{"action":"created","issue":{"url":"https://api.github.com/repos/pyca/cryptography/issues/2525","labels_url":"https://api.github.com/repos/pyca/cryptography/issues/2525/labels{/name}","comments_url":"https://api.github.com/repos/pyca/cryptography/issues/2525/comments","events_url":"https://api.github.com/repos/pyca/cryptography/issues/2525/events","html_url":"https://github.com/pyca/cryptography/pull/2525","id":121918428,"number":2525,"title":"issue-2524","user":{"login":"nbastin","id":1588960,"avatar_url":"https://avatars.githubusercontent.com/u/1588960?v=3","gravatar_id":"","url":"https://api.github.com/users/nbastin","html_url":"https://github.com/nbastin","followers_url":"https://api.github.com/users/nbastin/followers","following_url":"https://api.github.com/users/nbastin/following{/other_user}","gists_url":"https://api.github.com/users/nbastin/gists{/gist_id}","starred_url":"https://api.github.com/users/nbastin/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/nbastin/subscriptions","organizations_url":"https://api.github.com/users/nbastin/orgs","repos_url":"https://api.github.com/users/nbastin/repos","events_url":"https://api.github.com/users/nbastin/events{/privacy}","received_events_url":"https://api.github.com/users/nbastin/received_events","type":"User","site_admin":false},"labels":[],"state":"open","locked":false,"assignee":null,"milestone":null,"comments":4,"created_at":"2015-12-13T13:16:55Z","updated_at":"2015-12-13T16:30:17Z","closed_at":null,"pull_request":{"url":"https://api.github.com/repos/pyca/cryptography/pulls/2525","html_url":"https://github.com/pyca/cryptography/pull/2525","diff_url":"https://github.com/pyca/cryptography/pull/2525.diff","patch_url":"https://github.com/pyca/cryptography/pull/2525.patch"},"body":"- Allows for any OID in access_method\r\n- Validates OIDs at creation time\r\n- Cleaned up all tests which used illegal OID values (other than those that should)\r\n- Added a test for arbitrary access_method OIDs"},"comment":{"url":"https://api.github.com/repos/pyca/cryptography/issues/comments/164274214","html_url":"https://github.com/pyca/cryptography/pull/2525#issuecomment-164274214","issue_url":"https://api.github.com/repos/pyca/cryptography/issues/2525","id":164274214,"user":{"login":"reaperhulk","id":161495,"avatar_url":"https://avatars.githubusercontent.com/u/161495?v=3","gravatar_id":"","url":"https://api.github.com/users/reaperhulk","html_url":"https://github.com/reaperhulk","followers_url":"https://api.github.com/users/reaperhulk/followers","following_url":"https://api.github.com/users/reaperhulk/following{/other_user}","gists_url":"https://api.github.com/users/reaperhulk/gists{/gist_id}","starred_url":"https://api.github.com/users/reaperhulk/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/reaperhulk/subscriptions","organizations_url":"https://api.github.com/users/reaperhulk/orgs","repos_url":"https://api.github.com/users/reaperhulk/repos","events_url":"https://api.github.com/users/reaperhulk/events{/privacy}","received_events_url":"https://api.github.com/users/reaperhulk/received_events","type":"User","site_admin":false},"created_at":"2015-12-13T16:30:17Z","updated_at":"2015-12-13T16:30:17Z","body":"Could you add a test verifying that we can successfully encode arbitrary OIDs using the CertificateBuilder? It should work fine with the current OpenSSL code, but a test will make sure we don't regress with other backends in the future.\r\n\r\nAlso, there are rules for OID values thanks to ASN.1 BER encoding, so we probably need to validate that. I believe the rules are that the second part cannot exceed 39 and the first must be {0, 1, 2}. If you attempt to encode values that violate this constraint in OpenSSL using `OBJ_txt2obj` (which is what we use under the covers to translate `ObjectIdentifier` when constructing certificate payloads) you'll get back a null pointer."}}