[Bro-Dev] [JIRA] (BIT-556) Extended CA certificate information

Bernhard Amann (JIRA) jira at bro-tracker.atlassian.net
Tue Mar 4 16:14:18 PST 2014


    [ https://bro-tracker.atlassian.net/browse/BIT-556?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=15704#comment-15704 ] 

Bernhard Amann commented on BIT-556:
------------------------------------

Hm. I am not entirely sure if the additional data in there is especially interesting. The OCSP URLs don't really help a lot (they are included in the certificates themselves). The EV oids might be interesting; but actually using them in validation is not trivial...

(old ticket, I know, but still)

> Extended CA certificate information
> -----------------------------------
>
>                 Key: BIT-556
>                 URL: https://bro-tracker.atlassian.net/browse/BIT-556
>             Project: Bro Issue Tracker
>          Issue Type: New Feature
>          Components: bro-aux
>            Reporter: Seth Hall
>
> At some point I'd like to include more information in the auto-generated script that currently only has Mozilla's CA certs.  
> At the very least I'd like to include extended validation OIDs for the various approved EV certificate vendors and OCSP URLs.
> The extra data can be found in the XML file located here:
> https://www.mozilla.org/projects/security/certs/included/



--
This message was sent by Atlassian JIRA
(v6.2-OD-10-004-WN#6253)


More information about the bro-dev mailing list