Cert signature algorithm parsing

CaliDog / EasySSL

SSL certificate parsing for humans

MIT License

36 stars 19 forks source link

Cert signature algorithm parsing #7

Closed omh closed 4 years ago

omh commented 4 years ago

👋

Use case: I'm having a case now where I need to know if the certificate is using SHA1 as signature algorithm. SHA1 is deprecated in TLS 1.2 (*) and most browsers block certs signed with SHA1 (*). However Erlang's :ssl module does not validate signature algorithm.

Fix: Added a field for signature_algorithm that returns the stringified version of :public_key.pkix_sign_types() for the cert.

Thank you for your review and consideration.

Fitblip commented 4 years ago

Hi there, thanks for the PR! This looks good to me, will merge it along with a few other PRs and let you know when this is publicly available.

Fitblip commented 4 years ago

Should be live! https://hex.pm/packages/easy_ssl/1.2.1

Thanks again