Skip to content

Feature/crl extensions#84

Open
alnakschbandi wants to merge 21 commits into
mainfrom
feature/CRL-Extensions
Open

Feature/crl extensions#84
alnakschbandi wants to merge 21 commits into
mainfrom
feature/CRL-Extensions

Conversation

@alnakschbandi

Copy link
Copy Markdown

Adding support for CRL-related extensions:

  • CrlUtils class to generate CRLs according to the CrlConfig from X509-Attacker
  • Modified X509CertificateConfigUtil to add CRL Distribution Points (CRLDP) Extension to the default X509-Certficate (including the feature extractor). If the extension does not exist while OpenSSL is run CRL-related flags, the feature extractor will fail.
  • Modified TlsServerAuthVerifierAdapterDocker to include CRL-related flags for OpenSSL.
  • Modified X509CertificateChainGenerator to call the CRL-generation code for every chain.
  • Added rfc5280.json to include new crldp tests.
  • Modified Main to run and stop the server, and also remove the generated CRL files after the testing is finished. (Important note: since the server is only being started in Main, running a single test through JUnit will not work if the tests relies on the CRL being served. In the current implementation, the server is only started when running X509-Anvil from Main.)
  • modified the positive test to exclude "extensions_present" from the possible combinations.
  • Added various CRLDP related tests.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant