Uploaded image for project: 'EJBCA'
  1. EJBCA
  2. ECA-7315

findCertificatesByExpireTime API calls, CLI and RA UI, should not return already expired certificates

    Details

    • Type: Improvement
    • Status: Closed
    • Priority: Major
    • Resolution: Fixed
    • Affects Version/s: None
    • Fix Version/s: EJBCA 7.0.0
    • Component/s: None
    • Labels:
      None
    • Issue discovered during:
      Community
    • Sprint:
      EJBCA Sprint 20, EJBCA Sprint 21 Team Alice

      Description

      The API calls findCertificatesByExpireTime*, which are used by the RA UI and the CLI command "ca listexpired" is not very logical. The calls says to "give me certificates that will expire within x days", but the calls also return already expired certificates.

      If I for example do:

      bin/ejbca.sh ca listexpired -d 25

      I may get the full 500 hits, on already expired certificates. This is not interesting, I want a list of the certificates that expire from "now" until 25 days in the future.

      The fix is easy, change the SQL queries to not return already expired items.

       

        Attachments

          Activity

            People

            • Assignee:
              tomas Tomas Gustavsson
              Reporter:
              tomas Tomas Gustavsson
              Verified by:
              Henrik Sunmark
            • Votes:
              0 Vote for this issue
              Watchers:
              1 Start watching this issue

              Dates

              • Created:
                Updated:
                Resolved:

                Time Tracking

                Estimated:
                Original Estimate - 2 hours
                2h
                Remaining:
                Time Spent - 1 hour, 50 minutes Remaining Estimate - 10 minutes
                10m
                Logged:
                Time Spent - 1 hour, 50 minutes Remaining Estimate - 10 minutes
                1h 50m