6f185488db
Squashed commit of the following: * feat: support binary and pem encoded crl files Signed-off-by: Florian Bauer <florian@fsrv.xyz> See merge request https://ref.ci/fsrvcorp/pki/ocspcrl/-/merge_requests/2
OCSPCRL
OCSPCRL is a minimal implementation of both a OCSP and CRL server in Golang. It provides the following http endpoints:
/ocsp- OCSP responder/crl- CRL responder
All what you need is to provide a CRL file, the root certificate and cert/key with extendedKeyUsage OCSPSigning to allow the OCSP server to sign the OCSP responses.
When using OCSP, the certificate is checked against the CRL for validity.
Synchronization of the CAs CRL is out of scope of this project. You can use any mechanism to update the CRL file. Just notify the ocspcrl server process via SIGHUP signal to reload the CRL file.