94425 - Implement an on-request OCSP check for the Cert Manager window

Status: RESOLVED WONTFIX

(Core Graveyard :: Security: UI, enhancement, P2)

Description

[Stephane Saux]

When OCSP check is enabled, interacting with the Cert Manager window was very
slow (see bug 87654). The reason is that for each cert, a new ocsp check needs
to happen. In fact if the ocsp responder is down, the cert manager would hang
for a long period. Therefore the fix to bug 87654 removed the OCSP check for the
purpose of (and only in this case) displaying information in the cert manager. 
For the next release the proper way would be to let the use check the OSCP
status of a cert on demand.
One possible implementation would let the user select the cert(s) to check and
clik on a "check OCSP" button to do the check.
Needs some UI mock ups and design.

Comment 1

[Stephane Saux]

P2
target->future

Comment 2

[Stephane Saux]

Note that bug 93703 may make this bug unnecessary.

Comment 3

[John G. Myers]

Mass reassign ssaux bugs to nobody

Comment 4

[Nelson Bolyard (seldom reads bugmail)]

Mass change "Future" target milestone to "--" on bugs that now are assigned to
nobody.  Those targets reflected the prioritization of past PSM management.
Many of these should be marked invalid or wontfix, I think.