I need to implement a certificate check that also checks for revoked certificates with X.509 CRLs (RFC 5280). I would like to use webpki to do this. For the moment it would be enough if I can verify the certificate path of a X.509 CRL to the root CA.
Basically I would like an implementation of `EndEntityCert::verify_is_valid_tls_server_cert(..)] where the EndEntityCert is a CRL.
I saw some comments that support for CRL is planned but as far as I can see this is currently not supported. Is this correct?
Maybe you are aware of another crate that supports this? x509-cert allows to parse RCL but the verification part is missing
I need to implement a certificate check that also checks for revoked certificates with X.509 CRLs (RFC 5280). I would like to use
webpki
to do this. For the moment it would be enough if I can verify the certificate path of a X.509 CRL to the root CA. Basically I would like an implementation of `EndEntityCert::verify_is_valid_tls_server_cert(..)] where the EndEntityCert is a CRL.x509-cert
allows to parse RCL but the verification part is missing