Closed Bug 1733470 Opened 3 years ago Closed 2 years ago

Add 'Full CRL' Task lists for CAs and Root Store Operators

Categories

(CA Program :: Common CA Database, task)

Tracking

(Not tracked)

RESOLVED FIXED

People

(Reporter: kwilson, Assigned: poonam)

Details

For CAs, add a task list to show the intermediate certs for which {'Full CRL Issued By This CA' AND 'JSON Array of Partitioned CRLs'} are blank where the Root Cert's Status = Included or Change Requested for any Root Store

Columns for the CA Task list: Certificate Name (link to cert record) | SHA-256 | Valid To | Valid From | Revocation Status | Root Cert Status (summary field) | Derived Trust Bits

For Root Store Home page, add similar reports (check for the root cert's root store Status = included/change requested). Two reports:

  1. 'Root Certificates with missing Full CRL'
  2. 'Intermediate Certificates with missing Full CRL'

Root Store Report columns: CA Owner (sort) | Certificate Name (link to cert record) | SHA-256 | Valid To | Valid From | Revocation Status | Derived Trust Bits

The root store reports were too big, so they have been moved out of the task list, and into the 'Root Store Reports' tab, so that they don't impact performance upon CCADB login.

Additionally, the new task list report on the CA home page is capped at 50 records.

Please make the following changes to the CA Task List Report.

  1. Filter out expired and revoked certificates.

  2. Remove the columns Valid From, Valid To, and Revocation Status

Completed the above request. 'Intermediate Certificates with missing Full CRL' report filters out the expired and revoked certificates for CAs.

(In reply to Poonam Bhargava from comment #3)

Completed the above request. 'Intermediate Certificates with missing Full CRL' report filters out the expired and revoked certificates for CAs.

Thanks!

Would you also please update the 'Intermediate Certificates with Missing Full CRL' report in the 'Root Store Reports' tab of the home page for root store operators -- to filter out revoked and expired certs, and remove the Valid To, Valid From, Revocation Status columns?

Updated the filter and also added 'Instructions' on both the reports.

  1. Root Certificates with missing Full CRL
  2. Intermediate Certificates with missing Full CRL

Let me know if there are any more changes needed.

Thanks!

Status: ASSIGNED → RESOLVED
Closed: 2 years ago
Resolution: --- → FIXED
Product: NSS → CA Program
Priority: P1 → --
Whiteboard: [ccadb-enhancement]
You need to log in before you can comment on or make changes to this bug.