Add option to skip certificate time validity check
Nobody has claimed this yet.
- Dominant language
- Rust
- Stars
- 160
- Forks
- 102
- Avg merge
- 28m
- Merged PRs (30d)
- 5
Description
The ccc-spdm-tools/spdm-rs project includes a use case where it does not serve as the final certificate verifier, and there may be no available source for date or time.
However, webpki requires the current time to be specified in order to validate certificate date/time constraints.
Could webpki provide an option to bypass the date/time validity check? It could be in a form of a feature flag.
Contributor guide
First steps
- Read the whole issue, then the project's contributing guide.
- Comment on the issue to say you are picking it up — it saves two people doing the same work.
- Fork the repository and make your change on a branch.
- Open a pull request that references the issue number.
Research direction
The issue does not name files or tests. Start by locating where certificate date and time constraints are validated, then examine the public API and feature configuration before deciding how an opt-out should work. Done means the proposed option bypasses only the date/time validity check and has coverage for both enabled and bypassed behavior.
Written by the indexing model from the issue text.
Assessment
- Tech stack
- rust
- Domain
- security
- Issue type
- Feature
- Difficulty
- 5/5
- Estimated time
- Over a week
- Activity status
- Stale
- Clarity
- Mostly clear
- Newbie friendliness
- 35/100