REF-31: Verify revocation data before trusting it - #98

Merged

thomasnymand merged 7 commits into

feature/REF-31-revocation-hardening

Sep 2, 2026

Commits on Aug 13, 2026

REF-31: Verify revocation data before trusting it
thomasnymand
committed
8fbcd88

Commits on Sep 1, 2026

Improved certificate validation, only fallback to CRL if OCSP validation is inconclusive (e.g. OCSP responder not available), additional tests for KeyUsage and BasicConstraints.
thomasnymand
committed
7d84fa2
Merge branch 'master' into feature/REF-31-revocation-hardening
thomasnymand
committed
de845a4
Bump lombok in idp demo.
thomasnymand
committed
b0cf392
Use ConcurrentHashMap for issuing CA certificates.
thomasnymand
committed
41c464f
Removed unused parameter in checkCertificates()
thomasnymand
committed
1c0c4b1
Fixed indention in pom-files.
thomasnymand
committed
3065575