-
Notifications
You must be signed in to change notification settings - Fork 28
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
feat: delta CRL #247
base: main
Are you sure you want to change the base?
feat: delta CRL #247
Conversation
Signed-off-by: Junjie Gao <[email protected]>
Codecov ReportAttention: Patch coverage is
Additional details and impacted files@@ Coverage Diff @@
## main #247 +/- ##
==========================================
+ Coverage 91.79% 92.03% +0.24%
==========================================
Files 30 30
Lines 2607 2762 +155
==========================================
+ Hits 2393 2542 +149
- Misses 163 167 +4
- Partials 51 53 +2 ☔ View full report in Codecov by Sentry. |
Signed-off-by: Junjie Gao <[email protected]>
Signed-off-by: Junjie Gao <[email protected]>
Signed-off-by: Junjie Gao <[email protected]>
Signed-off-by: Junjie Gao <[email protected]>
Signed-off-by: Junjie Gao <[email protected]>
Signed-off-by: Junjie Gao <[email protected]>
Signed-off-by: Junjie Gao <[email protected]>
// FetcherWithCertificateExtensions is an interface that specifies methods used | ||
// for fetching CRL from the given URL with certificate extensions to identify | ||
// the Freshest CRL extension (Delta CRL) from certificate. | ||
type FetcherWithCertificateExtensions interface { |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
There 2 sources of Delta CRL URL:
- certificate extension
- CRL extension
This interface enable user to pass a certificate extension to the fetcher for accessing the delta CRL.
var dpDER cryptobyte.String | ||
if !val.ReadASN1(&dpDER, cryptobyte_asn1.SEQUENCE) { | ||
return nil, errors.New("x509: invalid CRL distribution point") | ||
} |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Those lines can hardly be triggered.
Feat:
Limitation: only support 1 delta CRL URL