go/signedexchange: gen-certurl should fail on invalid OCSP
Open
@irori is already working on this.
Since Mar 23, 2020.
go
- Dominant language
- Go
- Stars
- 1.3k
- Forks
- 125
- PR merge metrics
- No merged PRs in 30d
Description
Currently, dump-certurl warns if the input has an invalid OCSP response, but gen-certurl happily creates such cert chains.
gen-signedexchange refuses to create an invalid SXG unless -ignoreErrors flag is given. gen-certurl should behave similarly.
Contributor guide
First steps
- Read the whole issue, then the project's contributing guide.
- Comment on the issue to say you are picking it up — it saves two people doing the same work.
- Fork the repository and make your change on a branch.
- Open a pull request that references the issue number.
Assessment
This issue has not been assessed yet.