mozilla / tls-observatory

An observatory for TLS configurations, X509 certificates, and more.
Mozilla Public License 2.0
534 stars 88 forks source link

Add support for PSS algorithms in /certificates and certsplainer #436

Open WilsonKathleen opened 1 year ago

WilsonKathleen commented 1 year ago

Please Add support for PSS algorithms in /certificates and certsplainer

CCADB uses tls-observatory/certificates to parse the PEM of certificates in order to import them into the CCADB. EU CAs have started to create certificates with PSS algorithms such as RSASSA-PSS signature roots, and this tool fails on them.

The certsplainer tool also fails on certificates with RSASSA-PSS signature, so it would be great if that can be fixed too.