Untangling the certificate error messages
summary
Conference research presents a concrete bug-hunting and cleanup effort: developers catalog 77 OpenSSL errors, produce reproducible example certificates that trigger single validation failures, and run those cases across multiple TLS stacks to build a mapping table of equivalent messages. The team hosts consolidated docs at x509errors.org, reports about two-thirds of OpenSSL errors already matched across libraries, and uses IPv4 scan data to prioritize which rare versus frequent errors to merge or clarify.
AI-written summary · about
chapters (6)
- 0:00Certificate errors intro
- 3:54x.509 errors project
- 9:30Unified error documentation
- 15:39Project goals and feedback
- 17:27Project status and plans
- 18:50Q&A
related talks
23mMaking heads or tails of TLS certificate errors
51mUnderstanding TLS certificate validation errors
27mDebugging TLS/SSL
53mOpenSSL Deep Dive: The Good, Bad And Not-So-Ugly
01h 01mHTTPS & TLS in 2016: Security practices from the front lines
13mX.509DoS: Exploiting and Detecting Denial-of-Service Vulnerabilities in
46mMastering TLS, OpenSSL and Certificates
30mHashiTLS: Demystifying Security Certs