indutny / indutny/ocsp

[Question] Set response property 'revoked' = true instead of throwing error?

Open
#29 0 comments 0 reactions 0 assignees View on GitHub
Dominant language
JavaScript
Stars
86
Forks
46
PR merge metrics
No merged PRs in 30d

Description

I'm using Agent to check whether the target server's certificate has been revoked. If it has been revoked then an error is thrown. Is it possible change this behavior so that it avoids throwing an error and instead sets response.revoked = true?

I need this because even if the certificate has been revoked then I still need the other data from the response.

Also, how can I see whether server is using OCSP stapling or not?

Contributor guide

No contributing guide indexed for this repository

Research direction

Start by tracing the Agent certificate-revocation handling and how the response object is assembled. Determine whether revoked certificates can be represented with response.revoked while retaining other response data, and identify how OCSP stapling usage is exposed; done means both behaviors are clearly supported or documented.

Written by the indexing model from the issue text.

Assessment

Tech stack
javascript
Domain
security
Issue type
Feature
Difficulty
4/5
Estimated time
3-5 days
Activity status
Stale
Clarity
Needs clarification
Newbie friendliness
30/100

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.