keylime.cert_utils - WARNING - Failed to parse PEM data with python-cryptography: error parsing asn1 value: ParseError { kind: InvalidSetOrdering, location: ["RawCertificate::tbs_cert", "TbsCertificate::issuer", 0, 2] }

[Jingshui1037]

Is your issue a feature request? If so, please raise it as an enhancement

No

Environment

• Keylime version: master

Description

Parsing the following certs in the tpm_cert_store will cause these warnings when using keylime_tenant with user-selected PCRs monitoring.

• NTC2.pem
• NUVO_1111.pem
• NUVO_0100.pem
• NUVO_2111.pem
• NUVO_2110.pem
• NUVO_1110.pem
• NTC1.pem

Can we fix these warnings?

[sergio-correia]

Related: pyca/cryptography#7189

[THS-on]

Those warnings are expected and we could make them maybe more readable. @ansasaki @maugustosilva what do you think?

[maugustosilva]

We should/could make it more readable indeed, but functionally there is nothing "wrong" here, and WARNING is the correct debug level.