JWK-Validator: OCSP-Reponse ohne `id-pkix-ocsp-nocheck`-Erweiterung (!22) · Merge requests · FIT-Connect / JWK-Validator · GitLab

GitLab now enforces expiry dates on tokens that originally had no set expiration date. Those tokens were given an expiration date of one year later. Please review your personal access tokens, project access tokens, and group access tokens to ensure you are aware of upcoming expirations. Administrators of GitLab can find more information on how to identify and mitigate interruption in our documentation.

Michael Miera requested to merge 790-ocsp-response-without-nocheck into epic/jwk-validator-improvements Feb 23, 2023

Related to planning#790 (closed)

If the id-pkix-ocsp-nocheck extension is not set, the delegation certificate needs to be checked in accordance with chapter 8.5.5, §3 of https://www.bsi.bund.de/SharedDocs/Downloads/DE/BSI/Publikationen/TechnischeRichtlinien/TR02103/BSI-TR-02103.pdf?__blob=publicationFile&v=2