Uploaded image for project: 'Go Driver'
  1. Go Driver
  2. GODRIVER-2395

Never return errors when attempting to contact OCSP responders

XMLWordPrintableJSON

    • Type: Icon: Bug Bug
    • Resolution: Fixed
    • Priority: Icon: Major - P3 Major - P3
    • 1.9.1
    • Affects Version/s: None
    • Component/s: None
    • None
    • Not Needed
    • Hide

      1. What would you like to communicate to the user about this feature?
      2. Would you like the user to see examples of the syntax and/or executable code and its output?
      3. Which versions of the driver/connector does this apply to?

      Show
      1. What would you like to communicate to the user about this feature? 2. Would you like the user to see examples of the syntax and/or executable code and its output? 3. Which versions of the driver/connector does this apply to?

      Currently, the OCSP certificate verification code in the Go driver will return an error if the passed-in Context is cancelled or passes its deadline (see here). However, the OCSP spec describes that drivers should "soft fail" anytime the OCSP responders are unreachable for any reason. The current Go driver behavior violates that expectation by returning errors under specific circumstances.

      Related to HELP-33323.

      Definition of done:

      • The Go driver never returns an error when attempting to contact the OCSP responders for certificate status.
      • Write a test that asserts that the passed-in context is honored for timeout/cancellation but timeout/cancellation does not result in an error fetching certificate status.
      • Fix is back-ported to the cloud-1.7.1 release branch.

            Assignee:
            matt.dale@mongodb.com Matt Dale
            Reporter:
            matt.dale@mongodb.com Matt Dale
            Votes:
            0 Vote for this issue
            Watchers:
            0 Start watching this issue

              Created:
              Updated:
              Resolved: