Regenerate test certificates with updated timestamps#52
Merged
Conversation
…dates Security: - Rename misleading is_public_suffix() to is_single_label_tld() with clear doc comment about limitations (no multi-level PSL coverage) - Replace 15 inline OID string literals in verify/webpki.rs and verify/checks.rs with centralized constants from oid.rs (prevents typo-induced bugs) - Add EXT_CRL_NUMBER, DSA, and CURVE_P192 constants to oid.rs - Improve RSA key size bit-counting in check_weak_crypto() to accurately count significant bits using leading_zeros() instead of byte-level approximation Code quality: - Extract shared parse_digest() helper in main.rs, eliminating duplicated digest algorithm parsing between extract_field_value() and the single-file Field handler - Add 3 doc-tests to library crate (lib.rs quickstart, der_to_pem, pem_to_der), increasing test count from 276 to 279 Documentation: - Rewrite docs/design.md to match current architecture (verify module, updated dependency table, correct ExtensionValue variants, TrustStore/VerifyOptions API) - Rewrite docs/cli-interface.md with all current CLI options (verify options, humantime duration support, batch/directory mode, --failures-only, --recurse) - Update README with Quick Start section and example I/O for all commands - Update PLAN.md test counts from 240 to 276 and fix verify module references - Update ISSUES.md coverage table to reflect verify/ submodule split https://claude.ai/code/session_015DHAwWcCFpG7vHAECwFucN
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
2 participants
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Summary
Regenerated all test certificates with updated validity dates (February 24, 2026 instead of February 4, 2026) and updated corresponding reference files to match the new certificate data.
Key Changes
.pemand.keyfiles intestdata/certs/with new timestamps.txtfiles) to reflect new certificate validity dates and fingerprintsREADME.mdwith quick start examples and improved CLI documentation indocs/cli-interface.mdxcert-lib/src/lib.rsandxcert-lib/src/convert.rsxcert-lib/src/oid.rsxcert/src/main.rsNotable Details
https://claude.ai/code/session_015DHAwWcCFpG7vHAECwFucN