Repository navigation

Improve resilient OCSP certificate revocation checker - #138

Closed

madislm wants to merge 19 commits into

web-eid:WE2-1030-use-platform-ocspfrom

madislm:AUT-2981

Closed

Improve resilient OCSP certificate revocation checker#138
madislm wants to merge 19 commits into
web-eid:WE2-1030-use-platform-ocspfrom
madislm:AUT-2981

Commits on Sep 25, 2026
- Use plaform OCSP implementation by default, move custom OCSP implementation to eu.webeid.ocsp and make it optional
  
  mrts
  and
  svenzik
  committed
  43832a8
Commits on Sep 28, 2026
- Add resilient OCSP certificate revocation checker
  
  aarmam
  authored and
  madislm
  committed
  b74273d
- AUT-2737 Change circuit breaker configuration parameter overrides
  madislm
  committed
  f588f58
- AUT-2679 Validate Basic Constraints and Key Usage extensions of OCSP responder certificate
  
  aarmam
  authored and
  madislm
  committed
  5efaf4a
- AUT-2730 Fix validation order
  
  aarmam
  authored and
  madislm
  committed
  2234f38
- AUT-2730 Throw UserCertificateOCSPCheckFailedException on service resolution failure
  
  aarmam
  authored and
  madislm
  committed
  79f6708
- AUT-2730 Compute the CertificateID once outside the request method
  
  aarmam
  authored and
  madislm
  committed
  bea4b65
- AUT-2730 Throw UserCertificateOCSPCheckFailedException on OCSP request building failure
  
  aarmam
  authored and
  madislm
  committed
  e0cb758
- AUT-2730 Add UserCertificateOCSPException for pre OCSP request failures
  
  aarmam
  authored and
  madislm
  committed
  a6131ba
- AUT-2730 Refactor OcspCertificateRevocationChecker to use UserCertificateOCSPException
  
  aarmam
  authored and
  madislm
  committed
  5dfeba0
- AUT-2730 Update note
  
  aarmam
  authored and
  madislm
  committed
  9d31c0d
- AUT-2730 Remove redundant access location null check
  
  aarmam
  authored and
  madislm
  committed
  195f144
- AUT-2730 Extract getOcspRequest
  
  aarmam
  authored and
  madislm
  committed
  b520b6a
- AUT-2730 Mock date in validation order test to keep certificates valid
  
  aarmam
  authored and
  madislm
  committed
  323d982
- AUT-2759 Improve test coverage
  
  aarmam
  authored and
  madislm
  committed
  531fb48
- AUT-2802 Make maxThisUpdateAge and maxNextUpdateAge separately configurable for OCSP servers
  madislm
  committed
  8a4abec
- AUT-2981 Wrap unchecked JJWT exceptions in signature validation
  
  aarmam
  authored and
  madislm
  committed
  a979fa7
- AUT-2981 Capture circuit breaker statistics when the request starts
  
  aarmam
  authored and
  madislm
  committed
  34878be
- AUT-2981 Fix compilation and tests after cherry-picking AUT-2981 commits
  madislm
  committed
  1bf54e0

Commits

Commits on Sep 25, 2026

Commits on Sep 28, 2026