Certificate Revocation
ObjectiveObjective::
Ensure your system correctly performs the certificate validity check.
GuidelinesGuidelines: :
- The deployed system should be able to checks the certificate validity i.e. to check if the certificate is not revoked. Two protocols are used:
- CRL (Certificate Revocation List).
- Ensure that revoked certificates are rejected by the system, and log the event for auditing purposes.
The user should get a proper communication message in case a revoked certificate is used