Back to bug 1325071

Who When What Removed Added
Thorsten Scherf 2016-04-08 07:15:48 UTC Priority unspecified medium
Hardware Unspecified All
Version 7.3 7.2
OS Unspecified Linux
Severity unspecified medium
Nathan Kinder 2016-12-01 18:31:57 UTC CC nkinder
Matthew Harmsen 2017-01-07 00:51:21 UTC Priority medium high
Status NEW POST
Matthew Harmsen 2017-01-07 00:57:10 UTC Priority high medium
Matthew Harmsen 2017-03-15 07:28:56 UTC Status POST MODIFIED
Fixed In Version pki-core-10.4.0-1.el7
errata-xmlrpc 2017-03-15 07:40:59 UTC Status MODIFIED ON_QA
Sumedh Sidhaye 2017-05-05 11:26:59 UTC Status ON_QA VERIFIED
CC ssidhaye
Matthew Harmsen 2017-07-13 00:10:21 UTC Assignee mharmsen alee
Ade Lee 2017-07-19 19:45:11 UTC Doc Text Feature:

Parameters have been added to disable certificate
and CRL publishing separately.

Reason:

Prior to this fix, if publishing was enabled, both CRLs and Cert publishing is enabled. This resulted in a bunch of spurious error messages on servers where certificate publishing was not configured.

Result:

Options to explicitly disable either certificate or CRL
publishing.

Specifically:

- to enable/disable both cert and crl publishing, set
the following in CS.cfg

ca.publish.enable = True/False

- to enable CRL publishing only, set:

ca.publish.enable = True
ca.publish.cert.enable = False

- to enable cert publishing only, set:

ca.publish.enable = True
ca.publish.crl.enable = False
Doc Type Bug Fix Enhancement
Marc Muehlfeld 2017-07-24 13:00:09 UTC CC alee
Doc Text Feature:

Parameters have been added to disable certificate
and CRL publishing separately.

Reason:

Prior to this fix, if publishing was enabled, both CRLs and Cert publishing is enabled. This resulted in a bunch of spurious error messages on servers where certificate publishing was not configured.

Result:

Options to explicitly disable either certificate or CRL
publishing.

Specifically:

- to enable/disable both cert and crl publishing, set
the following in CS.cfg

ca.publish.enable = True/False

- to enable CRL publishing only, set:

ca.publish.enable = True
ca.publish.cert.enable = False

- to enable cert publishing only, set:

ca.publish.enable = True
ca.publish.crl.enable = False
Certificate System now supports enabling and disabling certificate and CRL publishing

Prior to this update, if publishing was enabled in a certificate authority (CA), Certificate System automatically enabled both certificate revocation list (CRL) and certificate publishing. Consequently, on servers that did not have certificate publishing enabled, error messages were logged. Certificate System has been enhanced, and now supports enabling and disabling certificate and CRL publishing independently in the `/var/lib/pki/<instance>/ca/conf/CS.cfg`.

To enable or disable both certificate and CRL publishing:

ca.publish.enable = True|False

To enable only CRL publishing:

ca.publish.enable = True
ca.publish.cert.enable = False

To enable only certificate publishing:

ca.publish.enable = True
ca.publish.crl.enable = False
Flags needinfo?(alee)
Marc Muehlfeld 2017-07-24 13:00:37 UTC Docs Contact mmuehlfe
Marc Muehlfeld 2017-07-24 14:37:54 UTC Doc Text Certificate System now supports enabling and disabling certificate and CRL publishing

Prior to this update, if publishing was enabled in a certificate authority (CA), Certificate System automatically enabled both certificate revocation list (CRL) and certificate publishing. Consequently, on servers that did not have certificate publishing enabled, error messages were logged. Certificate System has been enhanced, and now supports enabling and disabling certificate and CRL publishing independently in the `/var/lib/pki/<instance>/ca/conf/CS.cfg`.

To enable or disable both certificate and CRL publishing:

ca.publish.enable = True|False

To enable only CRL publishing:

ca.publish.enable = True
ca.publish.cert.enable = False

To enable only certificate publishing:

ca.publish.enable = True
ca.publish.crl.enable = False
Certificate System now supports enabling and disabling certificate and CRL publishing

Prior to this update, if publishing was enabled in a certificate authority (CA), Certificate System automatically enabled both certificate revocation list (CRL) and certificate publishing. Consequently, on servers that did not have certificate publishing enabled, error messages were logged. Certificate System has been enhanced, and now supports enabling and disabling certificate and CRL publishing independently in the `/var/lib/pki/<instance>/ca/conf/CS.cfg` file:

To enable or disable both certificate and CRL publishing:

ca.publish.enable = True|False

To enable only CRL publishing:

ca.publish.enable = True
ca.publish.cert.enable = False

To enable only certificate publishing:

ca.publish.enable = True
ca.publish.crl.enable = False
Ade Lee 2017-07-26 16:07:29 UTC Flags needinfo?(alee)
Marc Muehlfeld 2017-07-27 11:25:02 UTC Doc Text Certificate System now supports enabling and disabling certificate and CRL publishing

Prior to this update, if publishing was enabled in a certificate authority (CA), Certificate System automatically enabled both certificate revocation list (CRL) and certificate publishing. Consequently, on servers that did not have certificate publishing enabled, error messages were logged. Certificate System has been enhanced, and now supports enabling and disabling certificate and CRL publishing independently in the `/var/lib/pki/<instance>/ca/conf/CS.cfg` file:

To enable or disable both certificate and CRL publishing:

ca.publish.enable = True|False

To enable only CRL publishing:

ca.publish.enable = True
ca.publish.cert.enable = False

To enable only certificate publishing:

ca.publish.enable = True
ca.publish.crl.enable = False
Certificate System now supports enabling and disabling certificate and CRL publishing

Prior to this update, if publishing was enabled in a certificate authority (CA), Certificate System automatically enabled both certificate revocation list (CRL) and certificate publishing. Consequently, on servers that did not have certificate publishing enabled, error messages were logged. Certificate System has been enhanced, and now supports enabling and disabling certificate and CRL publishing independently in the `/var/lib/pki/<instance>/ca/conf/CS.cfg` file.

To enable or disable both certificate and CRL publishing, set:

ca.publish.enable = True|False

To enable only CRL publishing, set:

ca.publish.enable = True
ca.publish.cert.enable = False

To enable only certificate publishing, set:

ca.publish.enable = True
ca.publish.crl.enable = False
errata-xmlrpc 2017-08-01 22:46:01 UTC Status VERIFIED CLOSED
Resolution --- ERRATA
Last Closed 2017-08-01 18:46:01 UTC
Dinesh Prasanth 2020-10-04 21:07:43 UTC Link ID Github dogtagpki/pki/issues/2395

Back to bug 1325071