[SERVER-45568] Expand OCSP+CRL features in test cert generator Created: 14/Jan/20  Updated: 29/Oct/23  Resolved: 21/Jan/20

Status: Closed
Project: Core Server
Component/s: Testing Infrastructure
Affects Version/s: None
Fix Version/s: 4.3.3

Type: Improvement Priority: Minor - P4
Reporter: Vincent Kam (Inactive) Assignee: Shreyas Kalyan
Resolution: Fixed Votes: 0
Labels: None
Remaining Estimate: Not Specified
Time Spent: Not Specified
Original Estimate: Not Specified

Issue Links:
Depends
is depended on by SERVER-45543 Create MustStaple Certificates for te... Closed
Backwards Compatibility: Fully Compatible
Sprint: Security 2019-01-27
Participants:

 Description   

The drivers team is using mkcert.py to generate certificates for testing OCSP, and we needed three additional features:

OCSP No Check
OCSP Must Staple
CRL Distribution Points

I'm creating a PR in case these extra features would be useful for the server team as well.

Also, a thanks to sgolemon for helping me get CRL Distribution Points working!



 Comments   
Comment by Githook User [ 18/Jan/20 ]

Author:

{'name': 'Shreyas Kalyan', 'email': 'shreyas.kalyan@mongodb.com', 'username': 'shreyaskal'}

Message: SERVER-45568 Expand OCSP+CRL features in test cert generator
Branch: master
https://github.com/mongodb/mongo/commit/8324ad592302e3448517bd8e46b3eded99c09937

Comment by Vincent Kam (Inactive) [ 14/Jan/20 ]

https://github.com/mongodb/mongo/pull/1345

Generated at Thu Feb 08 05:09:09 UTC 2024 using Jira 9.7.1#970001-sha1:2222b88b221c4928ef0de3161136cc90c8356a66.