Certificate CRL checking should ignore CRL resource unavailability - Githubissues

magma / domain-proxy

A Domain proxy for Magma

BSD 3-Clause "New" or "Revised" License

1 stars 6 forks source link

Certificate CRL checking should ignore CRL resource unavailability #509

Closed xbend closed 2 years ago

xbend commented 2 years ago

Current implementation of checking SAS certificate against CRL may not start Configuration Controller when CRL resource is unavailable.

The functionality should work like this:

If there is anything wrong with getting the CRL list (CRL not specified in SAS cert extensions, CRL url not reachable available, CRL list corrupted etc) should result in starting the CC service and treat such situations as if SAS certificate would be valid (in a sense that it is not revoked)