Skip to content

CRL verify the entire chain including loaded CA's#6820

Merged
JacobBarthelmeh merged 1 commit intowolfSSL:masterfrom
julek-wolfssl:zd/16550-int-crl
Oct 4, 2023
Merged

CRL verify the entire chain including loaded CA's#6820
JacobBarthelmeh merged 1 commit intowolfSSL:masterfrom
julek-wolfssl:zd/16550-int-crl

Conversation

@julek-wolfssl
Copy link
Copy Markdown
Member

  • Regen CRL's as most of them are expired
  • certs/crl/extra-crls/ca-int-cert-revoked.pem: CRL that revokes certs/intermediate/ca-int-cert.pem signed by certs/ca-cert.pem
  • Add CheckCertCRL_ex API to not depend on DecodedCert
  • CheckCertCRLList: accept raw serial or hashed version to work with Signers
  • Add XELEM_CNT to simplify pre-proc element counting

@julek-wolfssl julek-wolfssl self-assigned this Sep 29, 2023
@julek-wolfssl julek-wolfssl force-pushed the zd/16550-int-crl branch 2 times, most recently from 7f5289b to 61d9b30 Compare October 2, 2023 10:59
Comment thread tests/api.c Outdated
@julek-wolfssl julek-wolfssl force-pushed the zd/16550-int-crl branch 2 times, most recently from ac321df to 1edca79 Compare October 2, 2023 19:36
- Regen CRL's as most of them are expired
- certs/crl/extra-crls/ca-int-cert-revoked.pem: CRL that revokes certs/intermediate/ca-int-cert.pem signed by certs/ca-cert.pem
- Add CheckCertCRL_ex API to not depend on DecodedCert
- CheckCertCRLList: accept raw serial or hashed version to work with Signers
- Add XELEM_CNT to simplify pre-proc element counting
@bandi13
Copy link
Copy Markdown
Contributor

bandi13 commented Oct 3, 2023

retest this please

@JacobBarthelmeh JacobBarthelmeh merged commit 96205fc into wolfSSL:master Oct 4, 2023
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

4 participants