nx_x509_san_test.nx
buildroot/runtime/nx_x509_san_test.nx
about
nx_x509_san_test.nx -- KAT for the SAN extension walk + hostname
match primitive. Exercises every verdict path:
- exact dNSName match
- leftmost-label wildcard match
- wildcard rejection for non-leftmost labels
- bad pattern (non-leftmost or mid-label '*')
- cert without v3 extensions -> NO_EXTENSIONS
- cert with extensions but no SAN OID -> NO_SAN
- malformed extension SEQUENCE -> BAD_FORMAT
- sealed verdict gate
expect_exit: 0
license_tier: ORIGINAL
dependencies 3 imports · 0 importers
imports: nx_syscalls.nxnx_x509.nxnx_x509_san.nx
imported by: nobody (leaf or entry point)
structs
| none |
consts
| none |
functions
| 22 | func write_bytes(buf: *u8, off: i64, src: *u8, n: i64) -> i64 |
| 33 | func emit_dnsname(buf: *u8, off: i64, name: *u8, name_len: i64) -> i64 |
| 44 | func main() -> i64 |