• Leigh B. Stoller's avatar
    Minor changes to user certs to support certificate revocation lists · 4809cd65
    Leigh B. Stoller authored
    in the protogeni code. We no longer save the unencrypted certs after
    they are revoked, since protogeni will ignore them. I redid the the
    DB table as well, adding a revoked stamp, and the DN so that we can
    generate the CRL list from the DB directly, without having to run them
    all through openssl.
    This commit requires all certs to be regenerated, and the ssl xmlrpc
    server to be restarted.
database-create.sql 132 KB