Iteration 4 » Historie » Verze 7
Jan Pašek, 2021-04-08 07:16
| 1 | 1 | Jan Pašek | h1. Iteration 4 |
|---|---|---|---|
| 2 | 2 | Jan Pašek | |
| 3 | *Target:* CRL/OCSP, certificate detailed view |
||
| 4 | |||
| 5 | h2. Tasks |
||
| 6 | |||
| 7 | 5 | Jan Pašek | h3. Implement certificate revocation, add CRL distribution point and OCSP endpoint to certificate extensions |
| 8 | |||
| 9 | 6 | Jan Pašek | * One Rest API endpoint: POST /certificates/{id}/revoke body = { reason: "<reason for revocation>"} |
| 10 | with reason: [unspecified, keyCompromise, cACompromise, affiliationChanged, superseded, cessationOfOperation, certificateHold, removeFromCRL, privilegeWithdrawn, aACompromise]. |
||
| 11 | The reason will be optional and if not present, unspecified is used. |
||
| 12 | * Controller will call a method revoke_certificate(id) of CertificateService. |
||
| 13 | * Certificate service will call a CertificateRepository set_certificate_revoked(id, timestamp, reason) to set the certificate revoked. |
||
| 14 | * Database must be extended with the following data: revocation date (Unix timestamp, generated automatically by the CertificateService), bool flag if is revoked, the reason for revocation(may be implemented as a second table with revocation reason values). |
||
| 15 | * CertificateRepository shall expose the following method get_all_revoked_by(id) that returns all certificates that were issued by the given CA and are now revoked. |
||
| 16 | |||
| 17 | 5 | Jan Pašek | h3. Implement certificate deletion endpoint |
| 18 | |||
| 19 | h3. Implement endpoint for retrieving public/private key for each certificate |
||
| 20 | |||
| 21 | h3. Implement endpoint for retrieving all certificates issued by a given CA |
||
| 22 | 3 | Jan Pašek | |
| 23 | 1 | Jan Pašek | h3. Implement creation OpenSSL index file |
| 24 | 3 | Jan Pašek | |
| 25 | https://pki-tutorial.readthedocs.io/en/latest/cadb.html |
||
| 26 | |||
| 27 | 1 | Jan Pašek | h3. Implement CRL service and corresponding endpoint |
| 28 | 3 | Jan Pašek | |
| 29 | 1 | Jan Pašek | h3. Implement OCSP service and corresponding endpoint |
| 30 | 3 | Jan Pašek | |
| 31 | h3. Logging |
||
| 32 | |||
| 33 | h3. Application initialization and DI |
||
| 34 | |||
| 35 | h3. Database initialization |
||
| 36 | |||
| 37 | h3. Dependency injection |
||
| 38 | 4 | Jan Pašek | |
| 39 | h3. Certificate detailed view |