{"categories":[{"label":"Cryptography","url":"https://skillfed.io/packages/category/security-cryptography"}],"enrichment":{"capability":"Validates X.509 certificates and certificate chains, supporting path building, revocation checks via CRL and OCSP, whitelisting, and point-in-time validation.","skillfed_tags":["pki","tls-ssl","revocation-checking"],"use_cases":["Validate TLS/SSL server certificates in custom HTTPS clients or proxies","Build and verify certificate chains for PKI-based authentication systems","Perform revocation checks against CRLs or OCSP responders in security-critical applications","Implement point-in-time certificate validation for historical or audit purposes","Whitelist or blacklist specific certificates or hash algorithms in custom security policies"],"what_it_does":"certvalidator is a Python library for validating X.509 certificates and certificate paths according to PKI standards. It handles the core validation logic\u2014signature verification, name chaining, validity dates, key usage extensions, and policy constraints\u2014plus advanced features like revocation checking through CRL and OCSP, whitelisting/blacklisting, and validation at a specific point in time. The library depends on asn1crypto for ASN.1 parsing and oscrypto for cryptographic operations.\n\nThe package is designed for developers who need to verify TLS/SSL server certificates, build and validate certificate chains, or implement custom PKI validation logic. It includes support for indirect and delta CRLs, delegated OCSP responders, and configurable soft-failure modes for revocation checks. The library does not support name constraints, which is a known limitation for some advanced PKI scenarios.","worth_installing":"Yes, if you need fine-grained X.509 validation control beyond what the standard library offers. The library is actively maintained, has low install friction, carries no known vulnerabilities, and is licensed permissively. Install with caution if you require name constraint support or depend on cutting-edge Python versions, as the latest release predates modern Python versions in the classifier list."},"id":"certvalidator","links":{"html":"https://skillfed.io/packages/certvalidator","md":"https://skillfed.io/packages/certvalidator.md","pypi":"https://pypi.org/project/certvalidator/"},"maintenance":{"status":"active"},"meta":{"latest_release":"2016-07-29","license_spdx":null,"license_treatment":"permissive","name":"certvalidator","python_support":"unspecified","summary":"Validates X.509 certificates and paths"},"popularity":{"monthly_downloads":446967,"position":6610,"tier":"top_15000"},"security":{"n_vulnerabilities":0},"version":"0.11.1"}