revoke: certIsRevokedCRL does not verify CRL signature if AIA extension is not used
Open
- Dominant language
- Go
- Stars
- 9.5k
- Forks
- 1.2k
- PR merge metrics
- No merged PRs in 30d
Description
`certIsRevokedCRL` fetches issuer certificate from AIA extension defined URLs. If none are defined or fetching fails, CRL is used without signature checks even if HardFail is `true`.
Contributor guide
Assessment
This issue has not been assessed yet.