Add revocation check to validateCertificatePath

1 files changed, 4 insertions, 0 deletions

diff --git a/packages/server/src/helpers/validateCertificatePath.ts b/packages/server/src/helpers/validateCertificatePath.ts
index 1dd8c04..1023ff7 100644
--- a/packages/server/src/helpers/validateCertificatePath.ts
+++ b/packages/server/src/helpers/validateCertificatePath.ts
@@ -34,6 +34,10 @@ export default async function validateCertificatePath(certificates: string[]): P
     const issuerCert = new X509();
     issuerCert.readCertPEM(issuerPem);
 
+    if (subjectCertRevoked) {
+      throw new Error(`Found revoked certificate in certificate path`);
+    }
+
     // Check that intermediate certificate is within its valid time window
     const notBefore = zulutodate(issuerCert.getNotBefore());
     const notAfter = zulutodate(issuerCert.getNotAfter());