code wiki / x509
topic: x509
42 modules sharing the x509 name family (derived from the tree's prefix discipline).
The x509 topic family in the Nishi sovereign ecosystem provides tools for handling X.509 v3 certificates and related operations. nx_x509 parses certificates, nx_x509_build creates self-signed certificates, and nx_x509_chain_verify ensures the validity of certificate chains by walking from leaf to root. These modules work together to support secure communication and authentication within the ecosystem.
auto-narrated by the local model from this topic's module headers; links verified against the wiki index.
narrated overview -- maintained by the narration lane, module links verified against this wiki.
| module | description | lines | funcs |
|---|---|---|---|
| nx_x509.nx | minimal X.509 v3 certificate parser (RFC 5280). | 279 | 4 |
| nx_x509_build.nx | V-HOST-4b: sovereign X.509 v3 self-signed cert builder. | 603 | 16 |
| nx_x509_chain_cache_gate.nx | durable regression witness for the cert-validation MEMOIZATION cache | 34 | 4 |
| nx_x509_chain_verify.nx | walk an X.509 cert chain leaf-to-root. | 236 | 7 |
| nx_x509_chain_verify_test.nx | KAT for the X.509 chain walker. | 216 | 3 |
| nx_x509_csr_emit.nx | PKCS#10 CSR emitter for Ed25519 (RFC 2986 + RFC 8410). | 302 | 7 |
| nx_x509_dn_match.nx | byte-equality comparison of two X.509 | 60 | 2 |
| nx_x509_leaf_check.nx | single-cert "leaf" orchestrator. | 113 | 3 |
| nx_x509_leaf_check_test.nx | orchestrator verdict-mapping KAT. | 295 | 5 |
| nx_x509_leaf_emit.nx | self-signed Ed25519 X.509 leaf-certificate emitter (RFC 5280 + RFC 8410). | 197 | 11 |
| nx_x509_parse_globalsign_test.nx | isolated x509_parse on hardcoded | 939 | 3 |
| nx_x509_pubkey_alg.nx | identify the public-key algorithm of a | 187 | 8 |
| nx_x509_pubkey_alg_test.nx | KAT for pubkey-alg OID identification. | 88 | 1 |
| nx_x509_pubkey_ec.nx | extract an uncompressed ECDSA-P256 | 133 | 4 |
| nx_x509_pubkey_ec_test.nx | KAT for ECDSA-P256 pubkey extraction | 123 | 1 |
| nx_x509_pubkey_ed.nx | extract a 32-byte Ed25519 public key from | 63 | 3 |
| nx_x509_pubkey_ed_kat.nx | gate for nx_x509_pubkey_extract_ed25519 (HONESTY SYSTEM weak point reach=479, | 85 | 3 |
| nx_x509_pubkey_rsa.nx | extract an RSA-2048 public key (n, e) from | 131 | 3 |
| nx_x509_pubkey_rsa_4096.nx | extract an RSA-4096 public key (n, e) | 117 | 3 |
| nx_x509_rsa_root_gate.nx | THE RSA CRYPTO KAT the x509 family was missing (honesty [W] follow-through): | 3 | 0 |
| nx_x509_san.nx | X.509 Subject Alternative Name walk + hostname | 350 | 8 |
| nx_x509_san_test.nx | KAT for the SAN extension walk + hostname | 259 | 3 |
| nx_x509_sig_alg.nx | identify the signature algorithm of an | 188 | 3 |
| nx_x509_sig_alg_test.nx | KAT for sig-alg OID identification. | 102 | 1 |
| nx_x509_trust_root_kat.nx | the RSA-verify crypto gate the ECDSA fixture couldn't provide (HONESTY SYSTEM | 112 | 3 |
| nx_x509_trust_store.nx | trust anchor store + subject-DN lookup. | 158 | 6 |
| nx_x509_trust_store_load.nx | bulk-load a TrustStore from a | 128 | 3 |
| nx_x509_trust_store_load_test.nx | KAT for the bulk trust-store loader. | 195 | 4 |
| nx_x509_trust_store_test.nx | KAT for the trust anchor store. | 134 | 3 |
| nx_x509_validate.nx | X.509 certificate validation (Gap I.2.A). | 104 | 2 |
| nx_x509_validate_test.nx | self-signed Ed25519 cert validation KAT. | 140 | 1 |
| nx_x509_validity.nx | X.509 Validity period parse + check. | 196 | 5 |
| nx_x509_validity_test.nx | KAT for the X.509 validity period | 216 | 3 |
| nx_x509_verify_ecdsa.nx | X.509 outer-signature verification for | 106 | 3 |
| nx_x509_verify_ecdsa_p384.nx | X.509 outer-signature verification | 89 | 3 |
| nx_x509_verify_ecdsa_test.nx | end-to-end KAT for the X.509 | 120 | 1 |
| nx_x509_verify_rsa_gate.nx | DIRECT gate for the x509 RSA-verify family (flagged by the HONESTY SYSTEM | 120 | 5 |
| nx_x509_verify_rsa_pkcs1_sha256.nx | X.509 outer-signature verify | 55 | 3 |
| nx_x509_verify_rsa_pkcs1_sha256_4096.nx | X.509 outer-signature | 49 | 3 |
| nx_x509_verify_under_issuer.nx | per-cert outer-signature verify | 291 | 3 |
| nx_x509_verify_under_issuer_test.nx | KAT for the per-cert | 211 | 1 |
| x509.nx | minimal X.509 v3 certificate parser (RFC 5280). | 229 | 4 |