amppackager icon indicating copy to clipboard operation
amppackager copied to clipboard

Published 20 hours ago • verified publisher icon ampproject

Validate OCSP ProducedAt

Open twifkak opened this issue 4 years ago • 1 comments
trafficstars

When receiving an OCSP response, AMP Packager should validate that its ProducedAt is within the NotBefore/NotAfter of the cert. I think the place to do that is here. (It looks like the ocsp.ParseResponseForCert function doesn't do this already.)

twifkak avatar Mar 25 '21 21:03 twifkak

Filed golang/go#45244 for the upstream ocsp lib, but we should fix on our end in the meantime.

twifkak avatar Mar 25 '21 22:03 twifkak