As a Security Server Administrator I need the ability to use secondary OCSP and TSA

[kimmormh]

Affected components: x-Road, OCSP, TSA Affected documentation: - Estimated delivery: - External reference: -

Problem Currently the x-Road schema only supports a single TSA and a single OCSP responder per CA.

In order to retain functionality in a network outage, between x-Road members sharing a common internet interface, failing over to Intranet-side TSA and OCSP, if applicable, would be greatly appreciated

Acceptance criteria

• x-Road should automatically switch to secondary TSA and OCSP, if primary is unavailable (Blocked in the FW), and recover automatically when primary is available again, and try recovery if secondary fails between polling intervals

[petkivim]

This issue should be evaluated together with the issue #151.

[petkivim]

The requested features are included in the X-Road backlog issues XRDDEV-139 and XRDDEV-154.