| ▲ | jmspring 12 hours ago |
| I’d say correct common path. OpenSSL due to hand waving deals with a lot of edge cases the correct path doesn’t handle. Even libraries like libnss suffers from this. |
|
| ▲ | nine_k 5 hours ago | parent [-] |
| Are these edge cases correct to the spec, or not? |
| |
| ▲ | pseudohadamard an hour ago | parent [-] | | Yes. The spec is often such a confused mess that even the people who wrote it are surprised by what it requires. One example was when someone on the PKIX list spent some time explaining to X.509 standards people what it was that their own standard required, which they had been unaware of until then. |
|