https://github.com/c2sp/x509-limbo
A suite of testvectors for X.509 certificate path validation and tools for building them
https://github.com/c2sp/x509-limbo
cryptography x509
Last synced: over 1 year ago
JSON representation
A suite of testvectors for X.509 certificate path validation and tools for building them
- Host: GitHub
- URL: https://github.com/c2sp/x509-limbo
- Owner: C2SP
- License: apache-2.0
- Created: 2023-05-12T21:13:24.000Z (about 3 years ago)
- Default Branch: main
- Last Pushed: 2025-04-28T13:37:11.000Z (over 1 year ago)
- Last Synced: 2025-05-05T00:56:17.099Z (over 1 year ago)
- Topics: cryptography, x509
- Language: C++
- Homepage: https://x509-limbo.com
- Size: 124 MB
- Stars: 48
- Watchers: 5
- Forks: 7
- Open Issues: 17
-
Metadata Files:
- Readme: README.md
- License: LICENSE
Awesome Lists containing this project
README
# x509-limbo
⚠️ This is a work in progress! ⚠️
A suite of testvectors (and associated tooling) for X.509 certificate path
validation.
This project is maintained by [Trail of Bits](https://www.trailofbits.com/).
## How to use this repository
This repository contains canned testcases for developing or testing
implementations of X.509 path validation.
To use it, you'll need to understand (and use) two pieces:
1. [`limbo-schema.json`](./limbo-schema.json): The testcase schema. This is
provided as a [JSON Schema](https://json-schema.org/) definition.
2. [`limbo.json`](./limbo.json): The combined testcase
suite. The structure of this file conforms to the schema above.
The schema will tell you how to consume the combined testcase suite.
## Developing
This repository contains a self-managing tool called `limbo`.
```bash
make dev && source env/bin/activate
limbo --help
```
This tool can be used to regenerate the schema, as well as
develop and manage testcases and testcase assets:
```bash
limbo schema --help
limbo compile --help
```
There are also two convenience `make` targets for quickly regenerating
the schema and test suite:
```bash
make limbo-schema.json
make limbo.json
```
## Licensing
This repository and the Limbo testsuite are licensed under the Apache License,
version 2.0.
This repository additionally contains testcases that are generated from
the [BetterTLS](https://github.com/Netflix/bettertls) project, which
is also licensed under the Apache License, version 2.0.