webpki icon indicating copy to clipboard operation
webpki copied to clipboard

Published 20 hours ago • verified publisher icon briansmith

Handling of certificate revocation lists (CRLs)

Open Niederb opened this issue 2 years ago • 0 comments

I need to implement a certificate check that also checks for revoked certificates with X.509 CRLs (RFC 5280). I would like to use webpki to do this. For the moment it would be enough if I can verify the certificate path of a X.509 CRL to the root CA. Basically I would like an implementation of `EndEntityCert::verify_is_valid_tls_server_cert(..)] where the EndEntityCert is a CRL.

  • I saw some comments that support for CRL is planned but as far as I can see this is currently not supported. Is this correct?
  • Maybe you are aware of another crate that supports this? x509-cert allows to parse RCL but the verification part is missing

Niederb avatar Oct 24 '22 14:10 Niederb