summaryrefslogtreecommitdiffstats
path: root/base/server
diff options
context:
space:
mode:
authorEndi S. Dewata <edewata@redhat.com>2017-06-03 03:52:09 +0200
committerEndi S. Dewata <edewata@redhat.com>2017-06-03 04:04:48 +0200
commit64b7b7abfed29b6a520be66414139364d713461e (patch)
treefddbb40328d3df21b0ff398cb54622c2e158a87c /base/server
parent3ef47867df74eb9dce408b88756ccce7d7438da5 (diff)
downloadpki-64b7b7abfed29b6a520be66414139364d713461e.tar.gz
pki-64b7b7abfed29b6a520be66414139364d713461e.tar.xz
pki-64b7b7abfed29b6a520be66414139364d713461e.zip
Fixed default CA cert trust flags in pki CLI.
The pki CLI has been modified to use CT,C,C as the default trust flags for CA certificate import operations. https://pagure.io/dogtagpki/issue/2726 Change-Id: I68c5a0303459319cc746a77703d0a420f4f68377
Diffstat (limited to 'base/server')
-rw-r--r--base/server/cms/src/com/netscape/cms/servlet/csadmin/ConfigurationUtils.java1
1 files changed, 1 insertions, 0 deletions
diff --git a/base/server/cms/src/com/netscape/cms/servlet/csadmin/ConfigurationUtils.java b/base/server/cms/src/com/netscape/cms/servlet/csadmin/ConfigurationUtils.java
index c9a375f24..ebade36bc 100644
--- a/base/server/cms/src/com/netscape/cms/servlet/csadmin/ConfigurationUtils.java
+++ b/base/server/cms/src/com/netscape/cms/servlet/csadmin/ConfigurationUtils.java
@@ -1113,6 +1113,7 @@ public class ConfigurationUtils {
| InternalCertificate.VALID_CA);
} else if (isAuditSigningCert(name)) {
+ // set trust flags to u,u,Pu
icert.setObjectSigningTrust(InternalCertificate.USER
| InternalCertificate.VALID_PEER
| InternalCertificate.TRUSTED_PEER);