some websites append a newline character to a DER-encoded binary blob

src/libstrongswan/asn1/asn1.c

@@ -677,14 +677,24 @@ bool is_asn1(chunk_t blob)
 		DBG2("  file content is not binary ASN.1");
 		return FALSE;
 	}
+
 	len = asn1_length(&blob);
-	if (len != blob.len)
+
+	/* exact match */
+	if (len == blob.len)
 	{
+		return TRUE;
+	}
+
+	/* some websites append a surplus newline character to the blob */
+	if (len + 1 == blob.len && *(blob.ptr + len) == '\n')
+	{
+		return TRUE;
+	}
+
 	DBG2("  file size does not match ASN.1 coded length");
 	return FALSE;
 }
-	return TRUE;
-}
 
 /**
  * codes ASN.1 lengths up to a size of 16'777'215 bytes

src/pluto/asn1.c

@@ -758,13 +758,23 @@ is_asn1(chunk_t blob)
 	)
 	return FALSE;
     }
+
     len = asn1_length(&blob);
-    if (len != blob.len)
+ 
+    /* exact match */
+    if (len == blob.len)
     {
+	return TRUE;
+    }
+
+    /* some websites append a surplus newline character to the blob */
+    if (len + 1 == blob.len && *(blob.ptr + len) == '\n')
+    {
+	return TRUE;
+    }
+
     DBG(DBG_PARSING,
 	DBG_log("  file size does not match ASN.1 coded length");
     )
     return FALSE;
 }
-    return TRUE;
-}