diff options
| -rw-r--r-- | pki/base/ca/src/com/netscape/ca/CertificateAuthority.java | 14 |
1 files changed, 7 insertions, 7 deletions
diff --git a/pki/base/ca/src/com/netscape/ca/CertificateAuthority.java b/pki/base/ca/src/com/netscape/ca/CertificateAuthority.java index 2a9445452..601e7ce99 100644 --- a/pki/base/ca/src/com/netscape/ca/CertificateAuthority.java +++ b/pki/base/ca/src/com/netscape/ca/CertificateAuthority.java @@ -706,13 +706,13 @@ public class CertificateAuthority implements ICertificateAuthority, ICertAuthori c.putString("extension.CRLReason.type", "CRLEntryExtension"); c.putString("extension.CRLReason.class", "com.netscape.cms.crl.CMSCRLReasonExtension"); - // HoldInstruction - c.putString("extension.HoldInstruction.enable", "false"); - c.putString("extension.HoldInstruction.critical", "false"); - c.putString("extension.HoldInstruction.type", "CRLEntryExtension"); - c.putString("extension.HoldInstruction.class", - "com.netscape.cms.crl.CMSHoldInstructionExtension"); - c.putString("extension.HoldInstruction.instruction", "none"); + // HoldInstruction - removed by RFC 5280 + // c.putString("extension.HoldInstruction.enable", "false"); + // c.putString("extension.HoldInstruction.critical", "false"); + // c.putString("extension.HoldInstruction.type", "CRLEntryExtension"); + // c.putString("extension.HoldInstruction.class", + // "com.netscape.cms.crl.CMSHoldInstructionExtension"); + // c.putString("extension.HoldInstruction.instruction", "none"); // InvalidityDate c.putString("extension.InvalidityDate.enable", "true"); c.putString("extension.InvalidityDate.critical", "false"); |