Uploaded image for project: 'EJBCA'
  1. EJBCA
  2. ECA-7632

RA Web enrollment, End entity removed if finishUser is unchecked in the CA

    Details

    • Type: Bug
    • Status: Closed
    • Priority: Critical
    • Resolution: Fixed
    • Affects Version/s: EJBCA 6.15.0
    • Fix Version/s: EJBCA 7.0.0
    • Component/s: RA UI
    • Labels:
    • Issue discovered during:
      Customer
    • Sprint:
      EJBCA Team Alice - 2019 w2

      Description

      Make an enrollment with keystore generation in the RA UI. The certificate/keystore is created and and end entity is created. You can search for the certificate, and click the link to the end entity to view the end entity.

      If you uncheck "finishUser" in "Edit CA", the end entity is deleted due to a clean up in EnrollMakeNewRequestBean.java that does not consider this case.

       

              } finally {
                  //End entity clean-up must be done if enrollment could not be completed (but end-entity has been added and wasn't already existing)
                  try {
                      if ((errorCode == null || !errorCode.equals(ErrorCode.USER_ALREADY_EXISTS)) && !KeyPairGeneration.POSTPONE.equals(getSelectedKeyPairGenerationEnum())) {
                          EndEntityInformation fromCA = raMasterApiProxyBean.searchUser(raAuthenticationBean.getAuthenticationToken(), endEntityInformation.getUsername());
                          if(fromCA != null && fromCA.getStatus() != EndEntityConstants.STATUS_GENERATED){
                              raMasterApiProxyBean.deleteUser(raAuthenticationBean.getAuthenticationToken(), endEntityInformation.getUsername());
                          }
                      }
                  } catch (AuthorizationDeniedException e) {
                      throw new IllegalStateException(e);
                  }
                  endEntityInformation.setUsername("");
              }
      
      

       

        Attachments

          Issue Links

            Activity

              People

              Assignee:
              amin Amin Khorsandi
              Reporter:
              tomas Tomas Gustavsson
              Verified by:
              Tomas Gustavsson
              Votes:
              0 Vote for this issue
              Watchers:
              2 Start watching this issue

                Dates

                Created:
                Updated:
                Resolved:

                  Time Tracking

                  Estimated:
                  Original Estimate - 4 hours Original Estimate - 4 hours
                  4h
                  Remaining:
                  Remaining Estimate - 0 minutes
                  0m
                  Logged:
                  Time Spent - 5 hours, 10 minutes
                  5h 10m