Oliver Welter
Oliver Welter
Create a wrapper that can be used with mod_rewrite or cgi query params to serve "fresh" CRLs from the database via HTTP. Might also fit into the existing download.fcgi. NB:...
A lot of code is duplicated in the openxpkiadm tool, the script should use the socket and the api whereever possible
Merge of #747 introduces a new storage format for SAN items in the cert_attributes table for dirName SANs. This needs to be reflected in the search functions.
- Secrets are loaded on initial start or first use of a token - Due to FCGI and Client pooling the backend process are long lived - Changes to secrets...
If an activity dies with a database error, the transaction is marked "dirty" and the subsequent SQL queries to store the workflow internals are not executed as they share the...
1) Allow check of scep token (missing pkcs7 operations prevent online check) 2) check if CA validity is sufficient to issue all profiles (as on the fly validity computation might...
It is currently possible to override the parameters for serial generation (increasing / random part) for each profile - this imposes the risk that serial numbers will have duplicates when...
The formats and labels available in "certificate download" should be configurable. Suggested config node in uicontrol in parallel to certaction.
The general /cgi-bin/ alias in the apache config colides with the default config Alternative - use another prefix (e.g. openxpki-cgi)
Should be possible to read the location of the socketfile from the ENV Default location of the socketfile should be changed to /run (or /var/run) as the old location (/var/openxpki)...