[OpenCA-Devel] Race Condition with Dataexchange

[Oliver Welter]

Hi Devs,

there was a serious question appearing on the users list...

What happens in this scenario, using networkbased dataexchange (scp):

CA Op 1 issues some certs and enrolls them
CA Op 2 issues some certs and enrolls them
RA Op now downloads the dataexchange files


What is if Op 1 issues a new CRL ? Will this get distributed ?

If I am right, we have a serious bug :(

Oliver

--
Diese Nachricht wurde digital unterschrieben
oliwel's public key: http://www.oliwel.de/oliwel.crt
Basiszertifikat: http://www.ldv.ei.tum.de/page72

I guess RA will receive the file from the second enrollment, will this one contain the certificates from BOTH CA Operators ? Or only the ones from the second one ?

smime.p7s
Description: S/MIME Cryptographic Signature