Closed Bug 1763249 Opened 2 years ago Closed 2 years ago

Update the Derived Trust Bits batch program to only process the branch of the record that was changed

Categories

(CA Program :: Common CA Database, task)

Tracking

(Not tracked)

RESOLVED FIXED

People

(Reporter: kwilson, Assigned: poonam)

Details

Currently RunInterCertsDTSAndEVSSLCapableBatch is processing the entire CA Hierarchy in the CCADB starting from the CA Owner whenever relevant fields are changed in a root or intermediate certificate record.

To improve performance, have the RunInterCertsDTSAndEVSSLCapableBatch only process the current branch for the record that is changed, and not the entire CA Owner hierarchy.

Reference: Bug #1756007

Note: Due to doppelganger certificates, it is possible that a change in a record in one branch will cause a need for records in another branch to be updated as well. This will need to be resolved by either causing the program to also be run on any doppelganger cert hierarchies, or by having a nightly batch process re-check everything.

Summary: Update the RunInterCertsDTSAndEVSSLCapableBatch program to only process the branch that was updated → Update the Derived Trust Bits batch program to only process the branch of the record that was changed

Tested in sandbox. Ready to be moved to production.

Thanks!

Status: ASSIGNED → RESOLVED
Closed: 2 years ago
Resolution: --- → FIXED
Product: NSS → CA Program
Priority: P1 → --
Whiteboard: [ccadb-enhancement]
You need to log in before you can comment on or make changes to this bug.