[GODRIVER-2395] Never return errors when attempting to contact OCSP responders Created: 26/Apr/22  Updated: 28/Oct/23  Resolved: 02/May/22

Status: Closed
Project: Go Driver
Component/s: None
Affects Version/s: None
Fix Version/s: 1.9.1

Type: Bug Priority: Major - P3
Reporter: Matt Dale Assignee: Matt Dale
Resolution: Fixed Votes: 0
Labels: None
Remaining Estimate: Not Specified
Time Spent: Not Specified
Original Estimate: Not Specified

Issue Links:
Related

 Description   

Currently, the OCSP certificate verification code in the Go driver will return an error if the passed-in Context is cancelled or passes its deadline (see here). However, the OCSP spec describes that drivers should "soft fail" anytime the OCSP responders are unreachable for any reason. The current Go driver behavior violates that expectation by returning errors under specific circumstances.

Related to HELP-33323.

Definition of done:

  • The Go driver never returns an error when attempting to contact the OCSP responders for certificate status.
  • Write a test that asserts that the passed-in context is honored for timeout/cancellation but timeout/cancellation does not result in an error fetching certificate status.
  • Fix is back-ported to the cloud-1.7.1 release branch.


 Comments   
Comment by Githook User [ 02/May/22 ]

Author:

{'name': 'Matt Dale', 'email': '9760375+matthewdale@users.noreply.github.com', 'username': 'matthewdale'}

Message: GODRIVER-2395 Never return errors when attempting to contact OCSP responders. (#926)
Branch: release/1.9
https://github.com/mongodb/mongo-go-driver/commit/96e30dac09d17d4b354a3cbe6b24a732df19e442

Comment by Githook User [ 02/May/22 ]

Author:

{'name': 'Matt Dale', 'email': '9760375+matthewdale@users.noreply.github.com', 'username': 'matthewdale'}

Message: GODRIVER-2395 Never return errors when attempting to contact OCSP responders. (#926)
Branch: cloud-1.7.1
https://github.com/mongodb/mongo-go-driver/commit/b74c6cc301ca129d779e528672e1af94d54b537c

Comment by Githook User [ 02/May/22 ]

Author:

{'name': 'Matt Dale', 'email': '9760375+matthewdale@users.noreply.github.com', 'username': 'matthewdale'}

Message: GODRIVER-2395 Never return errors when attempting to contact OCSP responders. (#926)
Branch: master
https://github.com/mongodb/mongo-go-driver/commit/c27db32d0f0362b90fdfbe6bcc465dd0a39539ed

Generated at Thu Feb 08 08:38:29 UTC 2024 using Jira 9.7.1#970001-sha1:2222b88b221c4928ef0de3161136cc90c8356a66.