Name Constraints cert chain walk

[rlm2002]

Description

Implements chain walk to ParseCertRelative to perform Name Constraints check for certificate ancestors which applies every ancestor CA's name constraints to the cert under verification, per RFC 5280 §4.2.1.10. Previously only the immediate signer's NCs were enforced.

Walk runs whenever cert->ca is set and verification is enabled. FindSignerByAkidOrName helper performs AKID→SKID lookup with subjectNameHash validation. Lookup falls back to name-only when cert has no AKID extension. NO_SKID builds cannot disambiguate same-DN sibling CAs in the CM.

issuerNameHash ifdef widened to include !IGNORE_NAME_CONSTRAINTS

Adds authKeyIdHash + authKeyIdSet to Signer for AKID parent lookup.

WOLFSSL_MAX_CHAIN_DEPTH macro (default 20) bounds the walk and provides cycle/depth protection. Walk also terminates on self-loops and A→B→A two-step cycles.

CN-as-DNS fallback in ConfirmNameConstraints now skips CA certs since the convention (RFC 6125 §6.4.4) is scoped to leaf service identity

Adds regression tests and supporting cert chain.

• test_wolfSSL_CertManagerNameConstraint_skid_disambiguates loads a permissive same-DN sibling alongside the strict NC-bearing CA, requiring AKID→SKID disambiguation to pick the real signer
• test_wolfSSL_CertManagerNameConstraint_valid_chain verifies a leaf is accepted under a grandparent's permitted URI and rejected when violating it
• Cert/key fixtures under certs/test/nc-ancestor/ with gen-nc-ancestor.sh to regenerate from committed keys. SKID hash-table rows are pinned so the AKID-vs-name behavior is reproducibly observable

Fixes zd#21877, #21879, #21895

Testing

./configure --enable-all && make check

Checklist

• added tests
• updated/added doxygen
• updated appropriate READMEs
• Updated manual and documentation

[github-actions]

retest this please

[github-actions]

MemBrowse Memory Report

gcc-arm-cortex-m0plus

• FLASH: .text +176 B (+0.3%, 63,671 B / 262,144 B, total: 24% used)

gcc-arm-cortex-m3

• FLASH: .text +192 B (+0.2%, 121,601 B / 262,144 B, total: 46% used)

gcc-arm-cortex-m4

• FLASH: .text +192 B (+0.1%, 199,244 B / 262,144 B, total: 76% used)

gcc-arm-cortex-m4-baremetal

• FLASH: .text +192 B (+0.3%, 66,251 B / 262,144 B, total: 25% used)

gcc-arm-cortex-m4-crypto-only

• FLASH: .text +128 B (+0.1%, 173,802 B / 262,144 B, total: 66% used)

gcc-arm-cortex-m4-dtls13

• FLASH: .text +192 B (+0.1%, 179,992 B / 1,048,576 B, total: 17% used)

gcc-arm-cortex-m4-min-ecc

• FLASH: .text +128 B (+0.2%, 61,165 B / 262,144 B, total: 23% used)

gcc-arm-cortex-m4-openssl-compat

• FLASH: .text +256 B (+0.0%, 768,388 B / 1,048,576 B, total: 73% used)

gcc-arm-cortex-m4-pkcs7

• FLASH: .text +128 B (+0.1%, 211,501 B / 262,144 B, total: 81% used)

gcc-arm-cortex-m4-pq

• FLASH: .text +128 B (+0.0%, 278,064 B / 1,048,576 B, total: 27% used)

gcc-arm-cortex-m4-rsa-only

• FLASH: .text +192 B (+0.1%, 323,664 B / 1,048,576 B, total: 31% used)

gcc-arm-cortex-m4-sp-math

• FLASH: .text +128 B (+0.2%, 61,165 B / 262,144 B, total: 23% used)

gcc-arm-cortex-m4-tls12

• FLASH: .text +192 B (+0.2%, 122,381 B / 262,144 B, total: 47% used)

gcc-arm-cortex-m4-tls13

• FLASH: .text +192 B (+0.1%, 234,878 B / 262,144 B, total: 90% used)

gcc-arm-cortex-m7

• FLASH: .text +192 B (+0.1%, 199,244 B / 262,144 B, total: 76% used)

gcc-arm-cortex-m7-pq

• FLASH: .text +128 B (+0.0%, 278,640 B / 1,048,576 B, total: 27% used)

gcc-arm-cortex-m7-tls13

• FLASH: .text +192 B (+0.1%, 234,942 B / 262,144 B, total: 90% used)

linuxkm-pie

• Data: __patchable_function_entries +8 B (+0.0%, 24,296 B)

stm32-sim-stm32h753

• FLASH: .text +64 B (+0.0%, 181,748 B / 2,097,152 B, total: 9% used)
  No memory changes detected for:
• linuxkm-standard

[rlm2002]

Retest this please Jenkins: PRB-fips-repo-and-harness-test-v3-part2 failure

[rlm2002]

Retest this please Jenkins: PRB-fips-repo-and-harness-test-v3-part2 returned failure (FAIL-ingish...)