Open jfernandezsqs opened 1 year ago
The CA in the repo should provide an OCSP to enable revocation of issued certificates and checking the revocation status.
The certificates generated by the actual IDS-testbed CA do not have Subject Alternative Name to determine DNS and IP-address.
Currently, the DNS is handled by custom TLS certificates.
We should take care that the CA tool fulfills at least the following requirements:
suggestions for tooling from the SubWG meeting:
SQS has performed a Demo of the Atos Web Portal CA during the Sub-working Group bi-weekly meeting.
Waiting for ATOS CA implementation.