Certificate revocation checks?

[tony.t...@gmail.com]

I am fairly new to membrane and so far am impressed. I am looking to see if it can do revocation checks on SSL certificates -- so if certs are used for signatures and/or SSL transport, can membrane check for expiry, revocation, etc. On first glance I see no options.

[martin....@gmail.com]

Hey Tony,

yes you can. checkout :

<truststore checkRevocation="..." />

<trust checkRevocation="..." />

where "..." is a comma separated string of PKIXRevocationChecker.Option values.

( see https://docs.oracle.com/javase/8/docs/api/java/security/cert/PKIXRevocationChecker.Option.html )

I think just setting the attribute to the empty string activates revocation checking.

[tony.t...@gmail.com]

Awesome. I'll check that out -- thanks!