QUESTION Can we verify version 1 x509 cert and integrating with Rustls

[amrx101]

Hi I came here from this.

I am using a legacy version 1 x509 certificate which doesn't have v3 extensions and SANs. This results in BadDer error from WebPKI. This is an info request for:

• Can I use this to verify a version 1 x509 certificate.
• How do I hook this with TLS verifier of Rustls.

Thanks

[Demi-Marie]

Verifying version 1 certificates is definitely in-scope for this project. That said, how do you plan on verifying the certificate chain? x509-signature can’t build certificate chains on its own, and doesn’t know how to parse DNs either. You will need to do both yourself.

[Demi-Marie]

I won’t be able to implement either of those features in the near future, but I would be willing to review PRs that added them.

[amrx101]

Noted