Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Address OCSP client caching issue #25986

Merged
merged 3 commits into from
Mar 18, 2024

Commits on Mar 15, 2024

  1. Address OCSP client caching issue

     - The OCSP cache built into the client that is used by cert-auth
       would cache the responses but when pulling out a cached value the
       response wasn't validating properly and was then thrown away.
    
     - The issue was around a confusion of the client's internal status
       vs the Go SDK OCSP status integer values.
    
     - Add a test that validates the cache is now used
    stevendpclark committed Mar 15, 2024
    Configuration menu
    Copy the full SHA
    eeb94d7 View commit details
    Browse the repository at this point in the history
  2. Add cl

    stevendpclark committed Mar 15, 2024
    Configuration menu
    Copy the full SHA
    11e3889 View commit details
    Browse the repository at this point in the history

Commits on Mar 18, 2024

  1. Fix PKI test failing now due to the OCSP cache working

     - Remove the previous lookup before revocation as now the OCSP
       cache works so we don't see the new revocation as we are actually
       leveraging the cache
    stevendpclark committed Mar 18, 2024
    Configuration menu
    Copy the full SHA
    802f867 View commit details
    Browse the repository at this point in the history