Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

CRL Endpoint to return raw | binary | application/pkix-crl response #1417

Open
hag0p opened this issue Mar 5, 2025 · 0 comments · May be fixed by #1418
Open

CRL Endpoint to return raw | binary | application/pkix-crl response #1417

hag0p opened this issue Mar 5, 2025 · 0 comments · May be fixed by #1418

Comments

@hag0p
Copy link

hag0p commented Mar 5, 2025

At this time, the CRL endpoint returns a JSON response as expected. It would be nice if it could also return raw response so that CFSSL can be used as a CRL Distribution Point in addition to being a OCSP responder.

A simple implementation would be adding a query parameter called "raw". When true the response header Content-Type is set to "application/pkix-crl" and browsers and other legacy applications can download a CRL file.

If a query parameter in the CRL Distribution Point URL is believed to cause issues, a separate endpoint can be developed that does not require query parameters.

@hag0p hag0p linked a pull request Mar 5, 2025 that will close this issue
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging a pull request may close this issue.

1 participant