-
Notifications
You must be signed in to change notification settings - Fork 879
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
Refactoring CmsValidator (internal CRL resolution) #2635
Refactoring CmsValidator (internal CRL resolution) #2635
Conversation
Signed-off-by: Lucas Saldanha <lucascrsaldanha@gmail.com>
fe0b2f2
to
33acdfd
Compare
@@ -178,4 +178,18 @@ private boolean isCertificateTrusted( | |||
throw new RuntimeException("Error validating certificate chain", e); | |||
} | |||
} | |||
|
|||
private Optional<CertStore> loadCRLs(final KeyStoreWrapper truststore) { |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
This isn't really loading CRL as such, maybe createCertStore?
@@ -178,4 +178,18 @@ private boolean isCertificateTrusted( | |||
throw new RuntimeException("Error validating certificate chain", e); | |||
} | |||
} | |||
|
|||
private Optional<CertStore> loadCRLs(final KeyStoreWrapper truststore) { |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Noticed there is CRLUtil that does something similar to this function, should that be used instead or this replaces that one?
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
CRLUtil is used when loading the CRL pem file. Not for the truststore. They are similar but not the same.
Signed-off-by: Lucas Saldanha <lucascrsaldanha@gmail.com>
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
LGTM
* Refactoring CmsValidator (internal CRL resolution) Signed-off-by: Lucas Saldanha <lucascrsaldanha@gmail.com>
PR description
Loading CRL list inside CmsValidator (instead of externally)
Changelog