notaryproject / notation

A CLI tool to sign and verify artifacts
https://notaryproject.dev/
Apache License 2.0
302 stars 84 forks source link

OCSP timeout threshold is 2 seconds #976

Open JeyJeyGao opened 6 days ago

JeyJeyGao commented 6 days ago

What is not working as expected?

The OCSP timeout threshold is hardcoded to 2 seconds, which is not flexible enough. One of our notation customers encounters timeout issues frequently, so we need to provide a way to customize the OCSP timeout threshold.

What did you expect to happen?

provide a way to customize the OCSP timeout threshold

How can we reproduce it?

Do signature verification with a OCSP server that has high latency

Describe your environment

Linux amd64

What is the version of your Notation CLI or Notation Library?

Notation v1.2.0-alpha.1