Attention is currently required from: laforge.

Hoernchen has posted comments on this change by Hoernchen. ( https://gerrit.osmocom.org/c/pysim/+/40467?usp=email )

Change subject: smdpp: validate eid ......................................................................

Patch Set 1:

(1 comment)

File osmo-smdpp.py:

https://gerrit.osmocom.org/c/pysim/+/40467/comment/de695b98_c3bd272f?usp=ema... : PS1, Line 76: Returns 'O' for old variant

note that all of the existing code covers SGP.22 v2.x and hence only supports "O". […]

I had to look at the weird abuse of nameconstraints which always gets treated like a name in openssl if it just slightly looks like it could be a name and interferes with convenient verification so I wondered if someone felt like doing it properly in the newer versions so I just added that as well and gave it a try with 3.x certs. In practice the only other change is a few more intermediate certs, so it should still work with newer versions, the actual length of the chain does not really matter after all (unless constrained by pathlen).