Uploaded image for project: 'EJBCA'
  1. EJBCA
  2. ECA-9686

Async. job to revoke certificates

    Details

    • Type: Improvement
    • Status: Closed
    • Priority: Minor
    • Resolution: Won't Do
    • Affects Version/s: None
    • Fix Version/s: None
    • Component/s: PKI core
    • Labels:
      None

      Description

      If Single Active Certificate Constraint functionality of the certificate profile is enabled, existing valid certificates for an end entity are revoked immediately.

      Implement async. revocation of certificates for the ‚Single active certificate constraint‘ functionality. There should be a selector in system configuration if async. revocation is enabled (enables the job for revocation as well), and a selector in the certificate profile page to enable async. revocation including a field for the relative time to wait until revocation. If selected, instead of revoke the certificate(s) at once, the ‚revocation requests‘ information(s) are stored in the data store, to be picked up by the revocation job later to revoke the certificates.

      It should be configurable by the user if the job has to be started on all nodes in a cluster or the ones selected by the user.

        Attachments

          Activity

            People

            Assignee:
            Unassigned Unassigned
            Reporter:
            anjakobs Andres Jakobs
            Votes:
            0 Vote for this issue
            Watchers:
            1 Start watching this issue

              Dates

              Created:
              Updated:
              Resolved:

                Time Tracking

                Estimated:
                Original Estimate - 3 days
                3d
                Remaining:
                Remaining Estimate - 3 days
                3d
                Logged:
                Time Spent - Not Specified
                Not Specified