Uploaded image for project: 'EJBCA'
  1. EJBCA
  2. ECA-8062

EST reenrollment fails if the DN includes more components than CN

    Details

    • Type: Bug
    • Status: Closed
    • Priority: Blocker
    • Resolution: Fixed
    • Affects Version/s: EJBCA 6.15.0.1
    • Fix Version/s: EJBCA 7.1.0
    • Component/s: Protocols
    • Labels:
    • Issue discovered during:
      Customer
    • Sprint:
      EJBCA Team Alice - 2019 w13

      Description

      With EST reenrollment a check is performed to ensure that the DN has not been changed. This check fails however, if the DN has more components than just the CN, and subsequently reenrollment fails. The DN from the certificated that is compared to the CSR includes spaces between the components that are added during certificate creation.

       

      EstOperationsSessionBean:

      if (!csr.getRequestDN().equals(reqCert.getSubjectDN().getName())) {

       

       

       

        Attachments

          Activity

            People

            • Assignee:
              tomas Tomas Gustavsson
              Reporter:
              ulf_undmark Ulf Undmark
              Verified by:
              Ulf Undmark
            • Votes:
              0 Vote for this issue
              Watchers:
              2 Start watching this issue

              Dates

              • Created:
                Updated:
                Resolved:

                Time Tracking

                Estimated:
                Original Estimate - 4 hours
                4h
                Remaining:
                Time Spent - 2 hours Remaining Estimate - 2 hours
                2h
                Logged:
                Time Spent - 2 hours Remaining Estimate - 2 hours
                2h