vault/sdk/helper/ocsp
Alexander Scheel 3adb416da1
Refactor OCSP client to support better retries (#19345)
Mirror NSS's GET-vs-POST selection criteria, wherein GET is preferred
over POST (as the former might be a response from a cached CDN entry,
whereas the latter might hit a live responder). However, only accept it
if it definitively says "Good" or "Revoked" -- trigger a POST request
when an unknown or failure status is seen.

Signed-off-by: Alexander Scheel <alex.scheel@hashicorp.com>
2023-02-24 13:18:37 -05:00
..
client.go Refactor OCSP client to support better retries (#19345) 2023-02-24 13:18:37 -05:00
ocsp_test.go Add cached OCSP client support to Cert Auth (#17093) 2022-11-21 10:39:24 -06:00