Starting PKI with zero-length range assignment causes error.

dogtagpki / pki

The Dogtag Certificate System is an enterprise-class Certificate Authority (CA) which supports all aspects of certificate lifecycle management, including key archival, OCSP and smartcard management.

GNU General Public License v2.0

362 stars 135 forks source link

This issue was migrated from Pagure Issue #3106. Originally filed by ftweedal (@frasertweedale) on 2019-09-04 03:20:39:

Assigned to dmoluguw (@SilleBille)

C. Starting PKI with zero-length ranges. Pki-dogtag refuses to start when the start of a range is above the end. Rather than refusing to start with a very obscure error hidden deep within very long logfiles, wouldn’t it be better to just resolve this by switching to the (available in our case!) nextRange?

Yes, it would be better to switch to the standby range.

Expected behavoiur: if there is a standby range available, switch to it instead of throwing an error upon startup when the current range is empty/depleted.

dogtagpki / pki

Starting PKI with zero-length range assignment causes error. #3223