add rfc5280::san::ip-in-dns

[woodruffw]

This adds a case where an IP address is encoded as a DNSName, which is invalid.

Signed-off-by: William Woodruff [email protected]

[github-actions]

No regressions found.

[github-actions]

New testcases

There are new testcases in this change.

gnutls-certtool-3.7.3

Testcase	Expected Result	Actual Result	Context
rfc5280::san::ip-in-dns	FAILURE	FAILURE	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.

openssl-3.0.15

Testcase	Expected Result	Actual Result	Context
rfc5280::san::ip-in-dns	FAILURE	FAILURE	IP address mismatch

openssl-3.3.2

Testcase	Expected Result	Actual Result	Context
rfc5280::san::ip-in-dns	FAILURE	FAILURE	IP address mismatch

openssl-3.2.3

Testcase	Expected Result	Actual Result	Context
rfc5280::san::ip-in-dns	FAILURE	FAILURE	IP address mismatch

rustls-webpki

Testcase	Expected Result	Actual Result	Context
rfc5280::san::ip-in-dns	FAILURE	FAILURE	subject name validation failed

certvalidator-0.11.1

Testcase	Expected Result	Actual Result	Context
rfc5280::san::ip-in-dns	FAILURE	FAILURE	The X.509 certificate provided is not valid for 8.8.8.8. Valid hostnames include: 8.8.8.8

gocryptox509-go1.23.3

Testcase	Expected Result	Actual Result	Context
rfc5280::san::ip-in-dns	FAILURE	FAILURE

openssl-3.4.0

Testcase	Expected Result	Actual Result	Context
rfc5280::san::ip-in-dns	FAILURE	FAILURE	IP address mismatch

pyca-cryptography-44.0.0

Testcase	Expected Result	Actual Result	Context
rfc5280::san::ip-in-dns	FAILURE	FAILURE	validation failed: leaf certificate has no matching subjectAltName (encountered processing <Certificate(subject=<Name(CN=example.com)>, ...)>)

openssl-3.1.7

Testcase	Expected Result	Actual Result	Context
rfc5280::san::ip-in-dns	FAILURE	FAILURE	IP address mismatch

openssl-1.1

Testcase	Expected Result	Actual Result	Context
rfc5280::san::ip-in-dns	FAILURE	FAILURE	IP address mismatch

rust-webpki

Testcase	Expected Result	Actual Result	Context
rfc5280::san::ip-in-dns	FAILURE	SKIPPED	implementation requires DNS peer names