CRL issues
- Dominant language
- Go
- Stars
- 9.5k
- Forks
- 1.2k
- PR merge metrics
- No merged PRs in 30d
Description
- Although I set up a sqlite3 database and ran it with a cfssl server as instructed, getting a signed certificate from the server does not result in a certificate being added to the database, which I had assumed would be the case. (I checked this via `SELECT * in certificates` in the relevant database.)
- Although there were no entries in the database, `revoke` returned no error (nor did it generate or append to a serials.txt file, i.e. serial numbers to be revoked in a subsequent CRL).
- After revocation, calling `crl` via the API results in a CRL with the serial number of the certificate I revoked. Where is that serial number being stored??
- The API docs for `crl` state that "The returned result is an empty JSON object," but that is not in fact the case. For instance, I got the following, and the `result` value decodes to a CRL:
`{"success":true,"result":"MIICAzCB7AIBATANBgkqhkiG9w0BAQsFADBsMQswCQYDVQQGEwItLTEOMAwGA1UECBMFU1RBVEUxETAPBgNVBAcTCExPQ0FMSVRZMRUwEwYDVQQKEwxPUkdBTklTQVRJT04xDjAMBgNVBAsTBUxPQ0FMMRMwEQYDVQQDEwooTE9DQUwpIENBFw0xODA3MDYyMjE4MTVaFw0xODA3MTMyMjE4MTVaMCcwJQIUbxO0rFJZBplvnHe4y5MOrrmRv70XDTE4MDcwNjIxMzUyNlqgIzAhMB8GA1UdIwQYMBaAFAIpQJ/Fj0AM+R9C9fx7jR9aZ1KUMA0GCSqGSIb3DQEBCwUAA4IBAQAl59SbnmNvQHhVTex1Iu33ABbRoiYee6EvKf+TeQ5Ktj7/5BjWbXUTDnsg/InKjrRwf4YVw4w4Nmu4ilPpLmmOprwntrFma2gjPnNv0PiUdhNLuwoF0OKdPn3ceDoEZCJ8KV0b7n4Bw/kG6WfL6GyKPjzDK/ZbByy3x5BosOBx9fnLn2xVjkfL1JLNirZ9wrDX8kISVE84MIJUsW63A/oKATG3VHS4sUr4Yzs5fHdTWvznjwimspT+s2BqaPLjmPsqRtJpYZWDnqUXeXPGj2662sUY4pjsyCUPHS6RJbyceTsCaAExfH7b7oT7LrgwszNawJXvuMHAbuQ26hTIGQLA","errors":[],"messages":[]}`
Contributor guide
Assessment
This issue has not been assessed yet.