Add ACME revocation authentication variants

kuehne-trustable-de / ca3sCore

ca3s is a CA system with a flexible RA part based on BPM aiming to automate as much as possible. Therefore providing ACME and SCEP interfaces in addition to the usual web form. Aggregating certificate sets from different sources and using CMP-connected CAs or ADCS instances for certificate creation. The ca3s core server is based on spring boot 2.x and jHipster

European Union Public License 1.2

8 stars 3 forks source link

Add ACME revocation authentication variants #561

Open kuehne-trustable-de opened 2 months ago

kuehne-trustable-de commented 2 months ago

According to RFC8555 there are the options

sign message with a different account having matching authorizations for the requested certificate
sign the request with the certificates private key

both options are not supported, yet!

kuehne-trustable-de commented 2 weeks ago

partly fixed (second topic) in version 1.1.13