dogtagpki / pki

The Dogtag Certificate System is an enterprise-class Certificate Authority (CA) which supports all aspects of certificate lifecycle management, including key archival, OCSP and smartcard management.
https://www.dogtagpki.org
GNU General Public License v2.0
362 stars 135 forks source link

TPS backward compatiblity #1523

Closed pki-bot closed 3 years ago

pki-bot commented 3 years ago

This issue was migrated from Pagure Issue #957. Originally filed by edewata (@edewata) on 2014-04-09 00:11:23:


We need to determine whether to support TPS backward compatibility (BC).

Here is a possible scenario, a user has a 10.1 CA and 10.1 TPS on different machines. When the user is doing a yum update on the first machine, the CA may get automatically upgraded to 10.2 due to some dependencies without the user realizing it. If BC is supported, the 10.1 TPS will continue to work with the new 10.2 CA. If BC is not supported, the 10.1 TPS may not be working properly anymore, and the solution is to upgrade it to 10.2 TPS, which could be difficult if there is no automatic TPS migration script.

If BC is not required in 10.2, there may be some configuration/protocol/database changes that can be done to significantly improve TPS on the long run. If these changes are not done in 10.2, changing it later may be more difficult because after 10.2 the BC is probably a must.

If BC is required in 10.2, there may be some changes that are already committed that need to be reverted. A proper testing will be needed to validate BC.

Proposed milestone: April

pki-bot commented 3 years ago

Comment from mharmsen (@mharmsen) at 2014-04-23 22:22:10

On 4/23/2014, a separate meeting was held on this which resulted in the creation of a Wiki page to document decisions:

Per discussions, targeted 10.2 - 04/14 (April)

pki-bot commented 3 years ago

Comment from edewata (@edewata) at 2014-04-26 03:08:38

Since the decision was made, this ticket can be closed.

pki-bot commented 3 years ago

Comment from edewata (@edewata) at 2017-02-27 14:07:21

Metadata Update from @edewata: