daml/ledger/sandbox
Kamil Bożek ef6fdc2306
Certificate revocation checks using the OCSP [KVL-713] (#7965)
Adds TLS certificates revocation checking in the LedgerApiServer using the OCSP.

The feature is implemented by setting global JVM properties.
Integration tests for the new feature include spinning up a local OCSP responder using the openssl command.

CHANGELOG_BEGIN

- new CLI option --cert-revocation-checking for enabling the TLS certificate revocation checking in the LedgerApiServer
- documentation about the new feature

CHANGELOG_END
2020-11-25 14:28:32 +01:00
..
src Certificate revocation checks using the OCSP [KVL-713] (#7965) 2020-11-25 14:28:32 +01:00
BUILD.bazel Certificate revocation checks using the OCSP [KVL-713] (#7965) 2020-11-25 14:28:32 +01:00