Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Integrate ToB x509-limbo test suite #206

Open
cpu opened this issue Nov 15, 2023 · 1 comment
Open

Integrate ToB x509-limbo test suite #206

cpu opened this issue Nov 15, 2023 · 1 comment

Comments

@cpu
Copy link
Member

cpu commented Nov 15, 2023

The folks at Trail of Bits have been working on a Rust based certificate path building and validation backend for use in PyCa Cryptography. As part of that work they've built x509-limbo, "A suite of testvectors for X.509 certificate path validation".

There's a harness in that repo for testing against briansmith/webpki, and I inquired about adding a harness for this repo. In that issue there was a suggestion that x509-limbo is designed to be integrated into other repository test suites. We should consider doing that in this repo that like we did with the BetterTLS suite.

@woodruffw
Copy link

JFYI: I've gone ahead and made an in-tree harness here: C2SP/x509-limbo#105 🙂

(I still highly recommend that rustls integrate it directly into its own test-suite, however: our in-tree harnesses don't filter implementations by intended compatibility/feature support, so the results here can be overly pessimistic/misleading depending on which niches of CABF and 5280 you're trying to support.)

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

2 participants