Add 'Full CRL' Task lists for CAs and Root Store Operators
Categories
(CA Program :: Common CA Database, task)
Tracking
(Not tracked)
People
(Reporter: kwilson, Assigned: poonam)
Details
For CAs, add a task list to show the intermediate certs for which {'Full CRL Issued By This CA' AND 'JSON Array of Partitioned CRLs'} are blank where the Root Cert's Status = Included or Change Requested for any Root Store
Columns for the CA Task list: Certificate Name (link to cert record) | SHA-256 | Valid To | Valid From | Revocation Status | Root Cert Status (summary field) | Derived Trust Bits
For Root Store Home page, add similar reports (check for the root cert's root store Status = included/change requested). Two reports:
- 'Root Certificates with missing Full CRL'
- 'Intermediate Certificates with missing Full CRL'
Root Store Report columns: CA Owner (sort) | Certificate Name (link to cert record) | SHA-256 | Valid To | Valid From | Revocation Status | Derived Trust Bits
Reporter | ||
Comment 1•3 years ago
|
||
The root store reports were too big, so they have been moved out of the task list, and into the 'Root Store Reports' tab, so that they don't impact performance upon CCADB login.
Additionally, the new task list report on the CA home page is capped at 50 records.
Reporter | ||
Comment 2•3 years ago
|
||
Please make the following changes to the CA Task List Report.
-
Filter out expired and revoked certificates.
-
Remove the columns Valid From, Valid To, and Revocation Status
Assignee | ||
Comment 3•3 years ago
|
||
Completed the above request. 'Intermediate Certificates with missing Full CRL' report filters out the expired and revoked certificates for CAs.
Reporter | ||
Comment 4•3 years ago
|
||
(In reply to Poonam Bhargava from comment #3)
Completed the above request. 'Intermediate Certificates with missing Full CRL' report filters out the expired and revoked certificates for CAs.
Thanks!
Would you also please update the 'Intermediate Certificates with Missing Full CRL' report in the 'Root Store Reports' tab of the home page for root store operators -- to filter out revoked and expired certs, and remove the Valid To, Valid From, Revocation Status columns?
Assignee | ||
Comment 5•2 years ago
|
||
Updated the filter and also added 'Instructions' on both the reports.
- Root Certificates with missing Full CRL
- Intermediate Certificates with missing Full CRL
Let me know if there are any more changes needed.
Reporter | ||
Comment 6•2 years ago
|
||
Thanks!
Updated•1 year ago
|
Updated•11 months ago
|
Description
•