fixes #11723 -- add a comment for another source of bad certs (#11724)

pyca · Oct 8, 2024 · 9d90c4b · 9d90c4b
1 parent 714538e
commit 9d90c4b
Showing 1 changed file with 2 additions and 0 deletions.
diff --git a/src/rust/src/x509/certificate.rs b/src/rust/src/x509/certificate.rs
@@ -467,6 +467,8 @@ fn warn_if_invalid_params(
         | AlgorithmParameters::DsaWithSha256(Some(..))
         | AlgorithmParameters::DsaWithSha384(Some(..))
         | AlgorithmParameters::DsaWithSha512(Some(..)) => {
+            // This can also be triggered by an Intel On Die certificate
+            // https://github.com/pyca/cryptography/issues/11723
             let warning_cls = types::DEPRECATED_IN_41.get(py)?;
             pyo3::PyErr::warn_bound(
                 py,