diff options
author | Fraser Tweedale <ftweedal@redhat.com> | 2015-10-09 02:54:18 -0400 |
---|---|---|
committer | Fraser Tweedale <ftweedal@redhat.com> | 2015-10-21 19:55:36 -0400 |
commit | bb3329f19180df9935c8571563eab2f47e31c522 (patch) | |
tree | fe29c86366be833238e9331a557560ba64a7307b /base/server/cms/src/com/netscape/cms/servlet/csadmin/ConfigurationUtils.java | |
parent | 465fa069ba67d655be28e1a3b9417dff19148e9f (diff) | |
download | pki-bb3329f19180df9935c8571563eab2f47e31c522.tar.gz pki-bb3329f19180df9935c8571563eab2f47e31c522.tar.xz pki-bb3329f19180df9935c8571563eab2f47e31c522.zip |
CRLIP: omit certs not issued by associated CA
Lightweight CAs mean that a single database can include certificates
from many issuers. Update CRLIssuingPoint to only include
certificates issued by its associated CA.
For backwards compatibility, if the associated CA is the host CA,
certificate records with missing 'issuerName' attribute are also
included.
Fixes: https://fedorahosted.org/pki/ticket/1626
Diffstat (limited to 'base/server/cms/src/com/netscape/cms/servlet/csadmin/ConfigurationUtils.java')
0 files changed, 0 insertions, 0 deletions