Epic: PoC LSPxNuts

[reinkrul]

• Test setup /w script

Branch: https://github.com/nuts-foundation/nuts-node/tree/lspxnuts

[reinkrul]

Question: how to validate custom credentials?

As the credentials are issued by the did:x509, they need custom validation. The question is how we'd implement that, since we don't want custom/use-case specific credentials in the Nuts node.

Note that the verifier (LSP) might not be running a Nuts node, so ideally it's something that they can use too (so no custom business rule engine in the Nuts node). So maybe something like Rego?

[reinkrul]

Bugs found in Nuts node:

• did:x509 resolver validates the certificate with expected "server usage", which is incorrect.
  • For now, we relaxed the validation.
• OS ca bundle in Nuts node Docker image doesn't contain the CAs of the AORTA-GtK issuer
  • For now, we added the CA certs to the Docker image using ca-certificates