code wiki / (root) / nx_tls13_client_validate_certificate_test.nx

nx_tls13_client_validate_certificate_test.nx

buildroot/runtime/nx_tls13_client_validate_certificate_test.nx

3891 B85 linesdepth 16pulls 76 transitivereach 0 importersview sourcekind gate/prooftopic tls13
docsdependenciesstructsconstsfunctions

about

nx_tls13_client_validate_certificate_test.nx -- KAT for the TLS<->X.509 bridge primitive. Verifies the verdict-mapping logic: every pipeline outcome routes to the right TLS-client vocabulary verdict. The underlying pipeline's end-to-end correctness is proven by nx_https_pipeline_e2e_test (commit 62de0c42); this KAT focuses on the bridge's dispatch surface. expect_exit: 0 license_tier: ORIGINAL

dependencies 5 imports · 0 importers

nx_syscalls.nx nx_x509.nx nx_x509_trust_store.nx nx_https_cert_pipeline.nx nx_tls13_client_validate_certifica nx_tls13_client_validate_certi

imports: nx_syscalls.nxnx_x509.nxnx_x509_trust_store.nxnx_https_cert_pipeline.nxnx_tls13_client_validate_certificate.nx

imported by: nobody (leaf or entry point)

call flow from main pre-order; caps 40 nodes / depth 6 declared; ↻ = already shown

main sys_mmap trust_store_alloc sys_mmap ↻ nx_tls13_client_validate_c nx_tls13_cv_memeq nx_https_cert_pipeline_ver sys_mmap ↻ tls13_parse_certificate_ch tls13_auth_check_handshake tls_read_u16_be x509_parse sys_mmap ↻ asn1_cursor_init asn1_expect_tag sys_mmap ↻ asn1_read_tlv_header asn1_read_tag asn1_read_length asn1_read_length ↻ x509_read_tlv sys_mmap ↻ asn1_expect_tag ↻ x509_read_alg_id sys_mmap ↻ asn1_expect_tag ↻ trust_store_lookup_by_subj nx_x509_dn_match _pipeline_verify_n sys_mmap ↻ tls13_parse_certificate_ch ↻ x509_parse ↻ x509_leaf_check sys_mmap ↻ x509_parse ↻ x509_validity_check sys_mmap ↻ x509_validity_get x509_san_match_hostname sys_mmap ↻

structs

none

consts

none

functions

19func zero_cert(cert: *X509Cert) -> i64
34func main() -> i64