Skip to content

Adding CRL expiry checking into the CA health check.#972

Open
Stueypoo wants to merge 7569 commits into
Keyfactor:mainfrom
Stueypoo:HealthCheck_Improvements
Open

Adding CRL expiry checking into the CA health check.#972
Stueypoo wants to merge 7569 commits into
Keyfactor:mainfrom
Stueypoo:HealthCheck_Improvements

Conversation

@Stueypoo
Copy link
Copy Markdown
Contributor

@Stueypoo Stueypoo commented Oct 16, 2025

Describe your changes

The heath check for the CAs can be improved by checking the CRL for expiry, but also checking if the CRL should have been generated based upon the CA settings of 'CRL Issue Interval' or 'CRL Overlap Time'.

The CRL test is optional. Enable it via the health check URL with the parameter "checkCrl=true". For example:
https://<IP>/ejbca/publicweb/healthcheck/ejbcahealth?checkCrl=true

How has this been tested?

Tested manually.

Checklist before requesting a review

  • I have performed a self-review of my code
  • I have kept the patch limited to only change the parts related to the patch
  • This change requires a documentation update such as Including the 'checkCrl=true' parameter at Configure health Checks.

See also Contributing Guidelines.

Loading
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.