pomerium / pomerium / 5953762087

45%

push

github

authorize: check CRLs only for leaf certificates (#4480)

Set the Envoy option only_verify_leaf_cert_crl, to avoid a bug where
CRLs cannot be used in combination with an intermediate CA trust root.
Update the client certificate validation logic in the authorize service
to match this behavior.

16 of 16 new or added lines in 2 files covered. (100.0%)

14242 of 22243 relevant lines covered (64.03%)

118.86 hits per line