mpeylo / cmpossl

An OpenSSL-based implementation of the Certificate Management Protocol (CMP), defined in IETF RFCs 4210, 4211, and 6712. It is being extended according to the emerging RFCs 'CMP Updates' (CMPv3), 'CMP Algorithms', and 'Lightweight CMP Profile'.
https://github.com/mpeylo/cmpossl/wiki
Other
35 stars 13 forks source link

WIP: CMP implementation, incremental PR chunk 7: CMP protection verification #199

Closed Akretsch closed 4 years ago

Akretsch commented 4 years ago

Certificate Management Protocol (CMP, RFC 4210) extension to OpenSSL Also includes CRMF (RFC 4211) and HTTP transfer (RFC 6712)

CMP and CRMF API is added to libcrypto, and the "cmp" app to the openssl CLI. Adds extensive man pages and tests. Integration into build scripts.

7th chunk: CMP protection verification in crypto/cmp/cmp_vfy.c and related files

Checklist
Akretsch commented 4 years ago

@mattcaswell We prepared a preview PR for CMP chunk 7. It shows the deltas to a frozen state of https://github.com/openssl/openssl/pull/10297

Akretsch commented 4 years ago

Fixed all known review comments from @mattcaswell

Akretsch commented 4 years ago

Fixed all known review comments from @mattcaswell

mattcaswell commented 4 years ago

I have no further comments at this time. I'll take another pass through when this is created as a "real" pull request.

Akretsch commented 4 years ago

real PR created as https://github.com/openssl/openssl/pull/10620