Initial implementation
-
remove
kedifa-csr, as users of KeDiFa shall for now take care about certificates by themselves (see slapos!434 (comment 69248) and slapos!434 (comment 69359) ) - implement ID reservation as described in https://lab.nexedi.com/luke/kedifa/merge_requests/1#note_69235 with possible updates
-
implement real
submission_dateof a certificate- https://lab.nexedi.com/luke/kedifa/merge_requests/1#note_68679
-
just check
not_valid_beforeandnot_valid_afterdates -
order by
submission_datenotnot_valid_before - fix wording https://lab.nexedi.com/luke/kedifa/merge_requests/1#note_68666
- https://lab.nexedi.com/luke/kedifa/merge_requests/1#note_68667
- https://lab.nexedi.com/luke/kedifa/merge_requests/1#note_68668
- Improve reloading process, and update CA and CRL in app, as it is done on SSL layer (https://lab.nexedi.com/luke/kedifa/merge_requests/1#note_68921)
- https://lab.nexedi.com/luke/kedifa/merge_requests/1#note_68670
- improve licensing luke/kedifa@9a55bb02 (comment 68808)
- https://lab.nexedi.com/luke/kedifa/commit/f6584b43f8718734e55e6f8284634c59bf938b96#note_68851
-
document proper content type
application/x-x509-ca-certonPUTverb (see https://lab.nexedi.com/luke/kedifa/merge_requests/1#note_69042) -
try to provide nice
Locationafter putting certificate https://lab.nexedi.com/luke/kedifa/merge_requests/1#note_68680 - improve key encoding https://lab.nexedi.com/luke/kedifa/merge_requests/1#note_68644
- Use Organisational Unit instead of Common Name https://lab.nexedi.com/luke/kedifa/merge_requests/1#note_68640
-
use
_executeSingleRowinstead of unneeded complication https://lab.nexedi.com/luke/kedifa/merge_requests/1#note_68654 -
use the fact that
Cursoris iterator https://lab.nexedi.com/luke/kedifa/merge_requests/1#note_68658 - raise instead of returning https://lab.nexedi.com/luke/kedifa/merge_requests/1#note_68674
-
test and defend against invalid
QUERY_STRINGhttps://lab.nexedi.com/luke/kedifa/merge_requests/1#note_68676 -
check CRLs in app instead of
ssl_contexthttps://lab.nexedi.com/luke/kedifa/merge_requests/1#note_68689 -
keep
DELETEqueries in onegc-like method https://lab.nexedi.com/luke/kedifa/merge_requests/1#note_68659 - implement missing tests
- convert not implemented and agreed discussions to TODO in the repo