Uploaded image for project: 'EJBCA'
  1. EJBCA
  2. ECA-8363

IPv6 Bug: SAN IPv6 field ignored on issuance

    Details

    • Type: Bug
    • Status: Closed
    • Priority: Major
    • Resolution: Fixed
    • Affects Version/s: EJBCA 7.2.1
    • Fix Version/s: EJBCA 7.2.1
    • Component/s: CA GUI
    • Labels:
      None
    • Environment:
      Ubuntu 18.04
      Oracle Java 8
      MariaDB
      Wildfly 14
    • Sprint:
      EJBCA Team Alice - 2019 w28, EJBCA Team Alice - 2019 w31

      Description

      STEPS
      1. Create an End Entity profile with an Subject Alternative Name, IP
      2. Enter an IPv6 address: e.g.
      a. [fd04:5662:bf9c:a205::2525]

      Actual: On save, an error states the address is invalid
      b. fd04:5662:bf9c:a205::2525
      3. Save and Generate Keystore
      4. Use the command to verify the keystore:
      sudo keytool -list -v -keystore keystore.jks

      EXPECTED: IPAddress: fd04:5662:bf9c:a205::2525
      ACTUAL: Line not written

      NOTE: If using 2 IPAddresses, one for IPv4 and one for IPv6, then the line for IPv6 is not written

      Also:
      a. VA does not identify the peer connection
      b. CA has the following error when pinging system using IPv6
      Unable to connect to peer. SSLPeerUnverifiedException, Certificate for <[fd04:5662:bf9c:a205::2525]> doesn't match any of the subject alternative names: [ejbcaserver, 192.168.56.104]

        Attachments

          Activity

            People

            Assignee:
            hsunmark Henrik Sunmark
            Reporter:
            margarett Margaret Thomas
            Verified by:
            Amin Khorsandi
            Votes:
            0 Vote for this issue
            Watchers:
            3 Start watching this issue

              Dates

              Created:
              Updated:
              Resolved:

                Time Tracking

                Estimated:
                Original Estimate - 4 hours
                4h
                Remaining:
                Time Spent - 2 hours Remaining Estimate - 2 hours
                2h
                Logged:
                Time Spent - 2 hours Remaining Estimate - 2 hours
                2h