Skip to content

CRL cases with malformed fields - #632

Draft
tnytown wants to merge 10 commits into
C2SP:mainfrom
trail-of-forks:ap/crl-cases
Draft

CRL cases with malformed fields#632
tnytown wants to merge 10 commits into
C2SP:mainfrom
trail-of-forks:ap/crl-cases

Conversation

@tnytown

@tnytown tnytown commented Jun 15, 2026

Copy link
Copy Markdown
Contributor

Respin of #440 with stencils checked in directly.

tnytown added 2 commits June 17, 2026 16:44
Temporal behavior around CRLs and entries:

- CRL with thisUpdate in the future
- CRL with nextUpdate in the past
- Certificate revoked with revocationDate in the future
- Certificate revoked with revocationDate before certificate's notBefore date
- CRL validity period not overlapping with certificate validity period
@tnytown
tnytown force-pushed the ap/crl-cases branch 3 times, most recently from ffd88c8 to f1a5896 Compare June 17, 2026 20:31
tnytown and others added 6 commits June 18, 2026 14:47
Signed-off-by: William Woodruff <william@trailofbits.com>
Path building would succeed but CRL parsing would fail. We can't
distinguish between thes failures yet, so work around it.
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants