dotnet / dotnet/dotnet-api-docs

X509Certificate2.Verify() references old RFC and old OS

Open
#8,817 4 comments 0 reactions 0 assignees View on GitHub
area-System.Security Pri3
Dominant language
C#
Stars
949
Forks
1.7k
Avg merge
3d 27m
Merged PRs (30d)
49

Description

The Verify() method in the X509Certificate2 class references RFC3280 and Windows 2003 server. Both are obsolete; RFC3280 was superseded by RFC5280 and Windows 2003 by 15 years of Windows Server releases.

It would be nice to know if this method has been updated in later versions of .NET to implement RFC5280 and how more recent Windows Server versions implements certificate verification, or if we have to look into implementing this ourselves. Not sure if I can contribute to this myself, but I'm open to suggestions if that can help speed things up.

https://learn.microsoft.com/en-us/dotnet/api/system.security.cryptography.x509certificates.x509certificate2.verify?view=net-7.0

Contributor guide

Open the contributing guide

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.