Hi,
I received a notice about several missing state and data checks. I
summarized the problem and added the notice to the CHANGES file (TODO).
problem: Several scripts check the data and then store the data
and the state in the clients browser again. The scripts
don't check the correctness of the data at the next step.
fix: Every validation must be placed in sub checkScriptsFileName and if
the script works with different states then the first and only
parameter must be the actual state. If the function knows several
states and there is no state given then all checks must be
applied.
The functions return undef on error. The function return a true
value on success which can include some precomputed data. If
the functions fails then the global variable errstruct can include
some precomputed data.
The checks has to be included into check-utils.lib.
affected scripts until now:
- basic_csr
- ie_req
- spkac_req
- pkcs10_req
- show_prepared_module/new_module/delete_module
- show_prepared_operation/new_operation/delete_operation
- show_prepared_right/new_right/delete_right/
- show_prepared_role/new_role
- show_prepared_script/new_script/delete_script
- changeCRR (crr_serial and serial - the serial cannot be changed!)
- confirm_revreq/submit_revreq
- test_cert
Any comments?
Michael
--
-------------------------------------------------------------------
Michael Bell Email (private): [EMAIL PROTECTED]
Rechenzentrum - Datacenter Email: [EMAIL PROTECTED]
Humboldt-University of Berlin Tel.: +49 (0)30-2093 2482
Unter den Linden 6 Fax: +49 (0)30-2093 2959
10099 Berlin
Germany http://www.openca.org
-------------------------------------------------------
This sf.net email is sponsored by: See the NEW Palm
Tungsten T handheld. Power & Color in a compact size!
http://ads.sourceforge.net/cgi-bin/redirect.pl?palm0001en
_______________________________________________
OpenCA-Devel mailing list
[EMAIL PROTECTED]
https://lists.sourceforge.net/lists/listinfo/openca-devel
