Skip to content

Allow "required if present" EKUs#229

Merged
ctz merged 4 commits into
rustls:mainfrom
agilebits:jasper/key-usage-required-if-present
Feb 12, 2024
Merged

Allow "required if present" EKUs#229
ctz merged 4 commits into
rustls:mainfrom
agilebits:jasper/key-usage-required-if-present

Conversation

@jasperpatterson

Copy link
Copy Markdown
Contributor

I noticed there isn't currently a pub function to use ExtendedKeyUsage::RequiredIfPresent. Unsure if there was a reason for this, or whether it was just missed?

@djc djc left a comment

Copy link
Copy Markdown
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Makes sense!

Would be curious to hear more about your use cases!

Comment thread src/verify_cert.rs
@codecov

codecov Bot commented Feb 7, 2024

Copy link
Copy Markdown

Codecov Report

All modified and coverable lines are covered by tests ✅

Comparison is base (4689881) 97.13% compared to head (eb24f3f) 97.14%.

Additional details and impacted files
@@           Coverage Diff           @@
##             main     #229   +/-   ##
=======================================
  Coverage   97.13%   97.14%           
=======================================
  Files          19       19           
  Lines        4333     4336    +3     
=======================================
+ Hits         4209     4212    +3     
  Misses        124      124           

☔ View full report in Codecov by Sentry.
📢 Have feedback on the report? Share it here.

@jasperpatterson

Copy link
Copy Markdown
Contributor Author

Would be curious to hear more about your use cases!

Using a root certificate in my control to (exclusively) issue code signing certificates. Given the entire purpose of the root is for code signing, I don't really care about the "code signing" EKU on individual certs, but might as well check for it if EKUs are present.

Comment thread src/verify_cert.rs

@cpu cpu left a comment

Copy link
Copy Markdown
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Thanks, LGTM.

@cpu

cpu commented Feb 12, 2024

Copy link
Copy Markdown
Member

@ctz Any interest in reviewing this one or should we merge?

@ctz
ctz added this pull request to the merge queue Feb 12, 2024
Merged via the queue into rustls:main with commit a35e26d Feb 12, 2024
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

4 participants