From cd09be38a18f5ab0491ce708d135bd963aad3bb9 Mon Sep 17 00:00:00 2001 From: Matthew Miller Date: Tue, 7 Jul 2020 16:16:23 -0700 Subject: Add revocation check to validateCertificatePath --- packages/server/src/helpers/validateCertificatePath.ts | 4 ++++ 1 file changed, 4 insertions(+) (limited to 'packages/server/src') diff --git a/packages/server/src/helpers/validateCertificatePath.ts b/packages/server/src/helpers/validateCertificatePath.ts index 1dd8c04..1023ff7 100644 --- a/packages/server/src/helpers/validateCertificatePath.ts +++ b/packages/server/src/helpers/validateCertificatePath.ts @@ -34,6 +34,10 @@ export default async function validateCertificatePath(certificates: string[]): P const issuerCert = new X509(); issuerCert.readCertPEM(issuerPem); + if (subjectCertRevoked) { + throw new Error(`Found revoked certificate in certificate path`); + } + // Check that intermediate certificate is within its valid time window const notBefore = zulutodate(issuerCert.getNotBefore()); const notAfter = zulutodate(issuerCert.getNotAfter()); -- cgit v1.2.3