View Issue Details

Jump to NotesJump to History
IDProjectCategoryView StatusDate SubmittedLast Update
0010452Compliance Test Tool (CTT) Unified Architecture1 - Script Issuepublic2025-07-31 17:522025-08-01 05:31
ReporterMaximilian Assigned To 
PriorityhighSeverityminorReproducibilityalways
Status newResolutionopen 
Summary0010452: Security Certificate Validation 002 - Test inconclusive due to trusted issuer (1.04.510)
Description

The client certificate used in this thest has two issuers. The first (ctt_ca1TC_ca2I) in the chain is in the issuer store with a revocation list. The second (ctt_ca1TC) and last in the chain is trusted by the server and has no CRL.
The test requires that the status code BadSecurityChecksFailed be returned for a known but untrusted CA without a revocation list. However, this point cannot be reached because the CA, although it does not have a CRL, is trusted by the server.

Steps To Reproduce

Client certificate: ctt_ca1TC_ca2I_appT (issuer:ctt_ca1TC_ca2I)
Issuer1: ctt_ca1TC_ca2I (in issuer store, with crl, issuer:ctt_ca1TC)
Issuer2: ctt_ca1TC (in trusted store, no crl, issuer:ctt_ca1TC)

TagsNo tags attached.
Files Affected

Activities

There are no notes attached to this issue.

Issue History

Date Modified Username Field Change
2025-07-31 17:52 Maximilian New Issue