Skip to content

Replace rustls-webpki with RustCrypto #159

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Draft
wants to merge 1 commit into
base: main
Choose a base branch
from

Conversation

hornang
Copy link
Contributor

@hornang hornang commented May 23, 2025

Trying to fix #13 (while learning Rust at the same time)

I'm pushing this draft for now in case I’m unable to finish it later. Others may use it as a starting point for their own implementations.

Things that need more work

  • Support for intermediate CAs (public servers send at least two certificates to the client).
  • Validate certificate time against the current time, and subject name against the server name.
    • A full-blown der_derive-based decoding might require too much memory per certificate. A solution that allows you to choose how much decoding is necessary for a particular use case might be beneficial.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

Add support for server certificate validation
1 participant