rustls / webpki

WebPKI X.509 Certificate Validation in Rust

https://docs.rs/rustls-webpki/latest/webpki/

rustls/webpki Issues

Unable to use CRL without "issuing distribution point"
Updated 2 months ago6
How to specify Key Usage and not Extended Key Usage when doing certificate verification?
Updated 3 months ago5
Support self-signed certificate
Closed 7 months ago4
Support verification of stapled OCSP responses
Updated 6 months ago
0.102 release planning
Closed 6 months ago10
RingAlgorithm does not derive `Debug`
Closed 6 months ago3
Integrate ToB x509-limbo test suite
Updated 7 months ago1
Support anyPolicy Certificate Policy
Updated 7 months ago5
Perform more validation in extract_trust_anchor()
Closed 7 months ago10
Add support for accessing an EndEntityCert's spki
Closed 8 months ago6
webpki with Ring 0.17 and untrusted 0.9
Closed 8 months ago9
Support verifying/accessing SCTs inside certificates
Updated 8 months ago
v0.101.5 broke semver for CertificateRevocationList.verify_signature
Closed 9 months ago6
Refactor verify.rs list_cert_dns_names to avoid allocations.
Closed 9 months ago
Restore `GeneralDnsNameRef`, use in `GeneralName::DnsName`.
Updated 9 months ago
Support URI in SAN
Updated 9 months ago10
rustls-webpki returns an error when parsing DNS names from a certificate generated using cfssl
Closed 9 months ago20
doc: attach note for deprecations
Closed 10 months ago3
crls: ensure that a certificate is covered by a CRL
Closed 10 months ago10
webpki compiled without default features and the alloc feature enabled builds the optional ring feature
Closed 10 months ago
webpki compiled without default features and the alloc feature enabled depends on std
Closed 10 months ago4
Consider making *ring* dependency optional
Closed 10 months ago1
doc: show feature requirements in rustdoc style
Closed a year ago
Broken on 32-bit platforms
Closed a year ago3
CRL optimization: rework to avoid linear scan of CRL contents
Closed a year ago1
clarify license: does BSD-3-Clause actually apply to crate sources?
Closed a year ago10
Breaking change: replace DnsNameAsRef<[u8]> w/ AsRef<str>
Closed a year ago
Clean up deprecated API in time module
Closed a year ago
CRL support tasks
Closed a year ago6
Options for improving build_chain error specificity
Closed a year ago3
About in the sidebar links to outdated docs
Closed a year ago1
Trust anchor and intermediate certificate key usage support
Closed a year ago
Support for parsing large ASN.1 values
Closed a year ago1
Support for identifying the correct CRL for a subject, and finding a serial in the CRL.
Closed a year ago2
Allow providing CRLs for use with end entity client certificate validation.
Closed a year ago1
CRL optimization: verify CRL signatures once, up-front.
Updated a year ago1
Support for parsing CRLs
Closed a year ago1
No license entry in Cargo.toml?
Closed a year ago3
Fail to validate a server cert with invalid DNS SAN names, but having a matching one
Closed a year ago6
Deviations from RFC 5280
Updated a year ago
Supporting x.509 v1 certificates and v3 certificates with no extensions
Closed a year ago12
Allow path building to return the validated path
Closed a year ago7
Better error for malformed DNS IDs
Closed a year ago
Upgrade "soft" deprecations
Closed a year ago1
Clean up overuse of BadDer
Updated a year ago
0.100.0 release planning
Closed a year ago5
relationship of this repository to the original
Closed a year ago6
Consider using `Borrow`/`ToOwned` instead of `From`/`AsRef` for `DnsName` (and `SubjectName`)
Updated a year ago
Complete and correct support for directoryName constraints
Updated a year ago
Add critical extensions test
Closed 2 years ago1