On Tue, May 03, 2016 at 02:52:50PM -0500, Endi Sukma Dewata wrote: > On 5/2/2016 8:19 PM, Fraser Tweedale wrote: > >On Mon, May 02, 2016 at 09:30:11AM -0500, Endi Sukma Dewata wrote: > >>Some certificate profiles have been modified to remove the default > >>one minute validity delay, allowing the certificate issued with > >>those profiles to be used immediately. > >> > >>https://fedorahosted.org/pki/ticket/2304 > >> > >LGTM. Do we know what was the reason for the delay? > > > >Cheers, > >Fraser > > Thanks for looking. This is trivial enough so I pushed it to master. > > Apparently nobody knows the original reason for the delay. Regardless, if > anybody needs the delay the profile can still be customized as needed. > > Do you think it's necessary to apply the same changes the profiles stored in > LDAP? In that case we might need another ticket for the database upgrade. > I wouldn't worry about it for now. LDAPProfileSubsystem is only used by FreeIPA, which doesn't use those affected profiles.
Cheers, Fraser _______________________________________________ Pki-devel mailing list Pki-devel@redhat.com https://www.redhat.com/mailman/listinfo/pki-devel