You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
A crate like x509-parser can be used to get the OCSP URL. But there's no pure-Rust crate (ie, not openssl) to do OCSP, so the function would need to talk the OCSP protocol manually with something like der.
The text was updated successfully, but these errors were encountered:
Arnavion
changed the title
AcmeFunction should also check for the existing cert's revocation
acme Function should also check for the existing cert's revocation
Feb 17, 2021
Arnavion
changed the title
acme Function should also check for the existing cert's revocation
[acme] Check for the existing cert's revocation
Feb 17, 2021
Arnavion
changed the title
[acme] Check for the existing cert's revocation
[renew-cert] Check for the existing cert's revocation
Mar 8, 2021
... not just its expiry time.
A crate like
x509-parser
can be used to get the OCSP URL. But there's no pure-Rust crate (ie, notopenssl
) to do OCSP, so the function would need to talk the OCSP protocol manually with something likeder
.Ref:
X.680 - ASN.1
X.690 - ASN.1 BER and DER encodings
RFC6960 - OCSP , especially Appendix A for OCSP-over-HTTP
The text was updated successfully, but these errors were encountered: