OpenSolaris

Printable Version Enter a New Search
Bug ID 6643119
Synopsis kmf_validate_cert() should download CRL only when the previous one has expired
State 10-Fix Delivered (Fix available in build)
Category:Subcategory solaris-crypto:key_mgmt_libraries
Keywords
Responsible Engineer Wyllys Ingersoll
Reported Against
Duplicate Of
Introduced In solaris_nevada
Commit to Fix snv_82
Fixed In snv_82
Release Fixed solaris_nevada(snv_82)
Related Bugs 6643277
Submit Date 18-December-2007
Last Update Date 31-January-2008
Description 
kmf_validate_cert(), if appropriately set in policy via crl-get-crl-uri, downloads CRL every time the function is called. It would be better if CRL was downloaded only when (1) there was no CRL so far or (2) only if the previous one has expired. It would be more efficient then.
Work Around 
N/A
Comments 
N/A