rusticata / x509-parser

X.509 parser written in pure Rust. Fast, zero-copy, safe.
Other
215 stars 68 forks source link

Missing some standard certificate extensions #86

Open lilyball opened 3 years ago

lilyball commented 3 years ago

This crate parses most standard certificate extensions defined in RFC 5280, but it seems to be missing the following:

Certificate Extensions:

It's also missing some CRL and CRL Entry extensions:

I don't know how much the CRL ones matter, though this crate does support 3 such CRL/CRL Entry extensions already (plus the ones that are identical to certificate extensions).

lilyball commented 2 years ago

@chifflier Freshest CRL (OID_X509_EXT_FRESHEST_CRL) uses the same Distribution Points type

FreshestCRL ::= CRLDistributionPoints

So it should be pretty trivial to add that to the set of parsed extensions.

cpu commented 1 year ago

Issuing Distribution Point(§5.2.5)

I've implemented support for this CRL extension in https://github.com/rusticata/x509-parser/pull/146