code wiki / (root) / nx_x509_san_test.nx

nx_x509_san_test.nx

buildroot/runtime/nx_x509_san_test.nx

12049 B259 linesdepth 5pulls 5 transitivereach 0 importersview sourcekind gate/prooftopic x509
docsdependenciesstructsconstsfunctions

about

nx_x509_san_test.nx -- KAT for the SAN extension walk + hostname match primitive. Exercises every verdict path: - exact dNSName match - leftmost-label wildcard match - wildcard rejection for non-leftmost labels - bad pattern (non-leftmost or mid-label '*') - cert without v3 extensions -> NO_EXTENSIONS - cert with extensions but no SAN OID -> NO_SAN - malformed extension SEQUENCE -> BAD_FORMAT - sealed verdict gate expect_exit: 0 license_tier: ORIGINAL

dependencies 3 imports · 0 importers

nx_syscalls.nx nx_x509.nx nx_x509_san.nx nx_x509_san_test.nx

imports: nx_syscalls.nxnx_x509.nxnx_x509_san.nx

imported by: nobody (leaf or entry point)

call flow from main pre-order; caps 40 nodes / depth 6 declared; ↻ = already shown

main sys_mmap hostname_wildcard_match count_byte bytes_eq_ci ascii_to_lower emit_dnsname x509_san_locate sys_mmap ↻ asn1_expect_tag sys_mmap ↻ asn1_read_tlv_header asn1_read_tag asn1_read_length x509_san_match_hostname sys_mmap ↻ x509_san_locate ↻ hostname_wildcard_match ↻ nx_x509_san_verdict_is_val

structs

none

consts

none

functions

22func write_bytes(buf: *u8, off: i64, src: *u8, n: i64) -> i64
33func emit_dnsname(buf: *u8, off: i64, name: *u8, name_len: i64) -> i64
called by 1: main
44func main() -> i64
calls 6: sys_mmaphostname_wildcard_matchemit_dnsnamex509_san_locatex509_san_match_hostnamenx_x509_san_verdict_is_valid