# Package to validate X.509 certificates

**URL:** <https://discourse.julialang.org/t/package-to-validate-x-509-certificates/23549>\
**Category:** General Usage\
**Created:** [April 26, 2019, 11:12am UTC](https://discourse.julialang.org/t/package-to-validate-x-509-certificates/23549 "2019-04-26T11:12:13Z")\
**Posts on this page:** 4\
**Page:** 1

<div class="post-metadata">

**Author:** ![sambitdash](https://sea2.discourse-cdn.com/julialang/user_avatar/discourse.julialang.org/sambitdash/32/1377_2.png) [@sambitdash](https://discourse.julialang.org/u/sambitdash)\
**Post date:** [April 26, 2019, 11:12am UTC](https://discourse.julialang.org/t/package-to-validate-x-509-certificates/23549/1 "2019-04-26T11:12:13Z")

</div>

Hi All,

I was looking for a Julia package that can validate X.509 certificates. Has anyone developed any for the same? Or the approach will be to query the underlying MBedSSL (armSSL) library directly?

regards,

Sambit

---

<div class="post-metadata">

**Author:** ![quinnj](https://sea2.discourse-cdn.com/julialang/user_avatar/discourse.julialang.org/quinnj/32/11_2.png) [@quinnj](https://discourse.julialang.org/u/quinnj)\
**Post date:** [April 26, 2019, 11:39am UTC](https://discourse.julialang.org/t/package-to-validate-x-509-certificates/23549/2 "2019-04-26T11:39:03Z")

</div>

Yeah, I would definitely look at [MbedTLS.jl](https://github.com/JuliaWeb/MbedTLS.jl); I’m sure there are some utilities there and if not, I’m happy to accept a PR there.

---

<div class="post-metadata">

**Author:** ![sambitdash](https://sea2.discourse-cdn.com/julialang/user_avatar/discourse.julialang.org/sambitdash/32/1377_2.png) [@sambitdash](https://discourse.julialang.org/u/sambitdash)\
**Post date:** [April 26, 2019, 3:21pm UTC](https://discourse.julialang.org/t/package-to-validate-x-509-certificates/23549/3 "2019-04-26T15:21:53Z")

</div>

Added [https://github.com/JuliaWeb/MbedTLS.jl/issues/202](https://github.com/JuliaWeb/MbedTLS.jl/issues/202) for the same.

---

<div class="post-metadata">

**Author:** ![sambitdash](https://sea2.discourse-cdn.com/julialang/user_avatar/discourse.julialang.org/sambitdash/32/1377_2.png) [@sambitdash](https://discourse.julialang.org/u/sambitdash)\
**Post date:** [April 30, 2019, 6:20pm UTC](https://discourse.julialang.org/t/package-to-validate-x-509-certificates/23549/4 "2019-04-30T18:20:43Z")

</div>

`MbedTLS` as a library is pretty limited in functionality in comparison to `OpenSSL`. For example, PKCS#7 (CMS envelope), V3 extensions are not exposed by the APIs. For things like `CRLDistributionPoint` or `Authority Information Access` or OCSP info kind of data needs significant hand coding to extract. While it may have functional completeness from a TLS standpoint, it may not be the best library for X509 operations. It may be a good idea to resurrect the OpenSSL library packages purely for the crypto and X509 modules.