wbond / wbond/certvalidator

Weak version check for Extensions

Open
#51 0 comments 0 reactions 0 assignees View on GitHub

Nobody has claimed this yet.

Dominant language
Python
Stars
115
Forks
34
PR merge metrics
No merged PRs in 30d

Description

Allows the presence of (version 3) extensions even if the certificate version is 1 or 2.
Allow the presence of extensions even if the version is greater than 3.
What is version 4? It is not rejected.

Contributor guide

No contributing guide indexed for this repository

First steps

  1. Read the whole issue, then the project's contributing guide.
  2. Comment on the issue to say you are picking it up — it saves two people doing the same work.
  3. Fork the repository and make your change on a branch.
  4. Open a pull request that references the issue number.

Research direction

Locate the certificate-extension version validation in the certvalidator codebase and inspect how certificate versions 1, 2, 3, and values greater than 3 are handled. Done means the behavior matches the issue's stated version rules, with tests covering extensions on each relevant certificate version.

Written by the indexing model from the issue text.

Assessment

Tech stack
python
Domain
security
Issue type
Bug
Difficulty
4/5
Estimated time
3-5 days
Activity status
Stale
Clarity
Mostly clear
Newbie friendliness
40/100

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.