If CRL download fails, fail revocation check
phax opened this issue · comments
Philip Helger commented
WARN [main] c.h.p.u.CertificateRevocationChecker Failed to find any CRL objects for revocation checking
WARN [main] c.h.p.u.CertificateRevocationChecker OCSP/CRL revocation check took 10206 milliseconds which is too long
INFO [main] c.d.p.a.c.ServletConfig Sucessfully checked that the provided Peppol AP certificate is valid.
Philip Helger commented
Changed the default to CRL only in 9.3.1