How (not) to make a mockery of trust

" summary

Describes Certomancer, an open-source (MIT) PKI testing framework for generating X.509 test data and mocking trust services. Covers concrete problems like certificate validation (including OCSP/CRL revocation), RFC 3161 time-stamping, and testing against remote signing services without exposing production keys, and explains Certomancer’s features, plugin API and practical uses.

AI-written summary · about

" related talks

• 24mFrom Trust Assumptions To Trust Evidence: Why PKI and Confidential ComputingBrian Trzupek · Confidential Computing Summit 2026
• 36mYou Like It Or Not; You Need It! - PKI And Certificate ManagementShweta Vohra · KubeCon + CloudNativeCon North America 2022
• 30mHashiTLS: Demystifying Security CertsAlan Scherger · HashiTalks 2020
• 48mChain of Fools: An Exploration of Certificate Chain Validation MishapsJames Barclay, Olabode Anise, Nick Mooney · Black Hat Europe 2019
• 06mIgnite: Monitoring and maintaining self-signed certificates is dangerousMattias Schlenker · Open Source Monitoring Conference 2024
• 33mDemystify Modern Signing: Keys, Certs, and EnvelopesJohn Kjell · CloudNativeSecurityCon North America 2024
• 30mCert-Manager Beyond Ingress – Exploring the Variety of Use CasesMatthew Bates · KubeCon + CloudNativeCon Europe 2021
• 51mCertificate Transparency Logs: Roadmaps to Riches or Ruin?Nolan Reisbeck · BSidesSF 2023