[Pki-devel] [PATCH] 706 Fixed missing trust flags in certificate backup.

Endi Sukma Dewata edewata at redhat.com
Fri Apr 1 00:39:02 UTC 2016


The ConfigurationUtils.backupKeys() has been modified to use
PKCS12Util to export the certificates and their trust flags into
a PKCS #12 file such that the file can be used for cloning.

The code to generate PFX object has been refactored from the
PKCS12Util.storeIntoFile() into a separate generatePFX() method.

The PKCS12Util.loadCertFromNSS() has been modified to provide
options to load a certificate from NSS database without the key
or the certificate chain. The CLIs have been modified to provide
the same options.

The PKCS12Util.getCertInfo() has modified to ignore missing
certificate attributes in the PKCS #12 file and generate a new
local ID.

https://fedorahosted.org/pki/ticket/2255

-- 
Endi S. Dewata
-------------- next part --------------
A non-text attachment was scrubbed...
Name: pki-edewata-0706-Fixed-missing-trust-flags-in-certificate-backup.patch
Type: text/x-patch
Size: 19210 bytes
Desc: not available
URL: <http://listman.redhat.com/archives/pki-devel/attachments/20160331/56ec6a81/attachment.bin>


More information about the Pki-devel mailing list