On Tue, May 03, 2016 at 02:52:50PM -0500, Endi Sukma Dewata wrote:
On 5/2/2016 8:19 PM, Fraser Tweedale wrote:
>On Mon, May 02, 2016 at 09:30:11AM -0500, Endi Sukma Dewata wrote:
>>Some certificate profiles have been modified to remove the default
>>one minute validity delay, allowing the certificate issued with
>>those profiles to be used immediately.
>>
>>https://fedorahosted.org/pki/ticket/2304
>>
>LGTM. Do we know what was the reason for the delay?
>
>Cheers,
>Fraser
Thanks for looking. This is trivial enough so I pushed it to master.
Apparently nobody knows the original reason for the delay. Regardless, if
anybody needs the delay the profile can still be customized as needed.
Do you think it's necessary to apply the same changes the profiles stored in
LDAP? In that case we might need another ticket for the database upgrade.
I wouldn't worry about it for now. LDAPProfileSubsystem is only
used by FreeIPA, which doesn't use those affected profiles.
Cheers,
Fraser