Post #4093664
2026-07-01 09:32 UTC
We're making good progress on upki, our collaboration with the rustls project to bring browser-grade web PKI capabilities to low level system utilities.
The first beta release makes available revocation checks based on CRLite filters from Mozilla.
#Canonical is hosting the backend service, and is now making a PPA available so you can try out upki in #Ubuntu, as well as a patched version of OpenSSL that makes use of the new capability.
Give it a go and let us know!
https://discourse.ubuntu.com/t/try-the-upki-preview-for-ubuntu/84705
As ever, thanks to @djc and @ctz for their hard work on this!
Replies (1)
-
@djc@hachyderm.io 2026-07-01 10:01
@jnsgruk@hachyderm.io @ctz@infosec.exchange for Rust applications, we plan to release a version of rustls-platform-verifier with upki support soon. https://github.com/rustls/rustls-platform-verifier/pull/235