From 24e4c0354c84013ec340b513b7faf973b1023881 Mon Sep 17 00:00:00 2001 From: Brayden Hass Date: Mon, 9 Dec 2024 19:34:28 +0000 Subject: [PATCH] Updates to script to support indirect CRL signing. --- credentials/generate-revocation-set.py | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/credentials/generate-revocation-set.py b/credentials/generate-revocation-set.py index 096f6508623d47..1bb8fa123a2fdb 100644 --- a/credentials/generate-revocation-set.py +++ b/credentials/generate-revocation-set.py @@ -606,7 +606,7 @@ def main(use_main_net_dcld: str, use_test_net_dcld: str, use_main_net_http: bool if revoked_cert_issuer is not None: # check if this really are the same thing if revoked_cert_issuer != x509.DirectoryName(certificate_authority_name).value: - logging.debug("CRL entry issuer is not CRL File Issuer, continue...") + logging.warning("CRL entry issuer is not CRL File Issuer, continue...") continue except Exception: logging.warning("certificateIssuer entry extension not found in CRL")