PS: Revocation handler should not query BR
When the border router forks a revocation, the PS will
try to fetch the crypto from the border router that happily
drops these kinds of requests.
By setting nil, the certificate server is queried which makes sense in all cases.
@@ -68,8 +68,7 @@ func (h *revocHandler) Handle() *infra.HandlerResult {
logger = logger.New("revInfo", revInfo)
logger.Debug("[revocHandler] Received revocation")
- err = segverifier.VerifyRevInfo(subCtx, h.trustStore.NewVerifier(), h.request.Peer,
- revocation)
+ err = segverifier.VerifyRevInfo(subCtx, h.trustStore.NewVerifier(), nil, revocation)
if err != nil {
logger.Warn("Couldn't verify revocation", "err", err)
sendAck(proto.Ack_ErrCode_reject, messenger.AckRejectFailedToVerify)
