[Pki-devel] [PATCH] 0037-2, 0053 ensure correct CRL contents for host CA

The attached patches fix https://fedorahosted.org/pki/ticket/1626. 0037-2: earlier patch to store issuer DN in certificate entries, updated to add indices for the 'issuerName' attribute. 0053: updates the filter used by CRLIP to find certs to include in CRL. Note the following limitations: 1. No database update in relation to issuerName attribute and indices. If people are otherwise satisfied with the patch, I will file a ticket for the database upgrade aspect. 2. There is no way to define CRLIP for a lightweight CA. There is a separate ticket for this: https://fedorahosted.org/pki/ticket/1626 (currently not a priority). Cheers, Fraser