Uploaded image for project: 'EJBCA'
  1. EJBCA
  2. ECA-8062

EST reenrollment fails if the DN includes more components than CN

    Details

    • Type: Bug
    • Status: Closed
    • Priority: Blocker
    • Resolution: Fixed
    • Affects Version/s: EJBCA 6.15.0.1
    • Fix Version/s: EJBCA 7.1.0
    • Component/s: Protocols
    • Labels:
    • Issue discovered during:
      Customer
    • Sprint:
      EJBCA Team Alice - 2019 w13

      Description

      With EST reenrollment a check is performed to ensure that the DN has not been changed. This check fails however, if the DN has more components than just the CN, and subsequently reenrollment fails. The DN from the certificated that is compared to the CSR includes spaces between the components that are added during certificate creation.

       

      EstOperationsSessionBean:

      if (!csr.getRequestDN().equals(reqCert.getSubjectDN().getName())) {

       

       

       

        Attachments

          Activity

            People

            Assignee:
            tomas Tomas Gustavsson
            Reporter:
            ulf_undmark Ulf Undmark
            Verified by:
            Ulf Undmark
            Votes:
            0 Vote for this issue
            Watchers:
            2 Start watching this issue

              Dates

              Created:
              Updated:
              Resolved:

                Time Tracking

                Estimated:
                Original Estimate - 4 hours
                4h
                Remaining:
                Time Spent - 2 hours Remaining Estimate - 2 hours
                2h
                Logged:
                Time Spent - 2 hours Remaining Estimate - 2 hours
                2h