Ryan Hurst
Ryan Hurst
Neat Project. Thought you might be interested in this : https://github.com/PeculiarVentures/webcrypto-liner
https://datatracker.ietf.org/doc/draft-ietf-curdle-pkix/
Before this code is used in production systems a code and security audit should be performed.
See this issue https://github.com/PeculiarVentures/PKI.js/issues/216
https://mailarchive.ietf.org/arch/msg/curdle/lwGUsXTP7sG5j9VbAcvvly8ruxg
https://tools.ietf.org/html/draft-ietf-lamps-rfc5751-bis-02
The goal for this library is not only to make is possible for people to build X.509 aware applications but to make it easy and have the natural behavior when...
Netflix did a nice test suite for name constrains: https://nameconstraints.bettertls.com/ We should update our testing to include these tests

Here is a simple ruby example, we should have something similar - https://gist.github.com/konklone/dca3321759e29f9f23a96a97ca3013cd