cloudflare / cloudflare/cfssl

CRL Endpoint to return raw | binary | application/pkix-crl response

Open
#1,417 0 comments 0 reactions 0 assignees View on GitHub
Dominant language
Go
Stars
9.5k
Forks
1.2k
PR merge metrics
No merged PRs in 30d

Description

At this time, the CRL endpoint returns a JSON response as expected. It would be nice if it could also return raw response so that CFSSL can be used as a CRL Distribution Point in addition to being a OCSP responder.

A simple implementation would be adding a query parameter called "raw". When true the response header Content-Type is set to "application/pkix-crl" and browsers and other legacy applications can download a CRL file.

If a query parameter in the CRL Distribution Point URL is believed to cause issues, a separate endpoint can be developed that does not require query parameters.

Contributor guide

Open the contributing guide

Research direction

Start by locating the existing CRL endpoint and reviewing how it currently produces its JSON response. Done means supporting a raw response option, returning the CRL with Content-Type application/pkix-crl, while considering whether a separate endpoint is needed for distribution-point compatibility.

Written by the indexing model from the issue text.

Assessment

Tech stack
go
Domain
api, security
Issue type
Feature
Difficulty
3/5
Estimated time
1-2 days
Activity status
Stale
Clarity
Mostly clear
Newbie friendliness
45/100

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.