OpenCerts / opencerts-website

Apache License 2.0
21 stars 69 forks source link

Revocation message when verifying revoke via OCSP #735

Closed ChenRen93 closed 1 year ago

ChenRen93 commented 1 year ago

Issues Hi, we are facing some issue regarding verification of certificate that has been revoked via OCSP. The current verifiable message display the revoked certificate as invalid instead of revoked.

Reference image

HJunyuan commented 1 year ago

Hi @ChenRen93, could you try verifying the certificate in question using our Toolkit (Verify)? Please share the output with us here. Thanks.

ChenRen93 commented 1 year ago

Hi @HJunyuan, thanks for the fast respond. The fragment verification is shown correct but only the dropzone UI logic doesn't show it.

[ { "type": "DOCUMENT_INTEGRITY", "name": "OpenAttestationHash", "data": true, "status": "VALID" }, { "status": "SKIPPED", "type": "DOCUMENT_STATUS", "name": "OpenAttestationEthereumTokenRegistryStatus", "reason": { "code": 4, "codeString": "SKIPPED", "message": "Document issuers doesn't have \"tokenRegistry\" property or TOKEN_REGISTRY method" } }, { "status": "SKIPPED", "type": "DOCUMENT_STATUS", "name": "OpenAttestationEthereumDocumentStoreStatus", "reason": { "code": 4, "codeString": "SKIPPED", "message": "Document issuers doesn't have \"documentStore\" or \"certificateStore\" property or DOCUMENT_STORE method" } }, { "name": "OpenAttestationDidSignedDocumentStatus", "type": "DOCUMENT_STATUS", "data": { "issuedOnAll": true, "revokedOnAny": true, "details": { "issuance": [ { "issued": true, "did": "did:ethr:0x5a76bB903129F27F5B6dF3c4ee6e61B2cF2Af069" } ], "revocation": [ { "revoked": true, "address": "https://censored.accredify.dev/revocation", "reason": { "message": "Document 0x9684b5e9815806c9ed056f803fb4ab7987c77d028920cc5748a564737a04475a has been revoked under OCSP Responder: https://censored.accredify.dev/revocation", "code": 9, "codeString": "PRIVILEGE_WITHDRAWN" } } ] } }, "status": "INVALID", "reason": { "message": "Document 0x9684b5e9815806c9ed056f803fb4ab7987c77d028920cc5748a564737a04475a has been revoked under OCSP Responder: https://censored.accredify.dev/revocation", "code": 9, "codeString": "PRIVILEGE_WITHDRAWN" } }, { "status": "SKIPPED", "type": "ISSUER_IDENTITY", "name": "OpenAttestationDnsTxtIdentityProof", "reason": { "code": 2, "codeString": "SKIPPED", "message": "Document issuers doesn't have \"documentStore\" / \"tokenRegistry\" property or doesn't use DNS-TXT type" } }, { "name": "OpenAttestationDnsDidIdentityProof", "type": "ISSUER_IDENTITY", "data": [ { "location": "censored.accredify.dev", "key": "did:ethr:0x5a76bB903129F27F5B6dF3c4ee6e61B2cF2Af069#controller", "status": "VALID" } ], "status": "VALID" } ]

We have censored the OCSP revocation route due to NDA

HJunyuan commented 1 year ago

@ChenRen93 We have just issued a fix for this. You may test it again in about 15 mins time (buffer for deployment to complete)

ChenRen93 commented 1 year ago

@HJunyuan Thank you for the quick update, just tested it is working perfectly.