[CXF-8275] Support CRL/OCSP cert extensions in the XKMS TrustedAuthorityValidator

• Type: Improvement
• Status: Closed
• Priority: Major
• Resolution: Fixed
• Fix Version/s: 3.4.0
• Estimated Complexity: Unknown
• Assignee: Colm O hEigeartaigh
• Reporter: Colm O hEigeartaigh
• Created: 01/May/20 10:15
• Updated: 22/Dec/21 20:43
• Resolved: 01/May/20 10:22

Description

This task is to support CRL/OCSP cert extensions in the XKMS TrustedAuthorityValidator, by making sure that revocation is enabled for all cases, and not just if the CertStore has a non-empty set of CRLs.

However, a consequence of this is that revocation is now disabled by default for XKMS, as otherwise a bunch of tests fail.