Closing this issue. On further investigation, it was found that the Resender really isn't used anymore. That is, only archival requests are added to the Resender queue only when an enrollment is approved and the CA cannot contact the DRM. But in that case, the archival request is cancelled -- and so is removed from the Resender queue. At any later point, the agent can re-approve.

More interesting is if the CA goes down for some reason with entries in the queue. But the entries are not expunged from the queue until the CA is brought up again and processes the queue -- and only when it can contact the KRA.

There is no possibility of loss of data then. So no changes are needed.

Dogtag PKI is moving from Pagure issues to GitHub issues. This means that existing or new
issues will be reported and tracked through Dogtag PKI's GitHub Issue tracker.

This issue has been cloned to GitHub and is available here:
https://github.com/dogtagpki/pki/issues/1049

If you want to receive further updates on the issue, please navigate to the
GitHub issue and click on Subscribe button.

Thank you for understanding, and we apologize for any inconvenience.