Uploaded image for project: 'EJBCA'
  1. EJBCA
  2. ECA-3727

Deprecated (null) extended key usages visible in Certificate profile

    Details

    • Type: Bug
    • Status: Closed
    • Priority: Cosmetic
    • Resolution: Fixed
    • Affects Version/s: None
    • Fix Version/s: EJBCA 6.2.2
    • Component/s: None
    • Labels:
      None
    • Issue discovered during:
      Community

      Description

      reported by David Carella.

      --> GUI: Old IPsec OIDs are displayed in EKU list

      Description:
      In Certificate Profile page, the three old IPsec OIDs are displayed in EKU list.

      Action:

      • remove old IPsec OIDs from EKU list

      Remark:
      In 'conf/extendedkeyusage.properties' file, we have:
      --------------------

      1. ipsecEndSystem (EKU_PKIX_IPSECENDSYSTEM) is deprecated
        extendedkeyusage.oid.5 = 1.3.6.1.5.5.7.3.5
        extendedkeyusage.name.5 = null
      2. ipsecTunnel (EKU_PKIX_IPSECTUNNEL) is deprecated
        extendedkeyusage.oid.6 = 1.3.6.1.5.5.7.3.6
        extendedkeyusage.name.6 = null
      3. ipsecUser (EKU_PKIX_IPSECUSER) is deprecated
        extendedkeyusage.oid.7 = 1.3.6.1.5.5.7.3.7
        extendedkeyusage.name.7 = null
        --------------------
        ... the message key is set to 'null'

      Where we can do the test "...==null" to exclude these three EKU OIDs from the list?

      I found in the file "ExtendedKeyUsageConfiguration.java":
      --------------------
      if (name != null) {
      // A null value in the properties file means that we should not use this value, so set it to null for real
      if (name.equalsIgnoreCase("null"))

      { name = null; }

      map.put(oid, name);
      } else

      { log.error("Found extended key usage oid "+oid+", but no name defined. Not adding to list of extended key usages."); }

      --------------------

        Attachments

          Activity

            People

            Assignee:
            tomas Tomas Gustavsson
            Reporter:
            tomas Tomas Gustavsson
            Verified by:
            Mike Agrenius Kushner
            Votes:
            0 Vote for this issue
            Watchers:
            1 Start watching this issue

              Dates

              Created:
              Updated:
              Resolved: