Oliver Welter wrote:

Micha: Is there any approach in the new code already ?

Yes, the core knows two commands update_csr and check_csr. update_csr should always be used to store an updated request. This function always calls check_csr before it stores the request. So any new or additional policy checks must only be implemented once - in check_csr.

Special batch checks are still implemented twice but we can centralize them in OpenCA::Server::Batch. This is one of the advantages if you work only with modules. If all batch_cmd_* inherit from OpenCA::Server::Command and OpenCA::Server::Batch then the functions must only implemented once in OpenCA::Server::Batch.

BTW the batch stuff on HEAD does not work actually because it doesn't know the updated DBI module interface.

Michael
--
_______________________________________________________________

Michael Bell                    Humboldt-Universitaet zu Berlin

Tel.: +49 (0)30-2093 2482       ZE Computer- und Medienservice
Fax:  +49 (0)30-2093 2704       Unter den Linden 6
[EMAIL PROTECTED]   D-10099 Berlin
_______________________________________________________________

Attachment: smime.p7s
Description: S/MIME Cryptographic Signature

Reply via email to