Martin Bartosch wrote:

we just noticed that no "download" option is presented when displaying
a revoked certificate. Don't know if this is a bug, though.

The corresponding code (0.9.2 branch):

lib/cmds/viewCert, L205ff:

   ## download certs in different formats
    if ( $allow->{SENDCERT} and
         ($dataType =~ /(VALID|EXPIRED|SUSPENDED)/i)
       ) {
        my $select = "<select name=\"format_sendcert\">\n".
                        "<option value=\"pem\">PEM</option>\n".
                        "<option value=\"der\">CER</option>\n".


Question: - why is REVOKED not included in the condition (VALID|EXPIRED|SUSPENDED)? - why is there a condition testing the dataType in the first place?

The idea was that we observed that many users ignore the certificate state and CRLs. So we want to avoid that they use revoked certificates. Therefore I implemented a filter to avoid downloads of revoked certificates. If you think that it was not such a good idea then simply remove the check. It was/is only a fast solution/fix for a "bug" in our users ;-D


Michael
--
_______________________________________________________________

Michael Bell                    Humboldt-Universitaet zu Berlin

Tel.: +49 (0)30-2093 2482       ZE Computer- und Medienservice
Fax:  +49 (0)30-2093 2704       Unter den Linden 6
[EMAIL PROTECTED]   D-10099 Berlin
_______________________________________________________________


------------------------------------------------------- The SF.Net email is sponsored by: Beat the post-holiday blues Get a FREE limited edition SourceForge.net t-shirt from ThinkGeek. It's fun and FREE -- well, almost....http://www.thinkgeek.com/sfshirt _______________________________________________ OpenCA-Devel mailing list OpenCA-Devel@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/openca-devel

Reply via email to