notation-go icon indicating copy to clipboard operation
notation-go copied to clipboard

Published 20 hours ago • verified publisher icon notaryproject

Perform X509 revocation check in signature verification

Open rgnote opened this issue 2 years ago • 1 comments

Signature verification needs to perform x509 revocation check (CRL/OCSP) and fail if a certificate in the chain is revoked.

See https://github.com/notaryproject/notaryproject/blob/main/trust-store-trust-policy-specification.md#certificate-revocation-evaluation

rgnote avatar Aug 11 '22 21:08 rgnote

Update the milestone to rc-3 based on the discussion.

yizha1 avatar Feb 22 '23 04:02 yizha1