Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

feat: delta CRL #247

Open
wants to merge 9 commits into
base: main
Choose a base branch
from
Open

Conversation

JeyJeyGao
Copy link
Contributor

@JeyJeyGao JeyJeyGao commented Nov 26, 2024

Feat:

  • added delta CRL support

Limitation: only support 1 delta CRL URL

Signed-off-by: Junjie Gao <[email protected]>
Copy link

codecov bot commented Nov 26, 2024

Codecov Report

Attention: Patch coverage is 95.28796% with 9 lines in your changes missing coverage. Please review.

Project coverage is 92.03%. Comparing base (ce88e08) to head (c228487).

Files with missing lines Patch % Lines
revocation/crl/fetcher.go 89.28% 6 Missing and 3 partials ⚠️
Additional details and impacted files
@@            Coverage Diff             @@
##             main     #247      +/-   ##
==========================================
+ Coverage   91.79%   92.03%   +0.24%     
==========================================
  Files          30       30              
  Lines        2607     2762     +155     
==========================================
+ Hits         2393     2542     +149     
- Misses        163      167       +4     
- Partials       51       53       +2     

☔ View full report in Codecov by Sentry.
📢 Have feedback on the report? Share it here.

// FetcherWithCertificateExtensions is an interface that specifies methods used
// for fetching CRL from the given URL with certificate extensions to identify
// the Freshest CRL extension (Delta CRL) from certificate.
type FetcherWithCertificateExtensions interface {
Copy link
Contributor Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

There 2 sources of Delta CRL URL:

  1. certificate extension
  2. CRL extension

This interface enable user to pass a certificate extension to the fetcher for accessing the delta CRL.

var dpDER cryptobyte.String
if !val.ReadASN1(&dpDER, cryptobyte_asn1.SEQUENCE) {
return nil, errors.New("x509: invalid CRL distribution point")
}
Copy link
Contributor Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Those lines can hardly be triggered.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

1 participant