IntersectMBO / IntersectMBO/mithril

Leverage the certificate chain cache with the `EarlyStopVerification` mode

Open
#3,521 0 comments 0 reactions 1 assignee Claimed by @Alenar View on GitHub
feature :rocket:
Dominant language
Rust
Stars
154
Forks
51
Avg merge
1d 23h
Merged PRs (30d)
38

Description

## Why

We need to implement a `EarlyStopVerification` mode for the certificate chain verification in the client. This mode uses the same cache as the `FullVerification` mode, but stops as soon as the cache hits a certificate.

## What

Implement the `EarlyStopVerification` mode for the verification of the certificate chain in the client.

## How

- [ ] Implement the `EarlyStopVerification` algorithm in `verify_chain` of the `MithrilCertificateVerifier`:
- [ ] The chaining of the certificate that triggers the early must be verified as if it was downloaded
- [ ] Even if there is a early stop, the cache must be committed
- [ ] Adapt the `ClientBuilder` to configure this cache

Contributor guide

Open the contributing guide

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.