nextcloud / nextcloud/server

Obtain CRL from download server

Open
#13,427 5 comments 1 reaction 0 assignees View on GitHub

Nobody has claimed this yet.

1. to develop enhancement security
Dominant language
PHP
Stars
36.9k
Forks
5.2k
Avg merge
2d 3h
Merged PRs (30d)
713

Description

It would make sense if the CRL was also publsihed on our download server. That way with a cron job we could fetch it daily. (proper etag etc). That way we do not have to wait for a new server release to get an updated CRL when a certificate had to be revoked.

Contributor guide

Open the contributing guide

First steps

  1. Read the whole issue, then the project's contributing guide.
  2. Comment on the issue to say you are picking it up — it saves two people doing the same work.
  3. Fork the repository and make your change on a branch.
  4. Open a pull request that references the issue number.

Research direction

No files or tests are named. Start by locating how the CRL is generated and how files are published on the download server, then determine the endpoint and caching behavior needed for daily retrieval with ETags. Done means an updated CRL is available independently of server releases and can be fetched conditionally.

Written by the indexing model from the issue text.

Assessment

Domain
backend, security
Issue type
Feature
Difficulty
4/5
Estimated time
3-5 days
Activity status
Stale
Clarity
Mostly clear
Newbie friendliness
35/100

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.