[Pki-devel] [PATCH] 735 Removed default certificate validity delay.

[Fraser Tweedale]

On Tue, May 03, 2016 at 02:52:50PM -0500, Endi Sukma Dewata wrote:
> On 5/2/2016 8:19 PM, Fraser Tweedale wrote:
> >On Mon, May 02, 2016 at 09:30:11AM -0500, Endi Sukma Dewata wrote:
> >>Some certificate profiles have been modified to remove the default
> >>one minute validity delay, allowing the certificate issued with
> >>those profiles to be used immediately.
> >>
> >>https://fedorahosted.org/pki/ticket/2304
> >>
> >LGTM.  Do we know what was the reason for the delay?
> >
> >Cheers,
> >Fraser
> 
> Thanks for looking. This is trivial enough so I pushed it to master.
> 
> Apparently nobody knows the original reason for the delay. Regardless, if
> anybody needs the delay the profile can still be customized as needed.
> 
> Do you think it's necessary to apply the same changes the profiles stored in
> LDAP? In that case we might need another ticket for the database upgrade.
> 
I wouldn't worry about it for now.  LDAPProfileSubsystem is only
used by FreeIPA, which doesn't use those affected profiles.

Cheers,
Fraser