Re: cablint/certlint updated

2016-10-08 Thread Peter Bowen
Eric, Thanks for adding the link. Just to be clear, Matt's work is now included in the primary repo, so download it will get Matt's work. For those upgrading from an older version, you will need to build the extension; the helper binary is no longer supported. Thanks, Peter On Sat, Oct 8, 2016

Re: cablint/certlint updated

2016-10-08 Thread Eric Mill
To save folks a step, here's the link to the certlint repo, which contains both executables: https://github.com/awslabs/certlint And Matt Palmer's asn1c refactoring work is here: https://github.com/awslabs/certlint/pull/38 -- Eric On Sat, Oct 8, 2016 at 5:59 PM, Peter Bowen wrote: > I pushed

Re: WoSign: updated report and discussion

2016-10-08 Thread Percy
His writing style is very similar to StartCom's website which is produced in China. As we're examining the infrastructure of the two companies, could Mozilla ask Qihoo 360 to disclose the current personnel and technical infrastructure shared between WoSign and StartCom. WoSign has denied that t

cablint/certlint updated

2016-10-08 Thread Peter Bowen
I pushed a major update to cablint/certlint today. It contains a massive performance improvement thanks to Matt Palmer who turned the asn1c code into an in-process extension, allowing replacement of numerous fork/exec calls per certificate. This has moved the performance on my test system to 596