diff options
| author | Ade Lee <alee@redhat.com> | 2015-08-12 00:57:46 -0400 |
|---|---|---|
| committer | Ade Lee <alee@redhat.com> | 2015-08-12 12:29:16 -0400 |
| commit | d3d80046fd6985b809900005a685695d3181d9d3 (patch) | |
| tree | b3967f70c0cbe616ba7c5823ac1776bc4285f14f /base/ca | |
| parent | 1738f27d3683d58b3ab023724eb8d0133c428eef (diff) | |
| download | pki-d3d80046fd6985b809900005a685695d3181d9d3.tar.gz pki-d3d80046fd6985b809900005a685695d3181d9d3.tar.xz pki-d3d80046fd6985b809900005a685695d3181d9d3.zip | |
Separate range and cert status threads
We currently disable the cert status maintenance thread on
clone CAs because CRL processing should only be done on the
master CA. Currently, the maintenance thread also performs
other checks on serial number ranges and settings. By disabling
the maintenance thread, we disable these checks too.
To fix this, we have separated the serial number checks into a
different maintenance thread, so that these tasks will occur
even if the cert status thread is disabled.
Bugzilla # 1251606
Diffstat (limited to 'base/ca')
| -rw-r--r-- | base/ca/src/com/netscape/ca/CertificateAuthority.java | 5 |
1 files changed, 5 insertions, 0 deletions
diff --git a/base/ca/src/com/netscape/ca/CertificateAuthority.java b/base/ca/src/com/netscape/ca/CertificateAuthority.java index 65296113e..158ecff1f 100644 --- a/base/ca/src/com/netscape/ca/CertificateAuthority.java +++ b/base/ca/src/com/netscape/ca/CertificateAuthority.java @@ -371,6 +371,11 @@ public class CertificateAuthority implements ICertificateAuthority, ICertAuthori mCertRepot.setSkipIfInConsistent( mConfig.getBoolean("SkipIfInConsistent", false)); + // set serial number update task to run every 10 minutes + mCertRepot.setSerialNumberUpdateInterval( + mRequestQueue.getRequestRepository(), + mConfig.getInteger("serialNumberUpdateInterval", 10 * 60)); + mService.init(config.getSubStore("connector")); initMiscellaneousListeners(); |