wbond / wbond/certbuilder

Multiple CRL and/or OCSP endpoints

Open
#7 0 comments 0 reactions 0 assignees View on GitHub

Nobody has claimed this yet.

Dominant language
Python
Stars
37
Forks
15
PR merge metrics
No merged PRs in 30d

Description

What's the best way to create a certificate that advertises multiple CDPs or OCSP endpoints? I could manipulate the _crl_distribution_points and _authority_information_access variables directly, but it won't be pretty.

Open to a PR that adds support for lists? If so, any preference on whether to define new methods on the builder, or support list types in the existing methods? If existing methods, alright with the getters returning lists if multiple values were supplied? I think it's probably okay because if you set multiple, you can expect multiple...

Contributor guide

No contributing guide indexed for this repository

First steps

  1. Read the whole issue, then the project's contributing guide.
  2. Comment on the issue to say you are picking it up — it saves two people doing the same work.
  3. Fork the repository and make your change on a branch.
  4. Open a pull request that references the issue number.

Research direction

Start by locating the certificate builder code that defines _crl_distribution_points and _authority_information_access, then inspect the existing methods and getters for these extensions. Determine and document how list inputs and multiple returned values should behave for CDP and OCSP endpoints; the issue does not specify an accepted API or tests.

Written by the indexing model from the issue text.

Assessment

Tech stack
python
Domain
security
Issue type
Feature
Difficulty
5/5
Estimated time
Over a week
Activity status
Stale
Clarity
Needs clarification
Newbie friendliness
25/100

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.