jglobus/JGlobus — pull request #22 by bbockelm (2012-09-18 12:40:45+00:00)
Title: CRL and signing policy fixes

This pull request fixes a few odds-n-ends I ran into when running the unit tests with the IGTF CA bundles.

1) Non-standard signing_policy for the APAC CA causes exceptions to be thrown, and lots of warnings. I improve things so the warnings are only displayed periodically.
2) Instead of caching the directory indefinitely (a container might run for months, but we want to allow sysadmins to update the CAs without a restart), only reload once an hour.
3) A file descriptor is leaked when CRLs are reloaded. This prevented the unit tests from finishing, as we ran into file descriptor limits.

With these changes, I can successfully run the unit tests.