Skip to content

Add resilient OCSP certificate revocation checker#99

Open
madislm wants to merge 1 commit intoweb-eid:WE2-1030-use-platform-ocspfrom
madislm:AUT-2514
Open

Add resilient OCSP certificate revocation checker#99
madislm wants to merge 1 commit intoweb-eid:WE2-1030-use-platform-ocspfrom
madislm:AUT-2514

Conversation

@madislm
Copy link
Copy Markdown

@madislm madislm commented Feb 2, 2026

AUT-2514

Signed-off-by: Madis Jaagup Laurson madisjaagup.laurson@nortal.com

@madislm madislm force-pushed the AUT-2514 branch 2 times, most recently from 0e6161a to e927de2 Compare February 2, 2026 09:16
@madislm madislm force-pushed the AUT-2514 branch 5 times, most recently from e96286a to a324e96 Compare February 10, 2026 08:29
@mrts mrts force-pushed the WE2-1030-use-platform-ocsp branch from 10a405b to 74e7af2 Compare February 20, 2026 16:55
@madislm madislm force-pushed the AUT-2514 branch 2 times, most recently from 9cdcc89 to ef4ae35 Compare February 27, 2026 09:35
@mrts mrts force-pushed the WE2-1030-use-platform-ocsp branch from 74e7af2 to f55d636 Compare March 6, 2026 18:37
Comment thread src/main/java/eu/webeid/ocsp/service/FallbackOcspService.java Outdated
Comment thread src/main/java/eu/webeid/ocsp/service/OcspService.java Outdated
Comment thread src/main/java/eu/webeid/ocsp/OcspCertificateRevocationChecker.java Outdated
Comment thread src/main/java/eu/webeid/ocsp/protocol/OcspResponseValidator.java Outdated
Comment thread src/main/java/eu/webeid/ocsp/protocol/IssuerCommonName.java Outdated
Comment thread src/main/java/eu/webeid/ocsp/protocol/IssuerCommonName.java Outdated
Comment thread src/main/java/eu/webeid/ocsp/exceptions/OCSPClientException.java Outdated
Comment thread src/main/java/eu/webeid/ocsp/exceptions/OCSPClientException.java Outdated
Comment thread src/main/java/eu/webeid/ocsp/service/AiaOcspService.java Outdated
Comment thread src/main/java/eu/webeid/ocsp/service/FallbackOcspServiceConfiguration.java Outdated
Comment thread src/main/java/eu/webeid/ocsp/service/FallbackOcspServiceConfiguration.java Outdated
Comment thread src/main/java/eu/webeid/ocsp/OcspCertificateRevocationChecker.java Outdated
Comment thread src/main/java/eu/webeid/ocsp/protocol/IssuerDistinguishedName.java Outdated
Comment thread src/main/java/eu/webeid/security/validator/revocationcheck/RevocationInfo.java Outdated
Comment thread src/main/java/eu/webeid/security/validator/revocationcheck/RevocationInfo.java Outdated
Comment thread src/main/java/eu/webeid/security/validator/revocationcheck/RevocationInfo.java Outdated
Comment thread src/main/java/eu/webeid/security/validator/revocationcheck/RevocationInfo.java Outdated
@madislm madislm force-pushed the AUT-2514 branch 6 times, most recently from 83ff528 to b4d8d06 Compare April 27, 2026 10:38
public List<RevocationInfo> validateCertificateNotRevoked(X509Certificate subjectCertificate,
X509Certificate issuerCertificate) throws AuthTokenException {
OcspService primaryService = resolvePrimaryOcspService(subjectCertificate);
CircuitBreaker circuitBreaker = circuitBreakerRegistry.circuitBreaker(primaryService.getAccessLocation().toASCIIString());
Copy link
Copy Markdown
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

If fallback service is not present, this creates an unused circuit breaker object, which is redundant and slightly misleading. This should be moved after line 123.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants