rustls-webpki🔗

Unexpected verifications🔗

These testcases were expected to fail, but succeeded instead.

Testcase	Context
`rfc5280::aki::leaf-missing-aki`	N/A
`rfc5280::aki::intermediate-missing-aki`	N/A
`rfc5280::aki::cross-signed-root-missing-aki`	N/A
`rfc5280::nc::permitted-dns-match-noncritical`	N/A
`rfc5280::nc::invalid-dnsname-leading-period`	N/A
`rfc5280::nc::not-allowed-in-ee-noncritical`	N/A
`rfc5280::nc::not-allowed-in-ee-critical`	N/A
`rfc5280::pc::ica-noncritical-pc`	N/A
`rfc5280::san::noncritical-with-empty-subject`	N/A
`rfc5280::serial::too-long`	N/A
`rfc5280::serial::zero`	N/A
`rfc5280::ski::root-missing-ski`	N/A
`rfc5280::ski::intermediate-missing-ski`	N/A
`rfc5280::validity::expired-root`	N/A
`rfc5280::ee-empty-issuer`	N/A
`rfc5280::ca-empty-subject`	N/A
`rfc5280::root-missing-basic-constraints`	N/A
`rfc5280::root-non-critical-basic-constraints`	N/A
`rfc5280::root-inconsistent-ca-extensions`	N/A
`rfc5280::leaf-ku-keycertsign`	N/A
`webpki::aki::root-with-aki-missing-keyidentifier`	N/A
`webpki::aki::root-with-aki-authoritycertissuer`	N/A
`webpki::aki::root-with-aki-authoritycertserialnumber`	N/A
`webpki::aki::root-with-aki-all-fields`	N/A
`webpki::aki::root-with-aki-ski-mismatch`	N/A
`webpki::eku::ee-anyeku`	N/A
`webpki::eku::ee-critical-eku`	N/A
`webpki::eku::ee-without-eku`	N/A
`webpki::eku::root-has-eku`	N/A
`webpki::nc::intermediate-permitted-excluded-subtrees-both-null`	N/A
`webpki::nc::intermediate-permitted-excluded-subtrees-both-empty-sequences`	N/A
`webpki::san::san-critical-with-nonempty-subject`	N/A
`webpki::malformed-aia`	N/A
`webpki::forbidden-p192-leaf`	N/A
`webpki::forbidden-dsa-leaf`	N/A
`webpki::forbidden-weak-rsa-in-leaf`	N/A
`webpki::forbidden-rsa-not-divisable-by-8-in-root`	N/A
`webpki::forbidden-rsa-key-not-divisable-by-8-in-leaf`	N/A

Unexpected failures🔗

These testcases were expected to succeed, but failed instead.

Testcase	Context
`pathlen::validation-ignores-pathlen-in-leaf`	CaUsedAsEndEntity
`pathlen::self-issued-certs-pathlen`	InvalidSignatureForPublicKey
`rfc5280::nc::permitted-dn-match`	NameConstraintViolation
`rfc5280::nc::permitted-self-issued`	InvalidSignatureForPublicKey
`rfc5280::ca-as-leaf`	CaUsedAsEndEntity

Skipped tests🔗

These testcases were skipped due to a harness or implementation limitation.

Testcase	Context
`pathlen::max-chain-depth-0`	max-chain-depth testcases are not supported by this API
`pathlen::max-chain-depth-0-exhausted`	max-chain-depth testcases are not supported by this API
`pathlen::max-chain-depth-1`	max-chain-depth testcases are not supported by this API
`pathlen::max-chain-depth-1-exhausted`	max-chain-depth testcases are not supported by this API
`pathlen::max-chain-depth-1-self-issued`	max-chain-depth testcases are not supported by this API
`rfc5280::nc::invalid-email-address`	non-SERVER testcases not supported yet
`rfc5280::nc::nc-permits-invalid-email-san`	non-SERVER testcases not supported yet
`rfc5280::nc::nc-permits-email-exact`	non-SERVER testcases not supported yet
`rfc5280::nc::nc-permits-email-domain`	non-SERVER testcases not supported yet
`webpki::cryptographydotio-chain`	key_usage not supported yet
`webpki::cryptographydotio-chain-missing-intermediate`	key_usage not supported yet