[CDRIVER-3745] Support tlsDisableCertificateRevocationCheck on Windows Created: 13/Jul/20  Updated: 28/Oct/23  Resolved: 13/Jul/20

Status: Closed
Project: C Driver
Component/s: None
Affects Version/s: None
Fix Version/s: 1.17.0-rc0, 1.17.0

Type: Task Priority: Major - P3
Reporter: Kevin Albertson Assignee: Kevin Albertson
Resolution: Fixed Votes: 0
Labels: None
Remaining Estimate: Not Specified
Time Spent: Not Specified
Original Estimate: Not Specified

Epic Link: C 4.4 Support

 Description   

The OCSP spec does not require this, since SChannel will soft-fail per CDRIVER-3580.

But, it is simple to disable revocation checking with SChannel by omitting the SCH_CRED_REVOCATION_CHECK_CHAIN, and this could help identify issues with OCSP checks.



 Comments   
Comment by Githook User [ 14/Jul/20 ]

Author:

{'name': 'Kevin Albertson', 'email': 'kevin.albertson@10gen.com', 'username': 'kevinAlbs'}

Message: CDRIVER-3745 add flag to disable rev check on Win

Add support for tlsDisableCertificateRevocationCheck with schannel.
Branch: r1.17
https://github.com/mongodb/mongo-c-driver/commit/8c5ae021ab58301c750be527d92fa5533da774bf

Comment by Githook User [ 13/Jul/20 ]

Author:

{'name': 'Kevin Albertson', 'email': 'kevin.albertson@10gen.com', 'username': 'kevinAlbs'}

Message: CDRIVER-3745 add flag to disable rev check on Win

Add support for tlsDisableCertificateRevocationCheck with schannel.
Branch: master
https://github.com/mongodb/mongo-c-driver/commit/a953c18395be98f7b70acb56bc8158b00c2d5ef5

Comment by Kevin Albertson [ 13/Jul/20 ]

PR: https://github.com/mongodb/mongo-c-driver/pull/659

Generated at Wed Feb 07 21:18:54 UTC 2024 using Jira 9.7.1#970001-sha1:2222b88b221c4928ef0de3161136cc90c8356a66.