Uploaded image for project: 'EJBCA'
  1. EJBCA
  2. ECA-4821

Make CRL validation period configurable

    Details

      Description

      In PKIXCertRevocationStatusChecker(), when using CRL to verify a certificate revocation status: if the CRL does not have a "nextUpdate" value set, we check how old the CRL is (using "thisUpdate") value. If it is not more than one hour old, we use it anyway.

      This one hour value should be configurable. Suitably in cesecore.properties

        Attachments

          Issue Links

            Activity

              People

              Assignee:
              Unassigned
              Reporter:
              aveen Aveen Ismail (Inactive)
              Votes:
              0 Vote for this issue
              Watchers:
              1 Start watching this issue

                Dates

                Created:
                Updated: