letsencrypt
/
boulder
mirror of https://github.com/letsencrypt/boulder.git
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity

RA: Use IssuerNameID for revocation OCSP (#5516) 

Update the RA to specify the IssuerNameID rather than the IssuerID when
requesting that the CA generate a new OCSP response for a revoked
certificate.

Depends on #5515
Part of #5152
This commit is contained in:
Aaron Gable 2021-07-19 13:38:56 -07:00 committed by GitHub
parent c672f14edd
commit b59f4386f5
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23
1 changed files with 1 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
ra/ra.go
View File

@ -1790,7 +1790,7 @@ func (ra *RegistrationAuthorityImpl) revokeCertificate(ctx context.Context, cert
ocspResponse, err := ra.CA.GenerateOCSP(ctx, &capb.GenerateOCSPRequest{
Serial: serial,
IssuerID: int64(issuer.ID()),
IssuerID: int64(issuer.NameID()),
Status: string(core.OCSPStatusRevoked),
Reason: reason,
RevokedAt: revokedAt,