1833944 - Public report listing all PEMs in the CCADB

Status: RESOLVED FIXED

(CA Program :: Common CA Database, enhancement, P1)

Description

[Kathleen Wilson]

The CCADB Public community and the CCADB Steering Committee have requested a new public report that lists all of the certificate PEMs in the CCADB.

Comment 1

[Kathleen Wilson]

It turned out that VisualForce has a limit of 15MB files for reports, so this report will need to be sharded into smaller reports.

The recommendation from the CCADB SC is to shard based on the certificate notBefore. This will keep the report file sizes reasonable long-term.

For example:

https://ccadb.my.salesforce-sites.com/ccadb/AllCertificatePEMsCSVFormat?NotBeforeYear=1999

Would provide the certificate PEMs for which the CCADB record has a ‘Valid From (GMT)’ field that contains 1999.

It looks like the first year for which there is data is 1994.

Comment 2

[Poonam Bhargava]

The custom report URL has been updated to except a parameter 'NotBeforeYear' and filter records.

Sample URL: https://ccadb.my.salesforce-sites.com/ccadb/AllCertificatePEMsCSVFormat?NotBeforeYear=2023

In CCADB, following 'NotBeforeYear' list will generate certificate data.

1994
1995
1996
1997
1998
1999
2000
2001
2002
2003
2004
2005
2006
2007
2008
2009
2010
2011
2012
2013
2014
2015
2016
2017
2018
2019
2020
2021
2022
2023

Comment 3

[Kathleen Wilson]

Thanks, Poonam!

Feedback from the community:

It's a good idea, but what about grouping the certificates by decades?

So, for example:

https://ccadb.my.salesforce-sites.com/ccadb/AllCertificatePEMsCSVFormat?NotBeforeDecade=1990
https://ccadb.my.salesforce-sites.com/ccadb/AllCertificatePEMsCSVFormat?NotBeforeDecade=1991
...
https://ccadb.my.salesforce-sites.com/ccadb/AllCertificatePEMsCSVFormat?NotBeforeDecade=1999
Would provide the certificate PEMs for which the CCADB record has a ‘Valid From (GMT)’ field that contains 199.

and

https://ccadb.my.salesforce-sites.com/ccadb/AllCertificatePEMsCSVFormat?NotBeforeDecade=2000
https://ccadb.my.salesforce-sites.com/ccadb/AllCertificatePEMsCSVFormat?NotBeforeDecade=2001
...
https://ccadb.my.salesforce-sites.com/ccadb/AllCertificatePEMsCSVFormat?NotBeforeDecade=2009
Would provide the certificate PEMs for which the CCADB record has a ‘Valid From (GMT)’ field that contains 200.

Seems like a good suggestion to me. What do you think?

Comment 4

[Poonam Bhargava]

It's a good idea. We have modified the program to allow either NotBeforeYear or NotBeforeDecade in the URL. If both are passed then no records are generated.

Comment 5

[Kathleen Wilson]

Thanks Poonam!