Code

Prototype: Don't Be A CA#2

Code

Closed

bartonjs wants to merge 43 commits intomainbartonjs/runtime:mainfrom dontbeaca_workbartonjs/runtime:dontbeaca_workCopy head branch name to clipboard

+5,595-364

Commits

Commits on Jun 7, 2022

• First stab at a CRL builder

  bartonjs

  committed
  b5f340a

• Use the new CertificateRevocationListBuilder in the test CA system

  bartonjs

  committed
  f56f197

• Start adding CrlBuilder tests

  bartonjs

  committed
  486ea9b

• Add AKID

  bartonjs

  committed
  f3de733

• Add SAN extension

  bartonjs

  committed
  215437b

• Use less memory in SANBuilder

  bartonjs

  committed
  59b267a

• CDP Builder

  bartonjs

  committed
  1322165

• PKCS10 loading, part 1

  bartonjs

  committed
  e8cd63e

• X509BasicConstraintsExtension, Quality of Life

  bartonjs

  committed
  a9f179e

• Don't Be A CA.

  bartonjs

  committed
  6d5dc06

• Support CRLs numbered to (practically) infinity... and beyond.

  bartonjs

  committed
  79961fd

• Respond to early review feedback

  bartonjs

  committed
  f62cdbf

• Words matter, apparently

  bartonjs

  committed
  ff72707

• Early draft iterator for X.500 name AttributeTypeAndValue values

  bartonjs

  committed
  0569f63

Commits on Jun 8, 2022

• Start moving MatchesTlsHostname to X509Certificate2

  bartonjs

  committed
  0c0123e

• Rename to MatchesHostname, add first wave of tests

  bartonjs

  committed
  8d686cd

• Use list pattern in GetSharedOrNullOid

  bartonjs

  committed
  e9eba9b

• Be more stringent with acceptable tag values

  bartonjs

  committed
  778ddfd

• Push MatchesHostname coverage to 100%

  bartonjs

  committed
  4c9c049

Commits on Jun 9, 2022

• Add CreateSigningRequestPem, some code cleanup

  bartonjs

  committed
  2046ebf

• Add unsafeLoadCertificateExtensions parameter to LoadCertificateRequest

  bartonjs

  committed
  f38d49c

• Share PssParamsAsn to RSASignaturePadding conversions

  bartonjs

  committed
  4386438

• Get PKCS10 signature verification happy

  bartonjs

  committed
  1fe525b

• Add a static data load test

  bartonjs

  committed
  6897174

• Add PKCS10PEM export tests

  bartonjs

  committed
  e0f8140

• Add PEM-based PKCS10 loading

  bartonjs

  committed
  5ccef31

Commits on Jun 10, 2022

• Make SKI.SubjectKeyIdentifierBytes nullable

  bartonjs

  committed
  b7d9803

Commits on Jun 13, 2022

• SubjectKeyIdentifierBytes back to not-nullable

  bartonjs

  committed
  99c1835

• LoadCertificateRequest => LoadSigningRequest

  bartonjs

  committed
  aa1b125

• Commit missing test changes

  bartonjs

  committed
  97791b9

• Move RelativeDistinguishedName to non-nested-level type

  bartonjs

  committed
  b6f2a10

• Delay the processing of RDN's Single-Value-Value

  bartonjs

  committed
  3322643

Commits on Jun 14, 2022

• Make HasMultipleValues computed, add MemberNotNullWhen

  bartonjs

  committed
  34e14b3

• Add more RDN tests

  bartonjs

  committed
  af0b922

• Move CRL HashAlgorithm and RSAPadding to parameters

  Show description for 8003581
  bartonjs

  committed
  8003581

Commits on Jun 15, 2022

• Argument validation to CRLBuilder.Build

  bartonjs

  committed
  3c33e17

• Fix AKID with Issuer+Serial

  bartonjs

  committed
  62ffa1b

Commits on Jun 16, 2022

• Add some tests that build CRLs

  bartonjs

  committed
  944ed03

Commits on Jul 1, 2022

• Split CRLBuilder into partial files

  bartonjs

  committed
  0283f9d

• Add CrlBuilder.RemoveEntry

  bartonjs

  committed
  f0f3c73

• Apply feedback

  bartonjs

  committed
  19e35ec

• Add X509RevocationReason support

  bartonjs

  committed
  0840313

• Add an argument validation test for reason codes

  bartonjs

  committed
  936a95a