Details
-
Type:
Bug
-
Status: Closed
-
Priority:
Major
-
Resolution: Fixed
-
Affects Version/s: EJBCA 6.5.0
-
Fix Version/s: EJBCA 6.15.1
-
Component/s: None
-
Labels:None
-
Sprint:EJBCA Sprint 21 Team Bob
Description
The warning for OCSP signer certificate about to expire does not seem to be triggering correctly.
Debug log will show time not yet reached even if it is a later time:
Time for "certificate will soon expire" not yet reached. You will be warned after: Thu Oct 04 13:35:14 CEST 2018
To reproduce:
- Create OCSP keybinding
- Create an OCSP signer certificate with short validity (warning should trigger 1 week before expiration by default) and install in OCSP keybinding
- Send OCSP request
- Check server log for warning. Debug log will say that time is not yet reached
Attachments
Issue Links
- is caused by
-
ECA-4393 Reduce number of errors from the OCSP signing cache about expired CAs
-
- Closed
-
