfc5280::nc::permitted-dn-mismatch	testcase skipped (explicit unsupported feature)
rfc5280::nc::excluded-dn-match	testcase skipped (explicit unsupported feature)
rfc5280::nc::permitted-dn-match	testcase skipped (explicit unsupported feature)
rfc5280::nc::permitted-dn-match-subject-san-mismatch	testcase skipped (explicit unsupported feature)
rfc5280::nc::excluded-dn-match-sub-mismatch	testcase skipped (explicit unsupported feature)
rfc5280::nc::invalid-email-address	non-SERVER cases not supported yet
rfc5280::nc::nc-permits-invalid-email-san	non-SERVER cases not supported yet
rfc5280::nc::nc-permits-email-exact	non-SERVER cases not supported yet
rfc5280::nc::nc-permits-email-domain	non-SERVER cases not supported yet
rfc5280::nc::nc-permits-email-literal-asterisk-exact-match	non-SERVER cases not supported yet
rfc5280::nc::nc-permits-email-literal-asterisk-rejects-user	non-SERVER cases not supported yet
rfc5280::nc::nc-permits-email-literal-asterisk-rejects-subdomain	non-SERVER cases not supported yet
rfc5280::nc::nc-permits-email-literal-double-asterisk	non-SERVER cases not supported yet
rfc5280::nc::nc-permits-email-literal-double-asterisk-rejects-single	non-SERVER cases not supported yet
rfc5280::nc::nc-permits-email-literal-mid-asterisk	non-SERVER cases not supported yet
rfc5280::pc::ica-noncritical-pc	testcase skipped (explicit unsupported feature)
rfc5280::serial::zero	testcase skipped (explicitly unsupported case)
rfc5280::ski::root-missing-ski	testcase skipped (explicitly unsupported case)
rfc5280::ski::intermediate-missing-ski	testcase skipped (explicitly unsupported case)
rfc5280::ca-as-leaf	testcase skipped (explicitly unsupported case)
rfc9881::ml-dsa-44-key-encipherment	testcase skipped (explicit unsupported feature)
rfc9881::ml-dsa-44-key-agreement	testcase skipped (explicit unsupported feature)
webpki::aki::root-with-aki-ski-mismatch	testcase skipped (explicitly unsupported case)
webpki::eku::ee-anyeku	testcase skipped (explicit unsupported feature)
webpki::eku::ee-critical-eku	testcase skipped (explicit unsupported feature)
webpki::eku::ee-without-eku	testcase skipped (explicit unsupported feature)
webpki::eku::root-has-eku	testcase skipped (explicit unsupported feature)
webpki::san::public-suffix-wildcard-san	testcase skipped (explicit unsupported feature)
webpki::san::public-suffix-multi-label-wildcard-san	testcase skipped (explicit unsupported feature)
webpki::san::public-suffix-private-namespace-wildcard-san	testcase skipped (explicit unsupported feature)
webpki::forbidden-p192-leaf	testcase skipped (explicit unsupported feature)
webpki::forbidden-dsa-leaf	testcase skipped (explicit unsupported feature)
webpki::forbidden-weak-rsa-in-leaf	testcase skipped (explicit unsupported feature)
webpki::forbidden-rsa-key-not-divisible-by-8-in-leaf	testcase skipped (explicit unsupported feature)