Closed Bug 95469 Opened 23 years ago Closed 23 years ago

PSM treats delta CRL as a full CRL in certificate validation

Categories

(Core Graveyard :: Security: UI, defect, P2)

1.0 Branch
defect

Tracking

(Not tracked)

VERIFIED DUPLICATE of bug 101038
psm2.2

People

(Reporter: awnuk, Assigned: rangansen)

Details

PSM treats delta CRL as a full CRL in certificate validation process,
which means that certificates listed on previously imported full CRL
are valid after importing new delta-CRL.
We don't support delta CRLs at the moment.
t->future
We need to do some specification work on what we want to do about them.
Keywords: nsenterprise
Priority: -- → P2
Target Milestone: --- → Future
Marking nEW.
Status: UNCONFIRMED → NEW
Ever confirmed: true
OS > all
OS: Windows NT → All
QA Contact: ckritzer → junruh
Hardware: PC → All
Version: 2.0 → 2.1
marking nsenterprise-; will be reevaluated for nsenterprise in future release.

Keywords: nsenterprise-
The roadmap for delta CRL is:
1) PSM will report an error when attempting to load delta crls (2.2, this bug)
2) When NSS has good support for delta crls we will restore the capability to
import them.
Assignee: ssaux → rangansen
Target Milestone: Future → 2.2
and what is the schedule for (2)?
For 3.4, NSS will stop delta CRLs from being loaded[bug# 103946]. As for full
support of delta crls by NSS, to my knowledge, a timeline has not been defined 
yet.

Making this bug a dup of bug# 10138

*** This bug has been marked as a duplicate of 10138 ***
Status: NEW → RESOLVED
Closed: 23 years ago
Resolution: --- → DUPLICATE
Sorry, that was a typo , that would be 101038 - not 10138 - reopening to mark
proper dup
Status: RESOLVED → REOPENED
Resolution: DUPLICATE → ---

*** This bug has been marked as a duplicate of 101038 ***
Status: REOPENED → RESOLVED
Closed: 23 years ago23 years ago
Resolution: --- → DUPLICATE
Verified dupe.
Status: RESOLVED → VERIFIED
Product: PSM → Core
Version: psm2.1 → 1.0 Branch
Product: Core → Core Graveyard
You need to log in before you can comment on or make changes to this bug.