Skip to content

Adapted tls to support custom certificate types.#2165

Closed
xipki wants to merge 2 commits intobcgit:mainfrom
xipki:main
Closed

Adapted tls to support custom certificate types.#2165
xipki wants to merge 2 commits intobcgit:mainfrom
xipki:main

Conversation

@xipki
Copy link
Contributor

@xipki xipki commented Sep 18, 2025

This adaption allows one to support new certificate type, e.g. the C509 certificate (https://datatracker.ietf.org/doc/draft-ietf-cose-cbor-encoded-cert/), without modifying the bouncycastle classes.

This adaption allows one to support new certificate type, e.g. the C509 certificate, without modifying the bouncycastle classes.
@xipki
Copy link
Contributor Author

xipki commented Sep 24, 2025

@peterdettman Hi Peter, could you please check this PR? We need this PR to demonstrate the integration of C509 certificates in the IETF COSE group.

@xipki
Copy link
Contributor Author

xipki commented Sep 24, 2025

@gselander @emanjon Here the PR.

@peterdettman peterdettman self-assigned this Mar 4, 2026
@peterdettman
Copy link
Collaborator

Apologies for the long delay, this is now merged, thanks.

Note that I changed the new TlsCrypto method to hasCertificateType.

There is other work pending around the server negotiation of certificate type (and auto-support for RawPublicKey when an X509 certificate is present); I will try to preserve flexibility around declared TlsCrypto support.

@xipki
Copy link
Contributor Author

xipki commented Mar 5, 2026

Thank you. Do you plan to add changes in this PR also to bc-lts-java and the fips variant?

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants