News for hackers. Stuff that matters.

A comment on Uacme: ACMEv2 client written in plain C with minimal dependencies.

Re:Uacme: ACMEv2 client written in plain C with minimal depe... by jeffbee on Sunday August 21, 2022 @03:36PM (#32543629)
Security software written in C, with no unit tests. You cannot run away from this software fast enough. I cannot think of any worse idea than "I wrote my own base64 codec in bare C without tests and without code review". "Minimal dependencies" does not even begin to make up for how bad this idea is. It would be strongly preferable to depend on third-party code that has been reviewed, tested, and implemented in a reasonable language.
[ Parent | on HN ]
Re:Uacme: ACMEv2 client written in plain C with minimal depe... by christophilus on Sunday August 21, 2022 @08:14PM (#32545831)
You use C and C++ apps daily— many of which probably have poorer automated testing than you’d think. It’s not great, but it isn’t the world-ending catastrophe that you seem to think it is.
[ Parent | on HN ]
Re:Uacme: ACMEv2 client written in plain C with minimal depe... by ClumsyPilot on Sunday August 21, 2022 @08:48PM (#32546016)
he is spot on, you know - this software is a contender for foundational infrastructure. The best foundational infrastructure software is like SQLITE - more tests than code, tiny and runs everywhere
[ Parent | on HN ]
Re:Uacme: ACMEv2 client written in plain C with minimal depe... by christophilus on Sunday August 21, 2022 @09:19PM (#32546238)
And written in C. So, he is at best half spot on. I agree that I’d want to see better testing. I would disagree that C rules it out.
[ Parent | on HN ]