yahoo-eng-team team mailing list archive

[Yuriy Taraday <1294292@xxxxxxxxxxxxxxxxxx>]

Public bug reported:

When verifying if token is revoked using revocation tree, is_revoked
immediately returns False if on another level we get first tree in a
bundle that has no branches related to the token.

This happens because new bundle is verified too early. This check needs
to be shifted to upper level.

** Affects: keystone
     Importance: Undecided
     Assignee: Yuriy Taraday (yorik-sar)
         Status: New

** Changed in: keystone
     Assignee: (unassigned) => Yuriy Taraday (yorik-sar)

-- 
You received this bug notification because you are a member of Yahoo!
Engineering Team, which is subscribed to Keystone.
https://bugs.launchpad.net/bugs/1294292

Title:
  is_revoked bails out on first unrelated branch

Status in OpenStack Identity (Keystone):
  New

Bug description:
  When verifying if token is revoked using revocation tree, is_revoked
  immediately returns False if on another level we get first tree in a
  bundle that has no branches related to the token.

  This happens because new bundle is verified too early. This check
  needs to be shifted to upper level.

To manage notifications about this bug go to:
https://bugs.launchpad.net/keystone/+bug/1294292/+subscriptions