stripe / smokescreen / 36411166221

63%

push

github

[RUN_NET_INFRA-4519] Enforce certificate-chain CRL validation and fail closed on invalid CRLs (#329)

- Check leaf and intermediate revocation across every verified chain, accepting the connection if any path is clean.
- Select CRLs using the verified parent certificate’s Subject Key Identifier.
- Fail startup when a configured CRL cannot be parsed, matched to a client CA, or signature-verified.

19 of 20 new or added lines in 1 file covered. (95.0%)

1662 of 2877 relevant lines covered (57.77%)

13.73 hits per line