[Freeipa-devel] [PATCH] 271 handle certificate decode errors in service

Pavel Zuna pzuna at redhat.com
Tue Sep 15 11:37:29 UTC 2009


Rob Crittenden wrote:
> In the service plugin we will attempt to revoke a server cert when a 
> service is deleted. Add some error handling around that effort.
> 
> This fixes the self-tests.
> 
> rob
nack.

Your "269 external CA signing, abstract RA" already handles them inside 
get_serial(). However, there is a difference. This patch allows the entry to be 
deleted even if the it fails to revoke the certificate. If that is the main 
purpose, we still need to rewrite it to apply against your 269 patch (in which 
case I will probably have to do some small fixes to my service patch, but don't 
worry about that).

Pavel




More information about the Freeipa-devel mailing list