x509-parser
x509-parser copied to clipboard
Switch verify feature from ring to openssl?
Followup of #69
Ring is a nice library, but it is not sure it is the best for our purpose: x509-parser
needs to be able to verify all kind of cryptographic signatures (even old/deprecated/not ideal but correct algorithms). ring
aims at providing a secure by default API, but our criteria is compatibility with previous implementations, so openssl
may be a better choice.
fwiw the new ring 0.17 cross-compiles easier, which is handy for our project, but apparently it needs a higher minimum Rust version https://github.com/rusticata/x509-parser/pull/148/commits/5132fdc51bfe14406ecbfd6f01a9592dad51eca1
but apparently it needs a higher minimum Rust version
Indeed :-) There's some ongoing discussion in https://github.com/rusticata/x509-parser/pull/148