Archives/smallstep-certificates
2
0
Fork 0
mirror of https://github.com/smallstep/certificates.git synced 2024-11-17 15:29:21 +00:00
Code Issues Packages Projects Releases Wiki Activity

missed some mentions of PEM when changing the returned format to DER regarding CRL generation

Browse Source
This commit is contained in:
Raal Goff 2021-11-02 16:39:29 +08:00
parent 7d024cc4cb
commit 668cb6f39c
1 changed files with 3 additions and 3 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

6
authority/tls.go
View File

@ -509,7 +509,7 @@ func (a *Authority) revokeSSH(crt *ssh.Certificate, rci *db.RevokedCertificateIn
return a.db.Revoke(rci) return a.db.Revoke(rci)
} }
// GenerateCertificateRevocationList returns a PEM representation of a signed CRL. // GenerateCertificateRevocationList returns a DER representation of a signed CRL.
// It will look for a valid generated CRL in the database, check if it has expired, and generate // It will look for a valid generated CRL in the database, check if it has expired, and generate
// a new CRL on demand if it has expired (or a CRL does not already exist). // a new CRL on demand if it has expired (or a CRL does not already exist).
// //
@ -578,7 +578,7 @@ func (a *Authority) GenerateCertificateRevocationList(force bool) ([]byte, error
} }
// Create a new db.CertificateRevocationListInfo, which stores the new Number we just generated, the // Create a new db.CertificateRevocationListInfo, which stores the new Number we just generated, the
// expiry time, and the byte-encoded CRL - then store it in the DB // expiry time, and the DER-encoded CRL - then store it in the DB
newCRLInfo := db.CertificateRevocationListInfo{ newCRLInfo := db.CertificateRevocationListInfo{
Number: n, Number: n,
ExpiresAt: revocationList.NextUpdate, ExpiresAt: revocationList.NextUpdate,
@ -590,7 +590,7 @@ func (a *Authority) GenerateCertificateRevocationList(force bool) ([]byte, error
return nil, err return nil, err
} }
// Finally, return our CRL PEM // Finally, return our CRL in DER
return certificateRevocationList, nil return certificateRevocationList, nil
} }