diff options
author | Fraser Tweedale <ftweedal@redhat.com> | 2015-06-11 08:22:36 -0400 |
---|---|---|
committer | Fraser Tweedale <ftweedal@redhat.com> | 2015-10-21 19:55:36 -0400 |
commit | 465fa069ba67d655be28e1a3b9417dff19148e9f (patch) | |
tree | 95b15933ed1bf5b37444afaf593adfcceb522a39 /base/ca | |
parent | 562a49f08df2adb1a3f233a9b7490575182ece04 (diff) | |
download | pki-465fa069ba67d655be28e1a3b9417dff19148e9f.tar.gz pki-465fa069ba67d655be28e1a3b9417dff19148e9f.tar.xz pki-465fa069ba67d655be28e1a3b9417dff19148e9f.zip |
Store issuer DN in certificate records
Lightweight CAs mean that we may wish to filter certificates based
on the issuer. Update X509CertImplMapper to store the issuer DN in
each certificate record, using exiting schema.
Also add indices for the 'issuerName' LDAP attribute.
Diffstat (limited to 'base/ca')
-rw-r--r-- | base/ca/shared/conf/index.ldif | 9 | ||||
-rw-r--r-- | base/ca/shared/conf/indextasks.ldif | 1 |
2 files changed, 10 insertions, 0 deletions
diff --git a/base/ca/shared/conf/index.ldif b/base/ca/shared/conf/index.ldif index 11ebddfe3..90814b6a6 100644 --- a/base/ca/shared/conf/index.ldif +++ b/base/ca/shared/conf/index.ldif @@ -161,6 +161,15 @@ nsindexType: sub nsSystemindex: false cn: ownername +dn: cn=issuername,cn=index,cn={database},cn=ldbm database, cn=plugins, cn=config +objectClass: top +objectClass: nsIndex +nsindexType: eq +nsindexType: pres +nsindexType: sub +nsSystemindex: false +cn: issuername + dn: cn=subjectname,cn=index,cn={database},cn=ldbm database, cn=plugins, cn=config objectClass: top objectClass: nsIndex diff --git a/base/ca/shared/conf/indextasks.ldif b/base/ca/shared/conf/indextasks.ldif index 4db159ab0..8a32ac585 100644 --- a/base/ca/shared/conf/indextasks.ldif +++ b/base/ca/shared/conf/indextasks.ldif @@ -26,6 +26,7 @@ nsIndexAttribute: revokedOn:eq,pres nsIndexAttribute: archivedBy:eq,pres nsIndexAttribute: ownername:eq,pres,sub nsIndexAttribute: subjectname:eq,pres,sub +nsIndexAttribute: issuername:eq,pres,sub nsIndexAttribute: requestsourceid:eq,pres,sub nsIndexAttribute: revInfo:eq,pres,sub nsIndexAttribute: extension:eq,pres,sub |