boring: Support validating certificates against CRLs

Adds CRL types and validation of certificates against CRLs with a `X509Store/X509StoreContext`. Also enables customizing verification flags on the `X509Store`, required to enable CRL checking.
cloudflare · Oct 12, 2023 · 2ec42d7 · 2ec42d7
1 parent 6c681a4
commit 2ec42d7
Show file tree

Hide file tree

Showing 10 changed files with 992 additions and 2 deletions.
diff --git a/boring/src/stack.rs b/boring/src/stack.rs
@@ -253,6 +253,16 @@ impl<T: Stackable> StackRef<T> {
     }
 }
 
+impl<T> fmt::Debug for StackRef<T>
+where
+    T: Stackable,
+    T::Ref: fmt::Debug,
+{
+    fn fmt(&self, fmt: &mut fmt::Formatter) -> fmt::Result {
+        fmt.debug_list().entries(self).finish()
+    }
+}
+
 impl<T: Stackable> Index<usize> for StackRef<T> {
     type Output = T::Ref;