[PDFBOX-4920] OCSP validation takes very long in ci build

• Type: Bug
• Status: Closed
• Priority: Major
• Resolution: Fixed
• Affects Version/s: 2.0.20, 3.0.0 PDFBox
• Fix Version/s: 2.0.21, 3.0.0 PDFBox
• Component/s: Signing
• Assignee: Tilman Hausherr
• Reporter: Tilman Hausherr
• Created: 21/Jul/20 18:04
• Updated: 21/Aug/20 04:54
• Resolved: 22/Jul/20 17:13

Description

The trunk and sonar builds take very long since the change to validate the certificates of the timestamp

Jul 21, 2020 5:51:08 PM org.apache.pdfbox.examples.signature.cert.CertificateVerifier extractOCSPURL
INFO: OCSP URL: http://www.freetsa.org:2560

Jul 21, 2020 5:57:55 PM org.apache.pdfbox.examples.signature.cert.OcspHelper checkNonce
INFO: Nonce is good

This doesn't happen in the 2.0 build, and doesn't happen on my machine. I'll add some log output.