feat: unset OnlyContainsUserCerts and OnlyContainsCACerts options during Distribution Point marshaling#2511
feat: unset OnlyContainsUserCerts and OnlyContainsCACerts options during Distribution Point marshaling#2511savely-krasovsky wants to merge 10 commits intosmallstep:masterfrom
Conversation
|
|
maraino
left a comment
There was a problem hiding this comment.
I haven't tried, but my I think that if you set idpOnlyContainsCACerts and you revoke a "user" certificate, that will also appear in the CRL.
|
If there is no special reason to set |
|
@maraino what do you think about the change like that? I don't see any particular reason why those params are set. |
That makes more sense to me, we'll include this in our next triage. |
|
CA/Browser forum, Baseline Requirements 2.2.2,
Please see Google's newest |
|
Can I ask for the current status? |
Name of feature:
Unset OnlyContainsUserCerts and OnlyContainsCACerts options during Distribution Point marshaling.
Pain or issue this feature alleviates:
Why is this important to the project (if not answered above):
Is there documentation on how to use this feature? If so, where?
In what environments or workflows is this feature supported?
In what environments or workflows is this feature explicitly NOT supported (if any)?
Supporting links/other PRs/issues:
💔Thank you!