-
Notifications
You must be signed in to change notification settings - Fork 122
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
Improve tool-openssl compatability for x509 and verify subcommands #2196
Conversation
Codecov ReportAttention: Patch coverage is
Additional details and impacted files@@ Coverage Diff @@
## main #2196 +/- ##
==========================================
- Coverage 79.05% 79.05% -0.01%
==========================================
Files 612 612
Lines 106159 106210 +51
Branches 15002 15008 +6
==========================================
+ Hits 83923 83961 +38
- Misses 21582 21599 +17
+ Partials 654 650 -4 ☔ View full report in Codecov by Sentry. |
3cb915a
to
cb56582
Compare
95d4aa2
to
608c977
Compare
Can we add a test for the new -untrusted option? I remember there were some issues with output being differently formatted between OpenSSL and AWS-LC (I don't remember if this was X509 or verify though). If that is why this test was not added, ignore the comment. |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Intentional to
Description of changes:
pem
order
when using the-inform
argument to thex509
sub-command.-untrusted
flag to theverify
sub-command which allows for passing in a set of one or more chain certificates which may be used in the certificate chain building and validation.By submitting this pull request, I confirm that my contribution is made under the terms of the Apache 2.0 license and the ISC license.