ServerAuthenticatorAttestationResponse test case failing .

[abhijaikp99]

F-10 Send ServerAuthenticatorAttestationResponse with FULL "packed" attestation, with attStmt.x5c containing full chain, and check that server returns an error

For the above test case, the server does not return an error.

I have imported all the metadata JSON statements from the FIDO conformance tool.

The server succeeds even allowUntrustedAttestation is true/false.

Another test case which also fails.

F-2 Send ServerAuthenticatorAttestationResponse with SELF "packed" attestation, that contains full attestation, and check that server returns an error

Currently, I am in the process of certifying my server in FIDO conformance tool.
Please help

[emlun]

This is largely a duplicate of issue #94.

Another test case which also fails.

F-2 Send ServerAuthenticatorAttestationResponse with SELF "packed" attestation, that contains full attestation, and check that server returns an error

This sounds like it should fail with allowUntrustedAttestation(true) (the default), but should pass with allowUntrustedAttestation(false). Have you tried this test case with allowUntrustedAttestation(false)?

[abhijaikp99]

The server does not return an error even if allowUntrustedAttestation is true/false.

Is there any solution that solves this issue?

[emlun]

I don't know. As discussed in #94, we haven't yet spent any effort trying to make the library pass those conformance tests.