x509-parser icon indicating copy to clipboard operation
x509-parser copied to clipboard

Missing some standard certificate extensions

Open lilyball opened this issue 4 years ago • 4 comments

This crate parses most standard certificate extensions defined in RFC 5280, but it seems to be missing the following:

Certificate Extensions:

It's also missing some CRL and CRL Entry extensions:

I don't know how much the CRL ones matter, though this crate does support 3 such CRL/CRL Entry extensions already (plus the ones that are identical to certificate extensions).

lilyball avatar Jun 15 '21 18:06 lilyball

@chifflier Freshest CRL (OID_X509_EXT_FRESHEST_CRL) uses the same Distribution Points type

FreshestCRL ::= CRLDistributionPoints

So it should be pretty trivial to add that to the set of parsed extensions.

lilyball avatar Dec 17 '21 23:12 lilyball

Issuing Distribution Point(§5.2.5)

I've implemented support for this CRL extension in https://github.com/rusticata/x509-parser/pull/146

cpu avatar Aug 26 '23 18:08 cpu