Uploaded image for project: 'EJBCA'
  1. EJBCA
  2. ECA-7986

Better validation message when CAA validator is running on a certificate without dNSNames

    Details

    • Type: Improvement
    • Status: Closed
    • Priority: Cosmetic
    • Resolution: Fixed
    • Affects Version/s: None
    • Fix Version/s: EJBCA 7.1.0
    • Component/s: None
    • Provenance:
      Internal Delivery
    • Sprint:
      EJBCA Team Bob - 2019 w10

      Description

      When a CAA validator is running on a certificate without dNSNames in the SAN, it permits issuance with the following message:

      'CAA' has permitted issuance of certificates ... with messages: []

      Permitting issuance is correct behaviour, but the message could be improved, e.g.

      'CAA' has permitted issuance of certificates ... with messages: [ "Issuance permitted but no dNSNames could be found in the certificate's SAN extension." ]

        Attachments

          Activity

            People

            Assignee:
            bastianf Bastian Fredriksson
            Reporter:
            bastianf Bastian Fredriksson
            Verified by:
            Ulf Undmark
            Votes:
            0 Vote for this issue
            Watchers:
            3 Start watching this issue

              Dates

              Created:
              Updated:
              Resolved:

                Time Tracking

                Estimated:
                Original Estimate - 3 hours
                3h
                Remaining:
                Time Spent - 30 minutes Remaining Estimate - 2 hours, 30 minutes
                2h 30m
                Logged:
                Time Spent - 30 minutes Remaining Estimate - 2 hours, 30 minutes
                30m