[Freeipa-devel] Re: [BLOG/DESIGN] cert-request revocation changes

2018-05-14 Thread Simo Sorce via FreeIPA-devel
On Fri, 2018-05-11 at 13:52 -0400, Rob Crittenden wrote: > Simo Sorce wrote: > > On Fri, 2018-05-11 at 15:47 +1000, Fraser Tweedale via FreeIPA-devel > > wrote: > > > Hi all, > > > > > > Ticket https://pagure.io/freeipa/issue/7482 made me think about the > > > current revocation behaviour in `ipa

[Freeipa-devel] Re: [BLOG/DESIGN] cert-request revocation changes

2018-05-14 Thread Petr Vobornik via FreeIPA-devel
On Mon, May 14, 2018 at 4:47 AM, Fraser Tweedale wrote: > On Fri, May 11, 2018 at 01:52:57PM -0400, Rob Crittenden via FreeIPA-devel > wrote: >> Simo Sorce wrote: >> > On Fri, 2018-05-11 at 15:47 +1000, Fraser Tweedale via FreeIPA-devel >> > wrote: >> > > Hi all, >> > > >> >

[Freeipa-devel] Re: [BLOG/DESIGN] cert-request revocation changes

2018-05-13 Thread Fraser Tweedale via FreeIPA-devel
On Fri, May 11, 2018 at 01:52:57PM -0400, Rob Crittenden via FreeIPA-devel wrote: > Simo Sorce wrote: > > On Fri, 2018-05-11 at 15:47 +1000, Fraser Tweedale via FreeIPA-devel > > wrote: > > > Hi all, > > > > > > Ticket https://pagure.io/freeipa/issue/7482 made me think about the > > > current

[Freeipa-devel] Re: [BLOG/DESIGN] cert-request revocation changes

2018-05-11 Thread Rob Crittenden via FreeIPA-devel
Simo Sorce wrote: On Fri, 2018-05-11 at 15:47 +1000, Fraser Tweedale via FreeIPA-devel wrote: Hi all, Ticket https://pagure.io/freeipa/issue/7482 made me think about the current revocation behaviour in `ipa cert-request`. For hosts and services, all old certificates get revoked. I wrote a

[Freeipa-devel] Re: [BLOG/DESIGN] cert-request revocation changes

2018-05-11 Thread Simo Sorce via FreeIPA-devel
On Fri, 2018-05-11 at 15:47 +1000, Fraser Tweedale via FreeIPA-devel wrote: > Hi all, > > Ticket https://pagure.io/freeipa/issue/7482 made me think about the > current revocation behaviour in `ipa cert-request`. For hosts and > services, all old certificates get revoked. > > I wrote a blog