Uploaded image for project: 'EJBCA'
  1. EJBCA
  2. ECA-8610

P11-NG negative cache doesn't work well with EJBCA

    Details

    • Type: Bug
    • Status: Closed
    • Priority: Major
    • Resolution: Fixed
    • Affects Version/s: EJBCA 7.3.0
    • Fix Version/s: EJBCA 7.3.0
    • Component/s: None
    • Labels:
      None

      Description

      P11-NG currently do negative caching. I.e. saves empty lists of references in cache if the requested object wasn't found in the P11 device.

      During startup of EJBCA, the slot isn't necessarily auto-activated which will prevent private key references from being read --> negative cache entry is created. After slot login (Crypto Token Activation), key references which exists in the negative cache will fail to load as the result is empty.

        Attachments

          Activity

            People

            Assignee:
            hsunmark Henrik Sunmark
            Reporter:
            hsunmark Henrik Sunmark
            Verified by:
            Amin Khorsandi
            Votes:
            0 Vote for this issue
            Watchers:
            3 Start watching this issue

              Dates

              Created:
              Updated:
              Resolved: