summaryrefslogtreecommitdiffstats
path: root/base/ca/shared
diff options
context:
space:
mode:
authorFraser Tweedale <ftweedal@redhat.com>2015-06-11 08:22:36 -0400
committerFraser Tweedale <ftweedal@redhat.com>2015-10-21 19:55:36 -0400
commit465fa069ba67d655be28e1a3b9417dff19148e9f (patch)
tree95b15933ed1bf5b37444afaf593adfcceb522a39 /base/ca/shared
parent562a49f08df2adb1a3f233a9b7490575182ece04 (diff)
downloadpki-465fa069ba67d655be28e1a3b9417dff19148e9f.tar.gz
pki-465fa069ba67d655be28e1a3b9417dff19148e9f.tar.xz
pki-465fa069ba67d655be28e1a3b9417dff19148e9f.zip
Store issuer DN in certificate records
Lightweight CAs mean that we may wish to filter certificates based on the issuer. Update X509CertImplMapper to store the issuer DN in each certificate record, using exiting schema. Also add indices for the 'issuerName' LDAP attribute.
Diffstat (limited to 'base/ca/shared')
-rw-r--r--base/ca/shared/conf/index.ldif9
-rw-r--r--base/ca/shared/conf/indextasks.ldif1
2 files changed, 10 insertions, 0 deletions
diff --git a/base/ca/shared/conf/index.ldif b/base/ca/shared/conf/index.ldif
index 11ebddfe3..90814b6a6 100644
--- a/base/ca/shared/conf/index.ldif
+++ b/base/ca/shared/conf/index.ldif
@@ -161,6 +161,15 @@ nsindexType: sub
nsSystemindex: false
cn: ownername
+dn: cn=issuername,cn=index,cn={database},cn=ldbm database, cn=plugins, cn=config
+objectClass: top
+objectClass: nsIndex
+nsindexType: eq
+nsindexType: pres
+nsindexType: sub
+nsSystemindex: false
+cn: issuername
+
dn: cn=subjectname,cn=index,cn={database},cn=ldbm database, cn=plugins, cn=config
objectClass: top
objectClass: nsIndex
diff --git a/base/ca/shared/conf/indextasks.ldif b/base/ca/shared/conf/indextasks.ldif
index 4db159ab0..8a32ac585 100644
--- a/base/ca/shared/conf/indextasks.ldif
+++ b/base/ca/shared/conf/indextasks.ldif
@@ -26,6 +26,7 @@ nsIndexAttribute: revokedOn:eq,pres
nsIndexAttribute: archivedBy:eq,pres
nsIndexAttribute: ownername:eq,pres,sub
nsIndexAttribute: subjectname:eq,pres,sub
+nsIndexAttribute: issuername:eq,pres,sub
nsIndexAttribute: requestsourceid:eq,pres,sub
nsIndexAttribute: revInfo:eq,pres,sub
nsIndexAttribute: extension:eq,pres,sub