This issue was migrated from Pagure Issue #3109.Originally filed by ftweedal on 2019-09-24
The CertSearchRequest interface does not admit a search like "not revoked" - it only allows one (positive) status match at a time. Another example is all revoked certs (regardless whether expired), because there are two statuses involved: REVOKED and REVOKED_EXPIRED.
Update the relevant types, routines, API and CLI interfaces to allow richer filtering by status.
This issue was migrated from Pagure Issue #3109.Originally filed by ftweedal on 2019-09-24
The
CertSearchRequestinterface does not admit a search like "not revoked" - it only allows one (positive) status match at a time. Another example is all revoked certs (regardless whether expired), because there are two statuses involved:REVOKEDandREVOKED_EXPIRED.Update the relevant types, routines, API and CLI interfaces to allow richer filtering by status.
See related FreeIPA bug: https://pagure.io/freeipa/issue/7549