[Pki-devel] [PATCH] 66 Added cert revocation CLI.

[Andrew Wnuk]

On 06/07/2012 02:04 PM, Endi Sukma Dewata wrote:
> On 6/7/2012 11:38 AM, Andrew Wnuk wrote:
>> On 06/07/2012 07:28 AM, Endi Sukma Dewata wrote:
>>> The cert revocation CLI provides a tool to revoke and unrevoke
>>> certificates.
>>
>> "unrevoke" is really inappropriate term. It suggests that one could
>> unrevoke any revoked certificate where is fact one can only take off
>> hold certificates that are currently on hold.
>
> How about a "revoke" command for permanent revocation only, and 
> separate "on-hold" and "off-hold" commands for temporary revocation? 
> Any suggestions?
>
This is asymmetric case. "on-hold" is just one of many revocation 
reasons. Certificate can be taken off hold if it was revoked with 
"on-hold" reason. There are only two operations: certificate revocation 
and taking certificates off hold.

Andrew