Uploaded image for project: 'EJBCA'
  1. EJBCA
  2. ECA-7633

New flag in 'ejbca.sh ca republish' command to list certificates instead of end entities

    Details

    • Type: Improvement
    • Status: Closed
    • Priority: Minor
    • Resolution: Fixed
    • Affects Version/s: None
    • Fix Version/s: EJBCA 7.4.0
    • Component/s: None
    • Labels:
      None
    • Provenance:
      Internal Delivery
    • Issue discovered during:
      Customer
    • Sprint:
      EJBCA Team Bob - 2019 w45

      Description

      The CLI command "bin/ejbca.sh ca republish" does:

      1. List all username from the UserData table, where the cAId column in userdata matches the CA you want to republish
        (it will print some info about the users it find when republishing)
      2. It gets the certificate profile ID from the entry in UserData (certificateProfileId column)
      3. It gets the active publisher(s) from the Certificate Profile this certificateProfileId points to (for this username)
      4. It gets all certificates for this username from the CertificateData table
      5. It publishes the certificates retrieved in step 4 to the publishers from step 3.

      Listing usernames may not always produce the desired result, because end entities can be removed and edited. Nowadays we can get certificate profiles ID from the CertificateData entry directly (this was not possible a long time ago which is probably why the command works as it does).

       

        Attachments

          Issue Links

            Activity

              People

              Assignee:
              tomas Tomas Gustavsson
              Reporter:
              tomas Tomas Gustavsson
              Verified by:
              Ulf Undmark
              Votes:
              0 Vote for this issue
              Watchers:
              4 Start watching this issue

                Dates

                Created:
                Updated:
                Resolved:

                  Time Tracking

                  Estimated:
                  Original Estimate - 3 hours
                  3h
                  Remaining:
                  Time Spent - 2 hours Remaining Estimate - 1 hour
                  1h
                  Logged:
                  Time Spent - 2 hours Remaining Estimate - 1 hour
                  2h