the externalRegAddToToken profile was meant for adding certs/keys to the
token, so no deletion is supposed to happen, hence no revoke check
necessary. It does no harm to add that param though.
ACK.
Christina
On 07/28/2015 05:57 PM, John Magne wrote:
op.format.externalRegAddToToken.revokeCert parameter missing in TPS
CS.cfg.
It is true that his setting is not present.
The generic code that revokes certs for a format checks this value.
No harm in putting this value in the CS.cfg and setting it to false by
default for the externalRegAddToToken profile. No harm in giving the user
the way to use this feature , even if we decide it is not a good idea to revoke
certs associated with the external reg feature.
_______________________________________________
Pki-devel mailing list
Pki-devel(a)redhat.com
https://www.redhat.com/mailman/listinfo/pki-devel