rustls / rustls/rustls-platform-verifier
Implement ClientCertVerifier
Nobody has claimed this yet.
- Dominant language
- Rust
- Stars
- 158
- Forks
- 60
- Avg merge
- 5d 10h
- Merged PRs (30d)
- 3
Description
This crate offers the Verifier class which implements ServerCertVerifier--this allows users to create a ClientConfig that verifies server TLS certificates using the platform's native store. There is no implementation of ClientCertVerifier, however, so there is no way to create a ServerConfig that verifies client TLS certificates using the platform's native store.
For context, I want to host an HTTPS endpoint on Windows that accepts client certificates. I need to be able to verify that those client certificates are valid according to the installed root CAs, but that isn't going to be possible without a ClientCertVerifier implementation in this crate--the default WebPkiClientVerifier that rustls offers doesn't work with Windows certificate stores.
Contributor guide
No contributing guide indexed for this repository
First steps
- Read the whole issue, then the project's contributing guide.
- Comment on the issue to say you are picking it up — it saves two people doing the same work.
- Fork the repository and make your change on a branch.
- Open a pull request that references the issue number.
Research direction
Start by reading the crate's existing Verifier implementation and the rustls ClientCertVerifier interface linked in the issue. Trace how the current verifier uses the platform's native certificate store, then determine what is needed for ServerConfig client-certificate verification. Done means the crate provides a ClientCertVerifier that validates client certificates against the platform's native store.
Written by the indexing model from the issue text.
Assessment
- Tech stack
- rust
- Domain
- security
- Issue type
- Feature
- Difficulty
- 4/5
- Estimated time
- 3-5 days
- Activity status
- Stale
- Clarity
- Mostly clear
- Newbie friendliness
- 35/100