This issue was migrated from Pagure Issue #3094.Originally filed by edewata on 2019-02-05
Currently OCSP configuration in server.xml is used to configure JSS/NSS during startup. If the OCSP URL is pointing to the subsystem itself, some selftests might fail since the subsystem is not ready to handle OCSP requests at that time (i.e. circular dependency).
To address this problem, the OCSP configuration code should be moved out of Tomcat JSS and into JSSSubsystem such that the OCSP is configured after the selftests are done.
This issue was migrated from Pagure Issue #3094.Originally filed by edewata on 2019-02-05
Currently OCSP configuration in server.xml is used to configure JSS/NSS during startup. If the OCSP URL is pointing to the subsystem itself, some selftests might fail since the subsystem is not ready to handle OCSP requests at that time (i.e. circular dependency).
To address this problem, the OCSP configuration code should be moved out of Tomcat JSS and into JSSSubsystem such that the OCSP is configured after the selftests are done.