search

wso2-extensions / identity-outbound-auth-x509

Apache License 2.0
1 stars 55 forks source link

Add CRL (certificate revocation list) support #26

Open ruwanta opened 5 years ago

ruwanta commented 5 years ago

Description: Certificate revocation list (or CRL) is "a list of digital certificates that have been revoked by the issuing certificate authority (CA) before their scheduled expiration date and should no longer be trusted" Need to add this support to allow tighter security.

Related Issues: https://wso2.org/jira/browse/ISCONNECT-26

IndunilRathnayake commented 5 years ago

This is already implemented with https://github.com/wso2-extensions/identity-x509-commons/blob/master/components/validation/src/main/java/org/wso2/carbon/identity/x509Certificate/validation/validator/CRLValidator.java. We can use this validator.

ruwanta commented 5 years ago

@IndunilRathnayake Thanks. Do you happen to know any documentation how to configure and use it?