deptofdefense / iceberg

File server using client certificate authentication and policy-based access control
MIT License
6 stars 6 forks source link

Support Certificate Revocation Lists #8

Closed pjdufour-dds closed 3 years ago

pjdufour-dds commented 4 years ago

Support Certificate Revocation Lists by loading a CRL at startup and checking each request against the CRL. This should be an optional feature. CRL support is found in the crypto/x509 package rather than in crypto/tls.