io.helidon.common.tls.RevocationConfig

Description

Certificate revocation configuration

Configuration options

KeyTypeDefaultDescription
soft-fail-enabledBooleanfalseAllows a revocation check to succeed when a CRL or OCSP response cannot be obtained due to a network failure, or the OCSP responder returns internalError or tryLater
ocsp-responder-uriURIThe URI that identifies the location of the OCSP responder
check-only-end-entityBooleanfalseOnly check the revocation status of end-entity certificates
prefer-crl-over-ocspBooleanfalsePrefer CRL over OCSP
enabledBooleanfalseFlag indicating whether this revocation config is enabled
fallback-enabledBooleantrueEnable fallback to the less preferred checking option

Usages


See the manifest for all available types.

Copyright © 2018, 2026 Oracle and/or its affiliates.