On Mon, Dec 13, 2010 at 03:18:55PM -0500, Massimiliano Pala wrote:
> Hi all,
> 
> are you thinking about auto-revoking approved requests or just auto-revoking
> any type of requests ? The second type is too dangerous and will never be
> implemented - since the request has not been validated a malicious user can
> try to have someone else's cert revoked.
> 
> However, if approval from an RA (not the CA) is required to accomplish the
> process, I would say I am in favor of implementing the command. It should
> not be that hard having the auto* commands already in place.


Hi Max,

it would involve RA-approved revocation requests only, of course.  Just
like certificate requests.

It would help me a lot if you could implement it (we would have to grant
no one else access to the CA).

Thanks,

        Geert


-- 
Geert Hendrickx  -=-  g...@telenet.be  -=-  PGP: 0xC4BB9E9F
This e-mail was composed using 100% recycled spam messages!

------------------------------------------------------------------------------
Lotusphere 2011
Register now for Lotusphere 2011 and learn how
to connect the dots, take your collaborative environment
to the next level, and enter the era of Social Business.
http://p.sf.net/sfu/lotusphere-d2d
_______________________________________________
Openca-Users mailing list
Openca-Users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/openca-users

Reply via email to