drGrove / drGrove/mtls-server

Add support for OCSP

Open
#16 0 comments 0 reactions 0 assignees View on GitHub
enhancement help wanted
Dominant language
Python
Stars
18
Forks
5
PR merge metrics
No merged PRs in 30d

Description

Currently we only support getting revoked status of certificates from CRL. This is slower and less ideal for distributed clusters of servers and is much less secure than OCSP. We should add an endpoint that follows the [OCSP spec](https://tools.ietf.org/html/rfc6960)

This should help with the implementation using [pyca/cryptogrphy](https://cryptography.io/en/latest/x509/ocsp/)

Contributor guide

No contributing guide indexed for this repository

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.