6:52 p.m.
The certificate REST service has been modified to validate
nonce when revoking a certificate.
Ticket #213
--
Endi S. Dewata
8:52 p.m.
On 1/10/2013 7:52 AM, Endi Sukma Dewata wrote:
The certificate REST service has been modified to validate
nonce when revoking a certificate.
Ticket #213
I retested the patch, it works as expected with nonces enabled & disabled.
In most cases you'll get a proper error message (e.g. You did not
provide a valid certificate) if you don't provide the required client
cert. The only thing is that if you do a cert-request-approve using
username & password you'll get an internal error, but this is an
existing problem and we don't support that scenario.
--
Endi S. Dewata
10:23 p.m.
On 1/15/2013 9:52 AM, Endi Sukma Dewata wrote:
On 1/10/2013 7:52 AM, Endi Sukma Dewata wrote:
> The certificate REST service has been modified to validate
> nonce when revoking a certificate.
>
> Ticket #213
I retested the patch, it works as expected with nonces enabled & disabled.
In most cases you'll get a proper error message (e.g. You did not
provide a valid certificate) if you don't provide the required client
cert. The only thing is that if you do a cert-request-approve using
username & password you'll get an internal error, but this is an
existing problem and we don't support that scenario.
New patch attached. It fixes the problem getting the cert anonymously.
--
Endi S. Dewata
9:38 a.m.
On 1/15/2013 11:23 AM, Endi Sukma Dewata wrote:
>> The certificate REST service has been modified to validate
>> nonce when revoking a certificate.
>>
>> Ticket #213
>
> I retested the patch, it works as expected with nonces enabled &
> disabled.
>
> In most cases you'll get a proper error message (e.g. You did not
> provide a valid certificate) if you don't provide the required client
> cert. The only thing is that if you do a cert-request-approve using
> username & password you'll get an internal error, but this is an
> existing problem and we don't support that scenario.
New patch attached. It fixes the problem getting the cert anonymously.
ACKed by Ade. Pushed to master.
--
Endi S. Dewata
4138
days inactive
4143
days old
3 comments
1 participants
participants (1)
-
Endi Sukma Dewata