Re: [Pki-devel] [PATCH] 735 Removed default certificate validity delay.
On Tue, May 03, 2016 at 02:52:50PM -0500, Endi Sukma Dewata wrote: > On 5/2/2016 8:19 PM, Fraser Tweedale wrote: > >On Mon, May 02, 2016 at 09:30:11AM -0500, Endi Sukma Dewata wrote: > >>Some certificate profiles have been modified to remove the default > >>one minute validity delay, allowing the certificate issued with > >>those profiles to be used immediately. > >> > >>https://fedorahosted.org/pki/ticket/2304 > >> > >LGTM. Do we know what was the reason for the delay? > > > >Cheers, > >Fraser > > Thanks for looking. This is trivial enough so I pushed it to master. > > Apparently nobody knows the original reason for the delay. Regardless, if > anybody needs the delay the profile can still be customized as needed. > > Do you think it's necessary to apply the same changes the profiles stored in > LDAP? In that case we might need another ticket for the database upgrade. > I wouldn't worry about it for now. LDAPProfileSubsystem is only used by FreeIPA, which doesn't use those affected profiles. Cheers, Fraser ___ Pki-devel mailing list Pki-devel@redhat.com https://www.redhat.com/mailman/listinfo/pki-devel
Re: [Pki-devel] [PATCH] 735 Removed default certificate validity delay.
On 5/2/2016 8:19 PM, Fraser Tweedale wrote: On Mon, May 02, 2016 at 09:30:11AM -0500, Endi Sukma Dewata wrote: Some certificate profiles have been modified to remove the default one minute validity delay, allowing the certificate issued with those profiles to be used immediately. https://fedorahosted.org/pki/ticket/2304 LGTM. Do we know what was the reason for the delay? Cheers, Fraser Thanks for looking. This is trivial enough so I pushed it to master. Apparently nobody knows the original reason for the delay. Regardless, if anybody needs the delay the profile can still be customized as needed. Do you think it's necessary to apply the same changes the profiles stored in LDAP? In that case we might need another ticket for the database upgrade. -- Endi S. Dewata ___ Pki-devel mailing list Pki-devel@redhat.com https://www.redhat.com/mailman/listinfo/pki-devel
Re: [Pki-devel] [PATCH] 735 Removed default certificate validity delay.
On Mon, May 02, 2016 at 09:30:11AM -0500, Endi Sukma Dewata wrote: > Some certificate profiles have been modified to remove the default > one minute validity delay, allowing the certificate issued with > those profiles to be used immediately. > > https://fedorahosted.org/pki/ticket/2304 > LGTM. Do we know what was the reason for the delay? Cheers, Fraser ___ Pki-devel mailing list Pki-devel@redhat.com https://www.redhat.com/mailman/listinfo/pki-devel
