Medium
There is a mix-up in the code !
The class CertificateRequestAutoSign means that the request will immediately generate a signed certificate.
The class CertificateRequestCSR means that the request must be approved by an admin !
In reality, AutoSign certificates are instantiated when a participant perform a request, but are not immediately signed ! An admin shall first accept the request. And The CSR request (instantiated with CAS browser certificate request) is immediately signed. It is a nonsense !
A serious re factoring is needed !
The class CertificateRequestAutoSign means that the request will immediately generate a signed certificate.
The class CertificateRequestCSR means that the request must be approved by an admin !
In reality, AutoSign certificates are instantiated when a participant perform a request, but are not immediately signed ! An admin shall first accept the request. And The CSR request (instantiated with CAS browser certificate request) is immediately signed. It is a nonsense !
A serious re factoring is needed !
- relates to
-
GSS-299 Unable to create CertificateRequest in an empty database.
-
- Closed
-
