Check validity of cached cert

latchset / custodia.ipa

FreeIPA vault plugin for Custodia

GNU General Public License v3.0

1 stars 1 forks source link

Open tiran opened 7 years ago

tiran commented 7 years ago

IPACertRequest.get does not validate if a cached cert is still valid. It should perform at least two tests:

check the status of the certificate in IPA. The cert may have been revoked by an admin through web interface of ipa tool.
check expiration date is below a configurable threshold, e.g. still usable for 30 days.