We're making good progress on upki, our collaboration with the rustls project to bring browser-grade web PKI capabilities to low level system utilities.
The first beta release makes available revocation checks based on CRLite filters from Mozilla.
#Canonical is hosting the backend service, and is now making a PPA available so you can try out upki in #Ubuntu, as well as a patched version of OpenSSL that makes use of the new capability.
Give it a go and let us know!
https://discourse.ubuntu.com/t/try-the-upki-preview-for-ubuntu/84705
As ever, thanks to @djc@hachyderm.io and @ctz@infosec.exchange for their hard work on this!







