[CXF-7296] Add support to enable revocation for TLS via configuration

• Type: Improvement
• Status: Closed
• Priority: Major
• Resolution: Fixed
• Fix Version/s: 3.1.11, 3.2.0
• Component/s: Transports
• Estimated Complexity: Unknown
• Assignee: Colm O hEigeartaigh
• Reporter: Colm O hEigeartaigh
• Created: 23/Mar/17 14:22
• Updated: 10/Apr/17 19:04
• Resolved: 23/Mar/17 15:56

Description

This task is to add support to enable revocation for TLS via configuration. Currently it's not possible to support OCSP for example when spring-configuring TLS on the client or service side (Jetty).

A boolean new attribute will be introduced called "enableRevocation" (defaulting to false) for the tlsClientParameters/tlsServerParameters. When enabled OCSP is supported if the Java security property "ocsp.enable" is also set to true.