Comments (2)
mtrojnar
commented on June 2, 2024
Yes, osslsigncode does not automatically download CRLs for certificates. You need to download the CRL file first, and then make osslsigncode use that CRL file.
I think we should implement this feature.
from osslsigncode.
bitman694
commented on June 2, 2024
@mtrojnar I think you should also consider adding OCSP ways to check the revocation status. I find the revocation status for some certificates can only be checked by OCSP means. I can't find specific records in their CRL files.
This is a known problem that has been reported at least in 2018. But I still find the problem exists recently.
from osslsigncode.
Related Issues (20)
- How to locate the ---BLOB_BEGIN--- location programatically after replacement with data? HOT 1
- Publish official docker image HOT 5
- Default command "sign" not working in 2.5 HOT 1
- Question: CAB File Signature Specification HOT 3
- Improve readme to build on linux HOT 5
- Failed Timestamp validation in verify HOT 2
- Failing to sign .msi file - DIFAT sectors are not supported HOT 3
- IPE checksum missmatch HOT 3
- Linking fails when building with Nix on Darwin HOT 1
- Release builds for Ubuntu HOT 5
- [Bug Report] wrong timestamp parsing HOT 3
- [Usage-Help] Verfication fails on Windows every time HOT 1
- Missing OpenSSL legacy provider on Microsoft Windows HOT 1
- static binary with musl? HOT 3
- Multiple MSI signatures with different algorithms and a MsiDigitalSignatureEx entry HOT 5
- No verbose output when verify fails HOT 2
- MSI verification: data in unallocated sectors isn't checked HOT 1
- Dump .cat files list HOT 1
- Issues verifying MSI signed with version 2.6 HOT 2
Recommend Projects
-
React
A declarative, efficient, and flexible JavaScript library for building user interfaces.
-
Vue.js
🖖 Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.
-
Typescript
TypeScript is a superset of JavaScript that compiles to clean JavaScript output.
-
TensorFlow
An Open Source Machine Learning Framework for Everyone
-
Django
The Web framework for perfectionists with deadlines.
-
Laravel
A PHP framework for web artisans
-
D3
Bring data to life with SVG, Canvas and HTML. 📊📈🎉
-
Recommend Topics
-
javascript
JavaScript (JS) is a lightweight interpreted programming language with first-class functions.
-
web
Some thing interesting about web. New door for the world.
-
server
A server is a program made to process requests and deliver data to clients.
-
Machine learning
Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.
-
Visualization
Some thing interesting about visualization, use data art
-
Game
Some thing interesting about game, make everyone happy.
Recommend Org
-
Facebook
We are working to build community through open source technology. NB: members must have two-factor auth.
-
Microsoft
Open source projects and samples from Microsoft.
-
Google
Google ❤️ Open Source for everyone.
-
Alibaba
Alibaba Open Source for everyone
-
D3
Data-Driven Documents codes.
-
Tencent
China tencent open source team.
from osslsigncode.