Correctly handle a cached CRL with no NextUpdate on Linux
authorKevin Jones <kevin@vcsjones.com>
Wed, 12 Aug 2020 22:33:24 +0000 (18:33 -0400)
committerGitHub <noreply@github.com>
Wed, 12 Aug 2020 22:33:24 +0000 (15:33 -0700)
commitf9dffea57540192174060bbeff0a9c499e1d71af
tree8a81f22de0d5d15813250d77cf51f14e5656da54
parent1972ba770c9691a51c6eb5f2e3fc88730f5e33e4
Correctly handle a cached CRL with no NextUpdate on Linux

Treat a CRL with no nextUpdate as cachable for 3 days, then we'll recheck it.

This only seems to (legitimately) happen when the associated CA is nearing end-of-validity.
Either macOS doesn't really support this, or it's just part of their general downplay of CRL, but the tests are disabled there.
src/libraries/Common/tests/System/Security/Cryptography/X509Certificates/CertificateAuthority.cs
src/libraries/System.Security.Cryptography.X509Certificates/src/Internal/Cryptography/Pal.Unix/CrlCache.cs
src/libraries/System.Security.Cryptography.X509Certificates/tests/RevocationTests/DynamicRevocationTests.cs