Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

backport rustls/webpki path complexity budget #277

Merged

Conversation

cpu
Copy link
Contributor

@cpu cpu commented Sep 8, 2023

This is intended to be complementary to the signature validation limit fix (#273) and addresses #276 in the same manner as NSS libmozpkix. Originally implemented by @ctz in rustls/webpki#163.

Ive backported the change, adapting it to this repository's main branch and folded in some later improvements that were made after rustls/webpki#163 (e.g. cleaning up imports, using a more readable numeric literal, fixing the unit test).

@codecov
Copy link

codecov bot commented Sep 8, 2023

Codecov Report

Merging #277 (95b6b20) into main (4a71d47) will increase coverage by 0.45%.
The diff coverage is 100.00%.

@@            Coverage Diff             @@
##             main     #277      +/-   ##
==========================================
+ Coverage   50.62%   51.08%   +0.45%     
==========================================
  Files          18       18              
  Lines        3751     3786      +35     
==========================================
+ Hits         1899     1934      +35     
  Misses       1852     1852              
Files Changed Coverage Δ
src/verify_cert.rs 94.69% <100.00%> (+0.61%) ⬆️

📣 We’re building smart automated test selection to slash your CI/CD build times. Learn more

This is intended to be complementary to the signature validation limit
fix and addresses briansmith#276 in the same manner as NSS
libmozpkix.
@cpu cpu force-pushed the cpu-rustls-backport-path-complexity-fix branch from 6a47dc1 to 95b6b20 Compare September 15, 2023 18:03
@briansmith briansmith self-requested a review September 30, 2023 02:06
@briansmith briansmith merged commit f566cf1 into briansmith:main Sep 30, 2023
107 checks passed
@briansmith
Copy link
Owner

Thank you. I pushed #279 for some follow-ups.

@cpu cpu deleted the cpu-rustls-backport-path-complexity-fix branch September 30, 2023 12:29
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

3 participants