Skip to content

Upgrade webpki dev-dependency to 0.102#215

Merged
djc merged 1 commit into
mainfrom
webpki-102
Jan 19, 2024
Merged

Upgrade webpki dev-dependency to 0.102#215
djc merged 1 commit into
mainfrom
webpki-102

Conversation

@djc

@djc djc commented Jan 18, 2024

Copy link
Copy Markdown
Member

No description provided.

@djc djc requested review from cpu and est31 January 18, 2024 08:44

@cpu cpu left a comment

Copy link
Copy Markdown
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

LGTM, thank you.

Comment thread rcgen/Cargo.toml
Comment thread rcgen/tests/webpki.rs
Comment on lines -601 to -603
webpki_crl
.verify_signature(&[&webpki::ECDSA_P256_SHA256], raw_spki.value())
.expect("failed to validate CRL signature");

Copy link
Copy Markdown
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

just noting for other reviewers that this hunk of test code falls away because we removed the verify_signature fn of the CRL type upstream. It didn't mesh well with the existing API surface, was difficult to use (as evidenced by the SPKI SEQUENCE dance), and had no other consumers we were aware of except this unit test.

The test_webpki_crl_revoke test that remains uses the CRL for a revocation checking decision and the webpki crate will verify the signature as part of that work.

@djc djc added this pull request to the merge queue Jan 19, 2024
Merged via the queue into main with commit 885b715 Jan 19, 2024
@djc djc deleted the webpki-102 branch January 19, 2024 06:43
@djc djc mentioned this pull request Jan 19, 2024
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants