[PATCH] 268 - fix serial number updates on clones
Author: Ade Lee <alee@redhat.com> Date: Wed Aug 12 00:57:46 2015 -0400 Separate range and cert status threads We currently disable the cert status maintenance thread on clone CAs because CRL processing should only be done on the master CA. Currently, the maintenance thread also performs other checks on serial number ranges and settings. By disabling the maintenance thread, we disable these checks too. To fix this, we have separated the serial number checks into a different maintenance thread, so that these tasks will occur even if the cert status thread is disabled. Bugzilla # 1251606
acked by endi - checked into master with small changes. Ade On Wed, 2015-08-12 at 01:14 -0400, Ade Lee wrote:
Author: Ade Lee <alee@redhat.com> Date: Wed Aug 12 00:57:46 2015 -0400
Separate range and cert status threads
We currently disable the cert status maintenance thread on clone CAs because CRL processing should only be done on the master CA. Currently, the maintenance thread also performs other checks on serial number ranges and settings. By disabling the maintenance thread, we disable these checks too.
To fix this, we have separated the serial number checks into a different maintenance thread, so that these tasks will occur even if the cert status thread is disabled.
Bugzilla # 1251606 _______________________________________________ Pki-devel mailing list Pki-devel@redhat.com https://www.redhat.com/mailman/listinfo/pki-devel
participants (1)
-
Ade Lee