[Pki-devel] [PATCH] pki-cfu-0123-Ticket-1665-Cert-Revocation-Reasons-not-being-update.patch
Christina Fu
cfu at redhat.com
Wed May 25 21:57:42 UTC 2016
pushed to master
commit 03d578a6254620e4d4122b92b922f8711773ad40
thanks!
Christina
On 05/25/2016 10:34 AM, John Magne wrote:
> Looks good:
>
> Just a minor suggestion:
>
> The bookean to markAsRevoked, you might want to rename as
> "isAlreadyRevoked" to tell the reader more clearly what is going on.
> We know we want to revoke a cert, but this boolean covers the case when the
> cert to be revoked is already in the unique (on hold) status.
>
> ACK then if tested to work, especially that routine that calculates if a cert
> is currently on hold. If that has any issues, could be an issue.
>
>
>
>
> ----- Original Message -----
>> From: "Christina Fu" <cfu at redhat.com>
>> To: "pki-devel" <pki-devel at redhat.com>
>> Sent: Tuesday, May 24, 2016 6:18:25 PM
>> Subject: [Pki-devel] [PATCH] pki-cfu-0123-Ticket-1665-Cert-Revocation-Reasons-not-being-update.patch
>>
>> https://fedorahosted.org/pki/ticket/1665 Certificate Revocation Reasons
>> not being updated in some cases
>>
>> Ticket 1665 - Cert Revocation
>> Reasons not being updated when on-hold
>> This patch fixes the following areas:
>> * In the CA, when revokeCert is called, make it possible to move
>> from on_hold
>> to revoke.
>> * In the servlet that handles TPS revoke (DoRevokeTPS), make sure
>> it allows
>> the on_hold cert to be put in the bucket to be revoked.
>> * there are a few minor fixes such as typos and one have to do with the
>> populate method in SubjectDNInput.java needs better handling of
>> subject in
>> case it's null.
>> Note: This patch does not make attempt to allow agents to revoke
>> certs that
>> are on_hold from agent interface. The search filter needs to be
>> modified to
>> allow that.
>>
>> thanks,
>> Christina
>>
>> _______________________________________________
>> Pki-devel mailing list
>> Pki-devel at redhat.com
>> https://www.redhat.com/mailman/listinfo/pki-devel
More information about the Pki-devel
mailing list