> One thing I would be interested in is if there were any differences between rust-webpki and BoringSSL itself. Adding BoringSSL as a harness would probably be

> One thing I would be interested in is if there were any differences between rust-webpki and BoringSSL itself. Adding BoringSSL as a harness would probably be pretty easy! We have an existing OpenSSL harness[1] that would probably be straightforward to adapt. We could also probably improve the visualization of differences between implementations: right now you can find them either by looking at individual testcases[2] or on each harness's "anomalies" page[3], but it'd be cool to have a more unified UI. [1]: https://github.com/C2SP/x509-limbo/blob/main/harness/openssl/main.cpp https://github.com/C2SP/x509-limbo/blob/main/harness/openssl... [2]: https://x509-limbo.com/testcases/rfc5280/#rfc5280akileaf-missing-aki https://x509-limbo.com/testcases/rfc5280/#rfc5280akileaf-mis... [3]: https://x509-limbo.com/anomalous-results/rust-webpki/ https://x509-limbo.com/anomalous-results/rust-webpki/