Uploaded image for project: 'EJBCA'
  1. EJBCA
  2. ECA-7336

OCSP warningBeforeExpirationTime not working

    Details

    • Type: Bug
    • Status: Closed
    • Priority: Major
    • Resolution: Fixed
    • Affects Version/s: EJBCA 6.5.0
    • Fix Version/s: EJBCA 6.15.1
    • Component/s: None
    • Labels:
      None
    • Sprint:
      EJBCA Sprint 21 Team Bob

      Description

      The warning for OCSP signer certificate about to expire does not seem to be triggering correctly.

      Debug log will show time not yet reached even if it is a later time:

      Time for "certificate will soon expire" not yet reached. You will be warned after: Thu Oct 04 13:35:14 CEST 2018 

       

      To reproduce:

      1. Create OCSP keybinding
      2. Create an OCSP signer certificate with short validity (warning should trigger 1 week before expiration by default) and install in OCSP keybinding
      3. Send OCSP request
      4. Check server log for warning. Debug log will say that time is not yet reached

        Attachments

          Issue Links

            Activity

              People

              Assignee:
              samuel Samuel Lidén Borell
              Reporter:
              Hodell Anton Hodell
              Verified by:
              Jekaterina Bunina
              Votes:
              0 Vote for this issue
              Watchers:
              3 Start watching this issue

                Dates

                Created:
                Updated:
                Resolved:

                  Time Tracking

                  Estimated:
                  Original Estimate - Not Specified
                  Not Specified
                  Remaining:
                  Remaining Estimate - 0 minutes
                  0m
                  Logged:
                  Time Spent - 2 hours
                  2h