[Pki-devel] [PATCH] 706 Fixed missing trust flags in certificate backup.

Endi Sukma Dewata edewata at redhat.com
Mon Apr 4 17:49:03 UTC 2016


On 3/31/2016 7:39 PM, Endi Sukma Dewata wrote:
> The ConfigurationUtils.backupKeys() has been modified to use
> PKCS12Util to export the certificates and their trust flags into
> a PKCS #12 file such that the file can be used for cloning.
>
> The code to generate PFX object has been refactored from the
> PKCS12Util.storeIntoFile() into a separate generatePFX() method.
>
> The PKCS12Util.loadCertFromNSS() has been modified to provide
> options to load a certificate from NSS database without the key
> or the certificate chain. The CLIs have been modified to provide
> the same options.
>
> The PKCS12Util.getCertInfo() has modified to ignore missing
> certificate attributes in the PKCS #12 file and generate a new
> local ID.
>
> https://fedorahosted.org/pki/ticket/2255

ACKed by mharmsen (thanks!). Pushed to master.

-- 
Endi S. Dewata




More information about the Pki-devel mailing list