Uploaded image for project: 'EJBCA'
  1. EJBCA
  2. ECA-4991

Allow configuration of serial number octet size per CA

        Details

        • Type: New Feature
        • Status: Closed
        • Priority: Major
        • Resolution: Fixed
        • Affects Version/s: EJBCA 6.5.0.3
        • Fix Version/s: EJBCA 7.0.1
        • Component/s: None
        • Labels:
          None
        • Provenance:
          Internal Delivery
        • Issue discovered during:
          Customer
        • Sprint:
          EJBCA Team Alice - 2019 w6

          Description

          Currently the serial number of issued certificates is controlled by modifying
          ca.serialnumberoctetsize=8
          in cesecore.properties (or defaultvalues.properties if the value is not set in cesecore.properties).

          It would make sense

          • to be able to configure this value from the AdminGUI and
          • that all certificates issued under a CA use the same octet size
            →Make this a configurable option under each CA (upgrading existing once using the current setting of ca.serialnumberoctetsize and using a new setting as default for new CAs)
          • New default size, for new CAs to 20, keep the old property setting for existing CAs (set in the CA settings during upgrade)

            Attachments

              Issue Links

              is related to

              New Feature - A new feature of the product, which has yet to be developed. ECA-7893 Backporting "ECA-4991 Allow configuration of serial number octet size per CA" to EJBCA 6.15.0.3

              • Major - Major loss of function.
              • Closed

              New Feature - A new feature of the product, which has yet to be developed. ECA-7894 Backporting "ECA-4991 Allow configuration of serial number octet size per CA" to EJBCA 6.15.2

              • Major - Major loss of function.
              • Closed

              Task - A task that needs to be done. ECA-7895 Backporting "ECA-4991 Allow configuration of serial number octet size per CA" to EJBCA 7.0.0

              • Major - Major loss of function.
              • Closed

              Improvement - An improvement or enhancement to an existing feature or task. ECA-7891 Remove ca.serialnumberoctetsize from cesecore.properties.sample

              • Minor - Minor loss of function, or other problem where easy workaround is present.
              • Closed
              relates

              Bug - A problem which impairs or prevents the functions of the product. ECA-7989 Possible race condition in SerialNumberGenerator with different CAs use different octet sizes

              • Critical - Crashes, loss of data, severe memory leak.
              • Closed

              New Feature - A new feature of the product, which has yet to be developed. ECA-7055 Add certificate serial number prefixing to certificate profiles

              • Minor - Minor loss of function, or other problem where easy workaround is present.
              • Open

              New Feature - A new feature of the product, which has yet to be developed. ECA-3444 Allow longer certificate serial numbers than 64 bits

              • Minor - Minor loss of function, or other problem where easy workaround is present.
              • Closed

              Improvement - An improvement or enhancement to an existing feature or task. ECA-7819 Update properties.sample files

              • Minor - Minor loss of function, or other problem where easy workaround is present.
              • Open

                Activity

                  People

                  • Assignee:
                    tarmo_helmes Tarmo Raudsep
                    Reporter:
                    johan Johan Eklund
                    Verified by:
                    Henrik Sunmark
                  • Votes:
                    1 Vote for this issue
                    Watchers:
                    8 Start watching this issue

                    Dates

                    • Created:
                      Updated:
                      Resolved:

                      Time Tracking

                      Estimated:
                      Original Estimate - 3 days Original Estimate - 3 days
                      3d
                      Remaining:
                      Remaining Estimate - 0 minutes
                      0m
                      Logged:
                      Time Spent - 4 days, 1 hour
                      4d 1h