Skip to content

Releases: liamdennehy/eidas-certificate-parse

Fix phpseclib 2.0 vulnerability

29 Apr 06:12
e229a5c
Compare
Choose a tag to compare
Merge pull request #81 from liamdennehy/deps

phpseclib >=2.0.31 fixes RSA sig vuln

ECDSA keys supported (but not signatures)

06 Nov 05:27
94a266b
Compare
Choose a tag to compare
Merge pull request #78 from liamdennehy/ecdsa-cert

ECDSA public keys in certificate properly parsed. Still todo: signature verification.

3.5.1

05 Nov 09:01
Compare
Choose a tag to compare
Merge branch 'fix/phpseclib_version'

Certificate Transparency

25 Jul 15:51
f9930d5
Compare
Choose a tag to compare

Parse SCT lists

3.4.1: Merge pull request #74 from liamdennehy/identifier-consistency

14 Jun 17:37
66df89e
Compare
Choose a tag to compare

OC Yes Please!

10 Jun 21:25
eec273d
Compare
Choose a tag to compare

OCSP ready for primetime!

  • Each request and response has a unique identifier relating to the certificate bundle. Use to overwrite prior requests/responses with the same bundle.
  • Each request and response has identifiers for each certificate being queried/responded. Use to link certificates to response bundles
  • Certificate object can emit its' certificate identifier to match with a request or response.

OCS Please

08 Jun 09:59
ed93ed5
Compare
Choose a tag to compare

Lots of OCSP-related improvements including:

  • Generate requests for multiple certificates
  • Confirm correct parsing of requests and responses for multiple certificates
  • Verify signature on OCSP Response
    • If response includes certificates, match signer
    • if response does not include certs, supply potential signer certificate

OCS Three

06 Jun 13:48
92686e6
Compare
Choose a tag to compare

OCSP Handling

Basic OCSP processing - parse incoming response and verify signature against embedded certificates or one provided by client.

Threedy Speedy

02 Jun 21:13
984f983
Compare
Choose a tag to compare
  • Optimised object creation by avoiding unnecessary ASN1 binary conversions between calls
  • Updated to most recent Trusted Lists along with supporting certificates

Three and a bit

01 Jun 18:56
4e95664
Compare
Choose a tag to compare

OCSP Request handling - creating, parsing, and eventually fuzzing :)