Add Certificate error flags support to OpenSSL with CAPI certificate validation
Nobody has claimed this yet.
- Dominant language
- C
- Stars
- 4.8k
- Forks
- 698
- Avg merge
- 2d 22h
- Merged PRs (30d)
- 35
Description
When deferred certificate validation is used with Schannel, it provides both a set of flags of all certificate validation issues encountered, and an error code for the most severe of those. OpenSSL certificate validation doesn't provide this on Linux or macOS, but on Windows, when CAPI is used to do certificate validation, these flags could be exposed to the application layer.
Contributor guide
First steps
- Read the whole issue, then the project's contributing guide.
- Comment on the issue to say you are picking it up — it saves two people doing the same work.
- Fork the repository and make your change on a branch.
- Open a pull request that references the issue number.
Research direction
Start by tracing deferred certificate validation for Schannel and the corresponding OpenSSL/CAPI validation path. Inspect the existing certificate validation flags and severe-error reporting exposed to applications; done means CAPI validation exposes equivalent certificate error flags through the application layer.
Written by the indexing model from the issue text.
Assessment
- Tech stack
- c
- Domain
- networking, security
- Issue type
- Feature
- Difficulty
- 4/5
- Estimated time
- 3-5 days
- Activity status
- Stale
- Clarity
- Needs clarification
- Newbie friendliness
- 35/100