Uploaded image for project: 'EJBCA'
  1. EJBCA
  2. ECA-7336

OCSP warningBeforeExpirationTime not working

    Details

    • Type: Bug
    • Status: Closed
    • Priority: Major
    • Resolution: Fixed
    • Affects Version/s: EJBCA 6.5.0
    • Fix Version/s: EJBCA 6.15.1
    • Component/s: None
    • Labels:
      None
    • Sprint:
      EJBCA Sprint 21 Team Bob

      Description

      The warning for OCSP signer certificate about to expire does not seem to be triggering correctly.

      Debug log will show time not yet reached even if it is a later time:

      Time for "certificate will soon expire" not yet reached. You will be warned after: Thu Oct 04 13:35:14 CEST 2018 

       

      To reproduce:

      1. Create OCSP keybinding
      2. Create an OCSP signer certificate with short validity (warning should trigger 1 week before expiration by default) and install in OCSP keybinding
      3. Send OCSP request
      4. Check server log for warning. Debug log will say that time is not yet reached

        Attachments

          Issue Links

            Activity

              People

              • Assignee:
                samuel Samuel Lidén Borell
                Reporter:
                Hodell Anton Hodell
                Verified by:
                Jekaterina Bunina
              • Votes:
                0 Vote for this issue
                Watchers:
                3 Start watching this issue

                Dates

                • Created:
                  Updated:
                  Resolved:

                  Time Tracking

                  Estimated:
                  Original Estimate - Not Specified
                  Not Specified
                  Remaining:
                  Remaining Estimate - 0 minutes
                  0m
                  Logged:
                  Time Spent - 2 hours
                  2h