Back to bug 1327683

Who When What Removed Added
Matthew Harmsen 2016-04-15 15:55:34 UTC Target Release --- 7.3
Matthew Harmsen 2016-06-10 15:41:17 UTC Status NEW MODIFIED
Fixed In Version pki-core-10.3.2-3.el7
errata-xmlrpc 2016-06-10 16:13:04 UTC Status MODIFIED ON_QA
Geetika Kapoor 2016-07-25 06:25:24 UTC CC alee, gkapoor
Flags needinfo?(alee)
Geetika Kapoor 2016-07-25 13:33:04 UTC Status ON_QA ASSIGNED
Ade Lee 2016-08-03 20:08:08 UTC Status ASSIGNED ON_QA
Flags needinfo?(alee)
Geetika Kapoor 2016-08-16 07:19:04 UTC Flags needinfo?(alee)
Geetika Kapoor 2016-08-16 07:19:19 UTC Status ON_QA ASSIGNED
Matthew Harmsen 2016-08-18 16:21:11 UTC Assignee mharmsen alee
Ade Lee 2016-08-18 18:08:21 UTC Status ASSIGNED ON_QA
Flags needinfo?(alee)
Geetika Kapoor 2016-09-02 08:59:58 UTC Flags needinfo?(alee)
Geetika Kapoor 2016-09-06 13:45:30 UTC Status ON_QA MODIFIED
Ade Lee 2016-09-06 19:18:01 UTC Status MODIFIED ON_QA
Flags needinfo?(alee)
Fraser Tweedale 2016-09-13 11:44:47 UTC CC ftweedal
Doc Text File-based CRL publishing now be configured to automatically
delete old CRLs, either by keeping a specified maximum number of CRLs or by deleting CRLs older than a specified age.
Doc Type Bug Fix Release Note
Petr Bokoc 2016-09-13 14:19:03 UTC CC pbokoc
Docs Contact pbokoc
Geetika Kapoor 2016-09-15 07:34:32 UTC Flags needinfo?(alee)
Asha Akkiangady 2016-09-19 12:45:13 UTC Status ON_QA MODIFIED
Ade Lee 2016-09-19 19:35:45 UTC Status MODIFIED ON_QA
Flags needinfo?(alee)
Geetika Kapoor 2016-09-20 05:57:49 UTC Status ON_QA VERIFIED
Petr Bokoc 2016-09-29 12:24:06 UTC Docs Contact pbokoc mmuehlfe
Marc Muehlfeld 2016-10-04 07:16:16 UTC Doc Text File-based CRL publishing now be configured to automatically
delete old CRLs, either by keeping a specified maximum number of CRLs or by deleting CRLs older than a specified age.
Certificate System now removes old CRLs

Previously, if the file based certificate revocation list (CRL) publishing feature was enabled in the Certificate System, the service regularly created new CRL files without removing old ones. As a consequence, the system running Certificate System could eventually run out of space. To address the problem, two new configuration options were added to the `/etc/pki/pki-tomcat/ca/CS.cfg` file:

* "maxAge": Sets the number of days after which files expire and be purged. Default is "0" (never).

* "maxFullCRLs": Sets the maximum number of CRLs to keep. When new files are published, the oldest file is purged. Default is "0" (no limit).

As a result, you can now configure how the Certificate System handles old CRL files.
Doc Type Release Note Enhancement
Flags needinfo?(alee)
Ade Lee 2016-10-20 19:06:58 UTC Flags needinfo?(alee)
Lenka Špačková 2016-10-31 15:44:07 UTC Doc Text Certificate System now removes old CRLs

Previously, if the file based certificate revocation list (CRL) publishing feature was enabled in the Certificate System, the service regularly created new CRL files without removing old ones. As a consequence, the system running Certificate System could eventually run out of space. To address the problem, two new configuration options were added to the `/etc/pki/pki-tomcat/ca/CS.cfg` file:

* "maxAge": Sets the number of days after which files expire and be purged. Default is "0" (never).

* "maxFullCRLs": Sets the maximum number of CRLs to keep. When new files are published, the oldest file is purged. Default is "0" (no limit).

As a result, you can now configure how the Certificate System handles old CRL files.
Certificate System now removes old CRLs

Previously, if the file based certificate revocation list (CRL) publishing feature was enabled in the Certificate System, the service regularly created new CRL files without removing old ones. As a consequence, the system running Certificate System could eventually run out of space. To address the problem, two new configuration options were added to the `/etc/pki/pki-tomcat/ca/CS.cfg` file:

* "maxAge" - Sets the number of days after which files expire and be purged. Default is "0" (never).

* "maxFullCRLs" - Sets the maximum number of CRLs to keep. When new files are published, the oldest file is purged. Default is "0" (no limit).

As a result, you can now configure how the Certificate System handles old CRL files.
errata-xmlrpc 2016-11-02 15:22:23 UTC Status VERIFIED RELEASE_PENDING
errata-xmlrpc 2016-11-04 05:24:03 UTC Status RELEASE_PENDING CLOSED
Resolution --- ERRATA
Last Closed 2016-11-04 01:24:03 UTC
Dinesh Prasanth 2020-10-04 21:07:08 UTC Link ID Github dogtagpki/pki/issues/2374

Back to bug 1327683