docs: update README revocation notes

rustls / rustls-platform-verifier

A certificate verification library for rustls that uses the operating system's verifier

Apache License 2.0

66 stars 20 forks source link

docs: update README revocation notes #45

Closed cpu closed 9 months ago

cpu commented 9 months ago

The Android revocation support has been changed to only check end-entity revocation status. See https://github.com/rustls/rustls-platform-verifier/pull/40
Upstream Rustls' webpki verifier now supports CRL revocation checking, but this isn't exposed via the rustls-platform-verifier fallback. Add some guidance for this.

cpu commented 9 months ago

CI is unhappy from an upstream crates.io outage:

warning: spurious network error (3 tries remaining): failed to get successful HTTP response from [https://crates.io/api/v1/crates/spin/0.5.2/download](https://crates.io/api/v1/crates/spin/0.5.2/download%60) (13.32.208.112), got 503