summaryrefslogtreecommitdiffstats
diff options
context:
space:
mode:
authorEndi S. Dewata <edewata@redhat.com>2014-09-04 12:42:51 -0400
committerEndi S. Dewata <edewata@redhat.com>2014-09-04 12:44:44 -0400
commit8acd59fe3d32e249c5e37138ec1c360fd8ad1de2 (patch)
treeba47c77cc4a0aaecf54f197e8836f017a6b84aa7
parentabaa8473f51a5c436a2952920625b7447e226b29 (diff)
downloadpki-8acd59fe3d32e249c5e37138ec1c360fd8ad1de2.tar.gz
pki-8acd59fe3d32e249c5e37138ec1c360fd8ad1de2.tar.xz
pki-8acd59fe3d32e249c5e37138ec1c360fd8ad1de2.zip
Revert "Enabled certificate revocation checking by default."
This reverts commit 223d15539b7bcc0df025025036af2935726e52e3. The patch does not work for subsystems installed on separate instance since it will require additional OCSP setup.
-rw-r--r--base/kra/shared/conf/CS.cfg.in4
-rw-r--r--base/ocsp/shared/conf/CS.cfg.in4
-rw-r--r--base/tks/shared/conf/CS.cfg.in4
-rw-r--r--base/tps/shared/conf/CS.cfg.in4
4 files changed, 1 insertions, 15 deletions
diff --git a/base/kra/shared/conf/CS.cfg.in b/base/kra/shared/conf/CS.cfg.in
index 236b484bb..a3cf7918e 100644
--- a/base/kra/shared/conf/CS.cfg.in
+++ b/base/kra/shared/conf/CS.cfg.in
@@ -155,10 +155,8 @@ auths.instance.AgentCertAuth.agentGroup=Certificate Manager Agents
auths.instance.AgentCertAuth.pluginName=AgentCertAuth
auths.instance.TokenAuth.pluginName=TokenAuth
auths.revocationChecking.bufferSize=50
-auths.revocationChecking.enabled=true
+auths.revocationChecking.enabled=false
auths.revocationChecking.kra=kra
-auths.revocationChecking.unknownStateInterval=0
-auths.revocationChecking.validityInterval=120
authz._000=##
authz._001=## new authorizatioin
authz._002=##
diff --git a/base/ocsp/shared/conf/CS.cfg.in b/base/ocsp/shared/conf/CS.cfg.in
index 3603e4d21..9f92ebfe2 100644
--- a/base/ocsp/shared/conf/CS.cfg.in
+++ b/base/ocsp/shared/conf/CS.cfg.in
@@ -141,10 +141,6 @@ auths.instance.AgentCertAuth.agentGroup=Certificate Manager Agents
auths.instance.AgentCertAuth.pluginName=AgentCertAuth
auths.instance.TokenAuth.pluginName=TokenAuth
auths.revocationChecking.bufferSize=50
-auths.revocationChecking.enabled=true
-auths.revocationChecking.ocsp=ocsp
-auths.revocationChecking.unknownStateInterval=0
-auths.revocationChecking.validityInterval=120
authz._000=##
authz._001=## new authorizatioin
authz._002=##
diff --git a/base/tks/shared/conf/CS.cfg.in b/base/tks/shared/conf/CS.cfg.in
index 41937d140..bd2858d02 100644
--- a/base/tks/shared/conf/CS.cfg.in
+++ b/base/tks/shared/conf/CS.cfg.in
@@ -132,10 +132,6 @@ auths.instance.AgentCertAuth.agentGroup=Certificate Manager Agents
auths.instance.AgentCertAuth.pluginName=AgentCertAuth
auths.instance.TokenAuth.pluginName=TokenAuth
auths.revocationChecking.bufferSize=50
-auths.revocationChecking.enabled=true
-auths.revocationChecking.tks=tks
-auths.revocationChecking.unknownStateInterval=0
-auths.revocationChecking.validityInterval=120
authz._000=##
authz._001=## new authorizatioin
authz._002=##
diff --git a/base/tps/shared/conf/CS.cfg.in b/base/tps/shared/conf/CS.cfg.in
index 1647acc5d..e91b3451c 100644
--- a/base/tps/shared/conf/CS.cfg.in
+++ b/base/tps/shared/conf/CS.cfg.in
@@ -66,10 +66,6 @@ auths.instance.ldap1.ldap.ldapconn.version=3
auths.instance.ldap1.pluginName=UidPwdDirAuth
auths.instance.SSLclientCertAuth.pluginName=SSLclientCertAuth
auths.revocationChecking.bufferSize=50
-auths.revocationChecking.enabled=true
-auths.revocationChecking.tps=tps
-auths.revocationChecking.unknownStateInterval=0
-auths.revocationChecking.validityInterval=120
authType=pwd
authz._000=##
authz._001=## new authorizatioin