Hacker GitHub

← All repos

briansmith/webpki

View on GitHub ↗ ★ 482 Rust

WebPKI X.509 Certificate Validation in Rust

11 mentions on Hacker News by 6 people: 1 story, 10 comments · first 2015-08-27 · latest 2021-04-21

Mentions per year 11 mentions · busiest year 2020 (5)
20082026
AllStoriesComments NewestTopOldest
  1. …they don't even need to ship the roots. > I specifically don't like [...] saying "unknown issuer" https://github.com/briansmith/webpki/issues/221 > If std::fs::File::open() gives me Result with an io:Error that claims "File not found" but…
    comment by briansmith · 2021-04-21 · in Preparing Rustls for Wider Adoption
  2. …to tell you why an issuer couldn't be found, because there are many possible reasons. Regardless https://github.com/briansmith/webpki/issues/206 tracks improving the situation.
    comment by briansmith · 2021-04-21 · in Preparing Rustls for Wider Adoption
  3. …would later take the approach he used for insanity::pkix when writing the Rust webpki project ( https://github.com/briansmith/webpki ) Each of the above APIs had significantly different interfaces for controlling verification. The trust…
    comment by sleevi · 2020-10-19 · in Many of the root certificates on Windows are not needed
  4. …both claim to have support but it only works with openssl. For webpki I had to file two bugs: https://github.com/briansmith/webpki/issues/134 https://github.com/briansmith/webpki/issues/135
    comment by est31 · 2020-06-29 · in Chromium and Mozilla to enforce 1 year validity for TLS certificates
  5. …code to verify it: https://searchfox.org/mozilla-central/source/security/nss/li... As does webpki: https://github.com/briansmith/webpki/blob/482627c40dad2148da... But haven't tested it (or checked other libraries).
    comment by est31 · 2020-06-28 · in Chromium and Mozilla to enforce 1 year validity for TLS certificates
  6. I commented on this at https://github.com/briansmith/webpki/issues/130 . This is nothing to be concerned about, for quite a few reasons. I don't expect any compatibility issues with being stricter since Google Chrome's new X.509 processing…
    comment by briansmith · 2020-06-15 · in Third-Party Audit of Rustls
  7. …point. But anyway here are some projects: https://github.com/ctz/rustls a TLS library that uses https://github.com/briansmith/webpki a pki library https://github.com/burntsushi/rust-snappy a compression library https://github.com/tikv/tikv…
    comment by anewvillager · 2020-05-04 · in Re: Integrating "safe" languages into OpenBSD? (2017)
  8. Of particular interest here is also webpki: https://github.com/briansmith/webpki Which is designed to validate TLS certificates. This is doing the ASN.1 parsing and signature verification in a zero-copy, memory safe way, built on top of…
    comment by lambda · 2016-05-03 · in OpenSSL Security Advisory
  9. …not like Google, but I'm already doing something like that: https://github.com/briansmith/ring and https://github.com/briansmith/webpki .
    comment by briansmith · 2015-10-20 · in BoringSSL
  10. …along these lines. I've open sourced two parts so far: 1. https://github.com/briansmith/ring 2. https://github.com/briansmith/webpki It is a big project, but I am pretty sure it is going to succeed.
    comment by briansmith · 2015-10-19 · in Qualys Security Advisory – LibreSSL
  11. ▲ 2
    Libwebpki: Web PKI Certificate Validation in Rust
    story by brson · 2015-08-27 · 0 comments