search

aws-quickstart / quickstart-microsoft-pki

AWS Quick Start Team
Apache License 2.0
8 stars 8 forks source link

CAPolicy.inf doesn't use the parameter value for [InternalPolicy].Url #48

Open anders-remondis opened 2 years ago

anders-remondis commented 2 years ago

In Capolicy.inf on subordinate CA, the value for URL under [InternalPolicy] uses default folder name (machine name), instead of the parameter value entered.

E.g.result: URL=http://{bucker}.s3-{region}.amazonaws.com/SubCa/cps.txt

Where bucket name and region is correcly resolved from parameters, but the folder name was not resolved from machine name parameter. "SubCa" is the default value which should be overridden by the parameter value in the stack.

(This for 2 tier CA stack, on subordinate CA)

girvenj commented 2 years ago

If UseS3ForCRL for = no, then it will use the computer name for the URL regardless if a bucket name is set. This is expected behavior.