rustls / rustls/webpki

Integrate C2SP x509-limbo test suite

Open
#206 1 comment 4 reactions 0 assignees View on GitHub

Nobody has claimed this yet.

Dominant language
Rust
Stars
160
Forks
102
Avg merge
28m
Merged PRs (30d)
5

Description

The folks at Trail of Bits have been working on a Rust based certificate path building and validation backend for use in PyCa Cryptography. As part of that work they've built x509-limbo, "A suite of testvectors for X.509 certificate path validation".

There's a harness in that repo for testing against briansmith/webpki, and I inquired about adding a harness for this repo. In that issue there was a suggestion that x509-limbo is designed to be integrated into other repository test suites. We should consider doing that in this repo that like we did with the BetterTLS suite.

Contributor guide

Open the contributing guide

First steps

  1. Read the whole issue, then the project's contributing guide.
  2. Comment on the issue to say you are picking it up — it saves two people doing the same work.
  3. Fork the repository and make your change on a branch.
  4. Open a pull request that references the issue number.

Research direction

Start by examining how this repository integrates the BetterTLS suite, then read the x509-limbo harness and its proposed integration guidance in issue 88. The work is complete when x509-limbo's certificate-path test vectors run against this repository's validation backend as part of its test suite.

Written by the indexing model from the issue text.

Assessment

Tech stack
rust
Domain
cryptography, security, testing-qa
Issue type
Feature
Difficulty
4/5
Estimated time
3-5 days
Activity status
Stale
Clarity
Mostly clear
Newbie friendliness
32/100

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.