Newsgroups: php.internals
Path: news.php.net
Xref: news.php.net php.internals:99253
Return-Path: <me@kelunik.com>
Mailing-List: contact internals-help@lists.php.net; run by ezmlm
Delivered-To: mailing list internals@lists.php.net
Received: (qmail 99233 invoked from network); 30 May 2017 05:51:30 -0000
Received: from unknown (HELO lists.php.net) (127.0.0.1)
  by localhost with SMTP; 30 May 2017 05:51:30 -0000
Authentication-Results: pb1.pair.com header.from=me@kelunik.com; sender-id=unknown
Authentication-Results: pb1.pair.com smtp.mail=me@kelunik.com; spf=permerror; sender-id=unknown
Received-SPF: error (pb1.pair.com: domain kelunik.com from 81.169.146.219 cause and error)
X-PHP-List-Original-Sender: me@kelunik.com
X-Host-Fingerprint: 81.169.146.219 mo4-p00-ob.smtp.rzone.de  
Received: from [81.169.146.219] ([81.169.146.219:36089] helo=mo4-p00-ob.smtp.rzone.de)
	by pb1.pair.com (ecelerity 2.1.1.9-wez r(12769M)) with ESMTP
	id 72/7C-34073-0680D295 for <internals@lists.php.net>; Tue, 30 May 2017 01:51:29 -0400
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; t=1496123485;
	l=2144; s=domk; d=kelunik.com;
	h=Content-Type:Cc:To:Subject:Date:From:References:In-Reply-To:
	MIME-Version;
	bh=Jgp9JK2NFEQQnjCZlZk4+G0i4qQhi4jDYEHNSjrSyjw=;
	b=wqEW854ZPMN6fzyh7gL0U1sR4dx9VUM+84VcCqvtdT7PwNIV1fVVZ7Mkb8EUiEmBfR
	DwFhMSOyiPyMJCglvNRYjpFUdzShgYw+e04tOj/vMzeNo8zi2VaU/KzKyHm7J4V8t3dk
	oYl3bKcfmdiDz0dPNPgEqyrZ+hJfB6HvxL+nQ=
X-RZG-AUTH: :IWkkfkWkbvHsXQGmRYmUo9mls2vWuiu+7SLDup6E67mzuoNHBqX93Q==
X-RZG-CLASS-ID: mo00
Received: by mail-oi0-f45.google.com with SMTP id w10so99042356oif.0
        for <internals@lists.php.net>; Mon, 29 May 2017 22:51:25 -0700 (PDT)
X-Gm-Message-State: AODbwcCOxz3gyYM2XHLCO4U+VZEvbZd3K4mYkqhgh2KYV4gQZ3hPtwjt
	5PGNiBAZA2TAYrlYDq4kGWZcLIEvuA==
X-Received: by 10.157.60.119 with SMTP id j52mr3631831ote.31.1496123484436;
 Mon, 29 May 2017 22:51:24 -0700 (PDT)
MIME-Version: 1.0
Received: by 10.74.176.133 with HTTP; Mon, 29 May 2017 22:51:23 -0700 (PDT)
In-Reply-To: <CAEKnhAH8eGzcUsWODc75_L1kq4OtF2bvR7qJkijWWSVoY7c_mQ@mail.gmail.com>
References: <CANUQDCiUYNwH_tkZyS_cbWVa1X=4CAA3_14VD+fYjAXk-JU=1g@mail.gmail.com>
 <CANUQDChzB7EYyx8QOPgDC2TPR7n-h-dK43tHDfTZ=ocHPLHSOQ@mail.gmail.com> <CAEKnhAH8eGzcUsWODc75_L1kq4OtF2bvR7qJkijWWSVoY7c_mQ@mail.gmail.com>
Date: Tue, 30 May 2017 07:51:23 +0200
X-Gmail-Original-Message-ID: <CANUQDChBq+5FTaq=gt4tSJjmt8cg0UnqqV_tW1bJg5gGhKibxQ@mail.gmail.com>
Message-ID: <CANUQDChBq+5FTaq=gt4tSJjmt8cg0UnqqV_tW1bJg5gGhKibxQ@mail.gmail.com>
To: Jakub Zelenka <bukka@php.net>
Cc: PHP Internals <internals@lists.php.net>
Content-Type: multipart/alternative; boundary="001a11c00fe2d481fe0550b76453"
Subject: Re: [RFC] Distrust SHA-1 Certificates
From: me@kelunik.com (Niklas Keller)

--001a11c00fe2d481fe0550b76453
Content-Type: text/plain; charset="UTF-8"

Hi Jakub,

do you know how I can check whether a certificate is in the trust store or
not?

Regards, Niklas

2017-05-29 22:00 GMT+02:00 Jakub Zelenka <bukka@php.net>:

> On Mon, May 29, 2017 at 11:58 AM, Niklas Keller <me@kelunik.com> wrote:
>
>> Morning Internals,
>>
>> I have updated the RFC to use a "min_signature_bits" setting instead.
>>
>>
> Wouldn't be better use security levels instead as it is in OpenSSL? Of
> course I mean just for sig level to not re-implement everything. Basically
> having sig_level or something like that...
>

--001a11c00fe2d481fe0550b76453--