Ecosyste.ms: Awesome

An open API service indexing awesome lists of open source software.

Awesome Lists | Featured Topics | Projects

https://github.com/c2sp/x509-limbo

A suite of testvectors for X.509 certificate path validation and tools for building them
https://github.com/c2sp/x509-limbo

cryptography x509

Last synced: about 3 hours ago
JSON representation

A suite of testvectors for X.509 certificate path validation and tools for building them

Awesome Lists containing this project

README

        

# x509-limbo

⚠️ This is a work in progress! ⚠️

A suite of testvectors (and associated tooling) for X.509 certificate path
validation.

This project is maintained by [Trail of Bits](https://www.trailofbits.com/).

## How to use this repository

This repository contains canned testcases for developing or testing
implementations of X.509 path validation.

To use it, you'll need to understand (and use) two pieces:

1. [`limbo-schema.json`](./limbo-schema.json): The testcase schema. This is
provided as a [JSON Schema](https://json-schema.org/) definition.
2. [`limbo.json`](./limbo.json): The combined testcase
suite. The structure of this file conforms to the schema above.

The schema will tell you how to consume the combined testcase suite.

## Developing

This repository contains a self-managing tool called `limbo`.

```bash
make dev && source env/bin/activate

limbo --help
```

This tool can be used to regenerate the schema, as well as
develop and manage testcases and testcase assets:

```bash
limbo schema --help
limbo compile --help
```

There are also two convenience `make` targets for quickly regenerating
the schema and test suite:

```bash
make limbo-schema.json
make limbo.json
```

## Licensing

This repository and the Limbo testsuite are licensed under the Apache License,
version 2.0.

This repository additionally contains testcases that are generated from
the [BetterTLS](https://github.com/Netflix/bettertls) project, which
is also licensed under the Apache License, version 2.0.