The certificate REST service has been modified to validate nonce when revoking a certificate. Ticket #213

>> The certificate REST service has been modified to validate >> nonce when revoking a certificate. >> >> Ticket #213 > > I retested the patch, it works as expected with nonces enabled & > disabled. > > In most cases you'll get a proper error message (e.g. You did not > provide a valid certificate) if you don't provide the required client > cert. The only thing is that if you do a cert-request-approve using > username & password you'll get an internal error, but this is an > existing problem and we don't support that scenario. New patch attached. It fixes the problem getting the cert anonymously.