[freeipa PR#5701][opened] Only request VALID certs when revoking certs for a host/service
by rcritten
URL: https://github.com/freeipa/freeipa/pull/5701
Author: rcritten
Title: #5701: Only request VALID certs when revoking certs for a host/service
Action: opened
PR body:
"""
Only request VALID certs when revoking certs for a host/service
This utilizes the new status option so that we only retrieve
VALID certificates when revoking certificates issued for a
specific host or service.
ae74d348c3da580264c56441c136af3fc6ae58df made a special case
in cert_find when searching for hosts and services so that if only
one host/service was searched on do a subject search. It only
works when there is exactly one option requested.
Since we want to restrict to only VALID certificates, pass
the hostname as subject directly when revoking certs when deleting
an entry to limit the number of certificates to consider.
https://pagure.io/freeipa/issue/7835
Signed-off-by: Rob Crittenden <rcritten(a)redhat.com>
"""
To pull the PR as Git branch:
git remote add ghfreeipa https://github.com/freeipa/freeipa
git fetch ghfreeipa pull/5701/head:pr5701
git checkout pr5701
3 years