We build X.509 chains so you don't have to

Re:We build X.509 chains so you don't have to by caeruleus on Thursday January 25, 2024 @11:04AM (#39130985)

Congratulations to the authors, this was a feature that was dearly missing from pyca/cryptography. It took a long time to get right.

For the history: https://github.com/pyca/cryptography/issues/2381

[ Parent | on HN ]

Re:We build X.509 chains so you don't have to by reaperhulk on Thursday January 25, 2024 @11:32AM (#39131360)

Thanks for posting! I had forgotten just how long a road this was, but I'm very pleased that the requirements we talked about years ago have been met. :)

That's not to say this is done! There's a set of features we still want to add and we'd like to gain some confidence in the APIs as structured before we mark them as stabilized.

[ Parent | on HN ]

Re:We build X.509 chains so you don't have to by caeruleus on Thursday January 25, 2024 @11:55AM (#39131702)

Looking forward! Thanks for maintaining such an awesome library btw, most of my internal PKI (X.509 and OpenSSH) is managed with it. It's a bliss to work with, even more so compared to other crypto libs. :)

[ Parent | on HN ]