Files
Claudio DeSouza d1b269625b [cr145] bssl::VerifyCertificateChain requires TrustAnchor
This function used to have as second argument a `CertificateTrust`, but
now it requires a `TrustAnchor`, which can be created with a
`CertificateTrust` instance.

Chromium change:
https://boringssl.googlesource.com/boringssl/+/52b1463b45712c747a810be819a9cd41ab33fc46

commit 52b1463b45712c747a810be819a9cd41ab33fc46
Author: Nick Harper <nharper@chromium.org>
Date:   Tue Sep 9 17:04:01 2025 +0000

    [WIP] Support verifying signatureless MTCs.

    Add support to CertPathBuilder to verify Merkle Tree Certificates as
    defined in draft-davidben-tls-merkle-tree-certs-08.  This only supports
    "signatureless" certificates (i.e. ones that contain a Merkle Tree
    inclusion proof but no RSA/ECDSA/ML-DSA signature).

    Change-Id: I6f2ff82897393ca8944228fe44275bb9e91729f4
    Reviewed-on: https://boringssl-review.googlesource.com/c/boringssl/+/82727
    Commit-Queue: Nick Harper <nharper@chromium.org>
    Reviewed-by: Matt Mueller <mattm@google.com>
2026-01-29 13:40:44 -05:00
..