PKI X.509 Cert / Signature verifier

[pinkforest]

Should we have one as well ? 😅

It would be a lot of work tho - webpki still has dependency to ring

sidenote rustls has webpki fork that does aws-lc-rs by default over ring

• https://github.com/rustls/webpki/blob/main/Cargo.toml#L82

It would be interesting to hook something up to rustcrypto - experimentally

There is also ofcourse the dangerous() from rustls like this:

• https://github.com/RustCrypto/rustls-rustcrypto/pull/46/files#diff-bfe5cc2b444683f89edf1f106213ebf97c6e0302e402ada8d86d4c380b6a6883

Ofc it helps there is this:

• https://github.com/RustCrypto/formats/tree/master/x509-cert

Related issues perhaps

• x509-cert: v0.3 release train formats#1289

[tarcieri]

There is work underway on a certificate verifier based on x509-cert. Note that certificate verification is the electric third rail of the X.509 ecosystem, and difficult to implement in a manner that conforms to other implementations.

See: RustCrypto/formats#838

[pinkforest]

Yeah cool think that is catered already somewhere else and we don't really need it here so closing

In the meantime I built the fake stubs at

• Add rustls builder integration tests #48