alexvanin/certificates
1
0
Fork 0
forked from TrueCloudLab/certificates
Code Pull requests Activity

missed some mentions of PEM when changing the returned format to DER regarding CRL generation

Browse source
This commit is contained in:
Raal Goff 2021-11-02 16:39:29 +08:00
parent 8545adea92
commit 26cb52a573
1 changed files with 3 additions and 3 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

6
authority/tls.go
View file

@ -463,7 +463,7 @@ func (a *Authority) revokeSSH(crt *ssh.Certificate, rci *db.RevokedCertificateIn
return a.db.Revoke(rci)
}
// GenerateCertificateRevocationList returns a PEM representation of a signed CRL.
// GenerateCertificateRevocationList returns a DER representation of a signed CRL.
// It will look for a valid generated CRL in the database, check if it has expired, and generate
// a new CRL on demand if it has expired (or a CRL does not already exist).
//
@ -532,7 +532,7 @@ func (a *Authority) GenerateCertificateRevocationList(force bool) ([]byte, error
}
// Create a new db.CertificateRevocationListInfo, which stores the new Number we just generated, the
// expiry time, and the byte-encoded CRL - then store it in the DB
// expiry time, and the DER-encoded CRL - then store it in the DB
newCRLInfo := db.CertificateRevocationListInfo{
Number: n,
ExpiresAt: revocationList.NextUpdate,
@ -544,7 +544,7 @@ func (a *Authority) GenerateCertificateRevocationList(force bool) ([]byte, error
return nil, err
}
// Finally, return our CRL PEM
// Finally, return our CRL in DER
return certificateRevocationList, nil
}