commit dc22090671acdc815597831b5e69eea97fe49e1c
author Andrzej Kurek <andrzej.kurek@arm.com> Tue Apr 25 02:29:00 2023 -0400
committer Andrzej Kurek <andrzej.kurek@arm.com> Wed May 17 15:23:56 2023 -0400
tree 37c0d4a6c9a32b9946b15b8b3bc72cac43c77577
parent 446e53d401af619272a8ea2015e0e044bcc36318

Return an error on an unsupported SubjectAltName

Signed-off-by: Andrzej Kurek <andrzej.kurek@arm.com>

library/x509write_crt.c

diff --git a/library/x509write_crt.c b/library/x509write_crt.c
index 63f490d..aa4b907 100644
--- a/library/x509write_crt.c
+++ b/library/x509write_crt.c
@@ -190,8 +190,8 @@
                 break;
             }
             default:
-                /* Not supported - skip. */
-                break;
+                /* Not supported - return. */
+                return MBEDTLS_ERR_X509_FEATURE_UNAVAILABLE;
         }
     }
 
@@ -249,8 +249,9 @@
                                                                     MBEDTLS_X509_SAN_DIRECTORY_NAME));
                 break;
             default:
-                /* Skip unsupported names. */
-                break;
+                /* Error out on an unsupported SAN */
+                ret = MBEDTLS_ERR_X509_FEATURE_UNAVAILABLE;
+                goto cleanup;
         }
         cur = cur->next;
         len += single_san_len;