Project

General

Profile

Feature #9869

Allow CRL entries to be made by serial number

Added by Jim Pingle 4 months ago. Updated 3 months ago.

Status:
Resolved
Priority:
Normal
Assignee:
Category:
Certificates
Target version:
Start date:
10/31/2019
Due date:
% Done:

100%

Estimated time:

Description

CRL entries are made by serial number internally, but the only way to revoke in the GUI is to have the certificate imported. We should also allow certificates to be revoked by serial alone, in case the certificate data is no longer available for various reasons.

Associated revisions

Revision 63fb68d7 (diff)
Added by Jim Pingle 4 months ago

CRL management overhaul

  • Allow revoking by serial number or cert. Implements #9869
  • Allow revoking multiple entries at a time. Implements #3258
  • Declutter the main CRL list screen
  • Move the create control to the bottom under the list
  • Various other efficiency/style improvements

Revision a6487fc8 (diff)
Added by Jim Pingle 4 months ago

CRL Fixes

  • Correct a PHP error in non-edit CRL actions. Fixes #9879
  • Correct display of revoke by serial options when the CRL CA contains no certificates. Issue #9869
  • Wording/text changes

Revision a6bd9e78 (diff)
Added by Jim Pingle 4 months ago

Validate CA/CRL serial input. Issue #9883 Issue #9869

Revision 5b535261 (diff)
Added by Jim Pingle 3 months ago

Allow revoking serial '0' by number. Fixes #9869

History

#1 Updated by Jim Pingle 4 months ago

  • Status changed from New to Feedback
  • % Done changed from 0 to 100

#2 Updated by Viktor Gurov 3 months ago

tested on pfSense 2.5.0.a.20191127.2047

it do not save serial number 0 (zero)

#3 Updated by Jim Pingle 3 months ago

  • Status changed from Feedback to In Progress

#4 Updated by Jim Pingle 3 months ago

  • Status changed from In Progress to Feedback

#5 Updated by Viktor Gurov 3 months ago

tested on 2.5.0.a.20191203.0148

Resolved

#6 Updated by Jim Pingle 3 months ago

  • Status changed from Feedback to Resolved

Also available in: Atom PDF