View Issue Details

IDProjectCategoryView StatusLast Update
0000482Main CAcert Websiteaccount administrationpublic2015-02-17 20:28
Reporterlaw Assigned To 
PrioritynormalSeverityminorReproducibilityalways
Status closedResolutionfixed 
Product Version2008 
Target Version2015 Q1Fixed in Version2015 Q1 
Summary0000482: Certificates are automatically revoked on deletion of email address
DescriptionWhen deleting an email address certificates which propoably contain this address are automatically revoked without confirmation.

You should add a confirmation stating which certificates will be revoked by this action.

I just deleted an email which should no longer be used with CAcert, i still have access to it - however the revoked certificates were actively used!
TagsNo tags attached.
Reviewed by
Test Instructions

Relationships

related to 0000893 closedINOPIAE Extend Delete account feature for support 
related to 0000483 closedINOPIAE Please send more verbose emails concerning certificate revocation 
related to 0000597 closedBenBE email notification for revoked certificates 

Activities

INOPIAE

2015-02-17 20:28

updater   ~0005326

I tested the following:
created and confirmed new email address (test482@acme.com)
created a certificate for this email address
deleted the email address from the account.
The cert view and the accout history show the certificate as revoked.

The problem was fixed with some other bug in the meantime.

Issue History

Date Modified Username Field Change
2008-01-29 16:31 law New Issue
2012-12-17 19:48 Werner Dworak Relationship added related to 0000483
2012-12-19 11:10 INOPIAE Relationship added related to 0000597
2013-05-21 22:55 INOPIAE Relationship added related to 0000893
2015-02-17 20:23 INOPIAE Product Version => 2008
2015-02-17 20:23 INOPIAE Fixed in Version => 2015 Q1
2015-02-17 20:23 INOPIAE Target Version => 2015 Q1
2015-02-17 20:28 INOPIAE Note Added: 0005326
2015-02-17 20:28 INOPIAE Status new => closed
2015-02-17 20:28 INOPIAE Resolution open => fixed