Uploaded image for project: 'EJBCA'
  1. EJBCA
  2. ECA-4991

Allow configuration of serial number octet size per CA

    XMLWordPrintable

    Details

    • Type: New Feature
    • Status: Closed
    • Priority: Major
    • Resolution: Fixed
    • Affects Version/s: EJBCA 6.5.0.3
    • Fix Version/s: EJBCA 7.0.1
    • Component/s: None
    • Labels:
      None
    • Provenance:
      Internal Delivery
    • Issue discovered during:
      Customer
    • Sprint:
      EJBCA Team Alice - 2019 w6

      Description

      Currently the serial number of issued certificates is controlled by modifying
      ca.serialnumberoctetsize=8
      in cesecore.properties (or defaultvalues.properties if the value is not set in cesecore.properties).

      It would make sense

      • to be able to configure this value from the AdminGUI and
      • that all certificates issued under a CA use the same octet size
        →Make this a configurable option under each CA (upgrading existing once using the current setting of ca.serialnumberoctetsize and using a new setting as default for new CAs)
      • New default size, for new CAs to 20, keep the old property setting for existing CAs (set in the CA settings during upgrade)

        Attachments

          Issue Links

          is related to

          New Feature - A new feature of the product, which has yet to be developed. ECA-7893 Backporting "ECA-4991 Allow configuration of serial number octet size per CA" to EJBCA 6.15.0.3

          • Major - Major loss of function.
          • Closed

          New Feature - A new feature of the product, which has yet to be developed. ECA-7894 Backporting "ECA-4991 Allow configuration of serial number octet size per CA" to EJBCA 6.15.2

          • Major - Major loss of function.
          • Closed

          Task - A task that needs to be done. ECA-7895 Backporting "ECA-4991 Allow configuration of serial number octet size per CA" to EJBCA 7.0.0

          • Major - Major loss of function.
          • Closed

          Improvement - An improvement or enhancement to an existing feature or task. ECA-7891 Remove ca.serialnumberoctetsize from cesecore.properties.sample

          • Minor - Minor loss of function, or other problem where easy workaround is present.
          • Closed
          relates

          Bug - A problem which impairs or prevents the functions of the product. ECA-7989 Possible race condition in SerialNumberGenerator with different CAs use different octet sizes

          • Critical - Crashes, loss of data, severe memory leak.
          • Closed

          New Feature - A new feature of the product, which has yet to be developed. ECA-7055 Add certificate serial number prefixing to certificate profiles

          • Minor - Minor loss of function, or other problem where easy workaround is present.
          • Open

          New Feature - A new feature of the product, which has yet to be developed. ECA-3444 Allow longer certificate serial numbers than 64 bits

          • Minor - Minor loss of function, or other problem where easy workaround is present.
          • Closed

          Improvement - An improvement or enhancement to an existing feature or task. ECA-7819 Update properties.sample files

          • Minor - Minor loss of function, or other problem where easy workaround is present.
          • Open

            Activity

              People

              Assignee:
              tarmo_helmes Tarmo Raudsep (Inactive)
              Reporter:
              johan Johan Eklund
              Verified by:
              Henrik Sunmark
              Votes:
              1 Vote for this issue
              Watchers:
              8 Start watching this issue

                Dates

                Created:
                Updated:
                Resolved:

                  Time Tracking

                  Estimated:
                  Original Estimate - 3 days Original Estimate - 3 days
                  3d
                  Remaining:
                  Remaining Estimate - 0 minutes
                  0m
                  Logged:
                  Time Spent - 4 days, 1 hour
                  4d 1h