Freshmeat page: http://freshmeat.net/projects/pathfinder
PathFinder is designed to provide a mechanism for any program to perform RFC3280-compliant path discovery and validation of X509 certificates, even when some of the intermediate certificates are not present on the local machine. By design, Pathfinder automatically downloads any such certificates (and their CRLs) from the Internet as needed using the AIA and CRL distribution point extensions of the certificates it is processing. All this happens via a simple client/server architecture. When a client needs to validate a certificate, it may contact the Pathfinder daemon, which listens on the D-Bus system bus for incoming requests and does all the complicated path discovery and validation. In this way, any program can easily gain the ability to reliably validate the trustworthiness of X.509 certificates. For the convenience of those using OpenSSL or NSS (Netscape Security Services), two libraries containing a callback suitable for use with an SSL connection are provided with the main Pathfinder distribution.
This project has the following developers:
Keep up with the latest Advogato features by reading the Advogato status blog.