webpki icon indicating copy to clipboard operation
webpki copied to clipboard

Published 20 hours ago • verified publisher icon briansmith

Add support for verifying certificate chain with EKU

Open xiaoyuxlu opened this issue 3 years ago • 2 comments

There is a use case(spdm) where Certificate Extended Key Usage(EKU) Oid is customized, and EndCertEntity is used to verify certificate chain with customized EKU. But the current EndCertEntity does not expose the verify function with eku. So I made a patch to expose a function called verify_is_valid_cert_with_eku for EndCertEntity.

What do you think of this? Any chance we can see add this API in webpki?

xiaoyuxlu avatar Oct 27 '21 12:10 xiaoyuxlu

@briansmith, would you please review this patch to see if there is any comment?

jyao1 avatar Apr 13 '22 11:04 jyao1

It looks like this pull request has been open for quite a while. It looks like it is in need of review. What is the status of the review and any remaining approval process work? Thanks.

dnovick avatar Apr 13 '22 11:04 dnovick