We're updating the issue view to help you get more done. 

Make better use of PKIXRevocationChecker

Description

For OCSP checking Spark use a PKIXRevocationChecker. This checker should be also used for checking CRL instead of custom code (if it is possible, for self signed certificates it still seems custom checking have to be done). Also option soft fail could be used with only CRL and some redundancy of code can be eliminated.

Environment

None

Acceptance Test - Entry

None

Assignee

Paweł Ścibiorski

Reporter

Paweł Ścibiorski

Expected Effort

None

Ignite Forum URL

None

Affects versions

Priority

Minor
Configure