PeculiarVentures / PKI.js

PKI.js is a pure JavaScript library implementing the formats that are used in PKI applications (signing, encryption, certificate requests, OCSP and TSP requests/responses). It is built on WebCrypto (Web Cryptography API) and requires no plug-ins.
http://pkijs.org
Other
1.3k stars 204 forks source link

Are CRL/OCPS required or are they optional? #292

Open themighty1 opened 3 years ago

themighty1 commented 3 years ago

When invoking new CertificateChainValidationEngine() is it mandatory to provide CRLs or OCSPs? I got the impression from reading other tickets here that they are mandatory. However, .verify() returns true even if I don't provide any CRL/OCSP. Seeking clarification.