Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

CA CRL/OCSP Support #1614

Closed
andrewpmartinez opened this issue Jun 15, 2021 · 3 comments
Closed

CA CRL/OCSP Support #1614

andrewpmartinez opened this issue Jun 15, 2021 · 3 comments
Assignees
@andrewpmartinez
Labels
controller Issue related to the controller enhancement New feature or request

Comments

@andrewpmartinez
Copy link
Member

Right now when a 3rd party CA is added to the Ziti Controller there is no way to stop any one certificate, that is correctly signed/dated/etc, that has been "revoked" (either actual revocation or should be blocked for some external reason.

Options for implementation:

  • Add an internally managed Ziti revocation list
    • Easy but if there is a managed CRL/OCSP it becomes redundant
  • Add CRL/OCSP lookups for enrollment, periodical checks for new revocations, and ability to force revocation checks
@andrewpmartinez andrewpmartinez added enhancement New feature or request controller Issue related to the controller labels Jun 15, 2021
@andrewpmartinez andrewpmartinez self-assigned this Jun 15, 2021
@plorenz plorenz transferred this issue from openziti/edge Dec 14, 2023
@nenkoru
Copy link

nenkoru commented Feb 29, 2024 •
edited
Loading

Any news on this feature?
@andrewpmartinez

@andrewpmartinez
Copy link
Member Author

This is now being tracked on the IDP/Security board here: https://github.com/orgs/openziti/projects/25 under this issue: #2092

It is slated for release this year (Oct/Nov).

@andrewpmartinez
Copy link
Member Author

Closing as duplicate of #2092

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Assignees

@andrewpmartinez andrewpmartinez

Labels
controller Issue related to the controller enhancement New feature or request
Projects
None yet
Milestone
No milestone
Development

No branches or pull requests
2 participants
@andrewpmartinez @nenkoru