Jasper Patterson comments

Results 5 comments of


                                            Jasper Patterson

Route away from experimental to 1.0

I was just curious if there's an estimated timeline for this? It's something I'm interested in using in production in the somewhat near future. Specifically looking to verify a signature...

Add support for enforcing CRL expiration

@cpu Thanks, I've added in this test! 👍

Unable to use CRL without "issuing distribution point"

I haven't yet reached out to AWS to ask about it. However I know it is not user-configurable, the CRL is fully managed.

Unable to use CRL without "issuing distribution point"

I reached out to AWS about this and they provided the following response: > The only required CRL extensions are the Authority Key Identifier (AKI) and CRL number. The IDP...

Unable to use CRL without "issuing distribution point"

I'm not sure I _fully_ understand the constraints from #121 but I suppose the proposal here would be treating the CRL authoritative based solely on the issuer, if the CRL...