certifikit

certifikit copied to clipboard

Fetch CRL Info.

2

Reads the CRL extension and outputs the response size and type.

yschimke

Re-Encoding of Certificate to from X509Certificate differs

2

Certificate / TBSCertificate / SEQUENCE OF / SET OF / AttributeTypeAndValue AttributeTypeAndValue(type=2.5.4.6, value=US) This ordering of UTF-8 and PrintableString are not bi-directional ``` private val attributeTypeAndValue: BasicDerAdapter = Adapters.sequence( "AttributeTypeAndValue",...

yschimke

``` ./cft ~/Downloads/idea-chain.pem CN: Idea Pin: sha256/0f54dfa5bbbfa66b586eec5b7d0742a1cec80f2fda4b977a3b4aacb82877e32b SAN: [hex=7f000001], [hex=ac16bf43], localhost, yschimke-pc, yschimke-pc.localdomain OU: Development Key Usage: DigitalSignature, KeyEncipherment Ext Key Usage: serverAuth Valid: 2020-11-28T15:42:21Z..2021-02-26T15:42:21Z (2 months) ``` file contains...

yschimke

Scoop installer for Windows

2

``` scoop install cft.json ```

yschimke

[feature] Certificate revocation checks to CLI

3

We can't practically implement in OkHttp, but this is exactly the sort of thing we should flag in the CLI, since browsers will fail these requests. https://github.com/square/okhttp/issues/2348

yschimke

Proper type safe accessors

1

https://github.com/cashapp/certifikit/pull/14 subjectAlternativeNames -> "I think this might be better as its own object with lists of hostnames and IP addresses?"

yschimke

From https://github.com/cashapp/certifikit/pull/39/files ``` data class ExtKeyUsage(val objectIdentifier: String) { ... } internal val extKeyUsage: BasicDerAdapter = OBJECT_IDENTIFIER.asSequenceOf() ``` Something like ``` internal val extKeyUsage: BasicDerAdapter = OBJECT_IDENTIFIER.mapped().asSequenceOf() ```

yschimke