Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Support for Certificate Revocation in jscep Library #305

Open
Arushi2002 opened this issue May 20, 2024 · 0 comments
Open

Support for Certificate Revocation in jscep Library #305

Arushi2002 opened this issue May 20, 2024 · 0 comments

Comments

@Arushi2002
Copy link

Currently, I have successfully written code in Android to enroll with a CA and obtain certificates using the jscep library. I did this by creating a jscep client, generating keypair, Self Signed Cert, Self Key, obtaining the challenge passcode by hitting the challenge URL, generating a CSR using the challenge passcode, and then obtaining the certificate using the client.enroll() method of the jscep library.
I am able to get certificates from EJBCA, NDES and Digicert SCEP servers.

However, SCEP/jscep does not support revocation. I know that we can obtain CRL using .client.getRevocationList(). I would like to understand how I can make a certificate revocation request or handle revocation from my device.

I would like the jscep library to include support for certificate revocation. This could be implemented by providing a method to generate a Certificate Revocation Request (CRR) that can be sent to the CA, similar to how the enrollment process works.

Any guidance or implementation of this feature would be greatly appreciated. Additionally, if there are any alternative APIs or methods to handle certificate revocation from an Android device, I would appreciate information on those as well.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

1 participant