Add CRLs found inside Signature during PKIX verification.
Basics
Technical
Logistics
Basics
Technical
Logistics
Description
Current code does not process CRLs found inside a Signature's KeyInfo while verifying a signature with PKIX trust engine base class.
Not clear on what this use case would be, but it's clearly intended that CRLs can accompany a signature.
However, current code relies on Apache xmlsec to expose CRLs inside a signature while verifying, because the XML is wrapped by the xmlsec classes, not mine. Their API is limited to one CRL per X509Data, so without a change there, I can't support more than one at a time.
Current code does not process CRLs found inside a Signature's KeyInfo while verifying a signature with PKIX trust engine base class.
Not clear on what this use case would be, but it's clearly intended that CRLs can accompany a signature.
However, current code relies on Apache xmlsec to expose CRLs inside a signature while verifying, because the XML is wrapped by the xmlsec classes, not mine. Their API is limited to one CRL per X509Data, so without a change there, I can't support more than one at a time.