Uploaded image for project: 'EJBCA'
  1. EJBCA
  2. ECA-8823

Bad default CRL parameters when importing CA

    Details

    • Issue discovered during:
      Community
    • Sprint:
      EJBCA Team Alice - 2020 w2, EJBCA Team Alice - 2020 w7

      Description

      Problem: When importing CA, the Delta CRL is created!

      When importing CA (via GUI and via CLI) the CRL parameters had been set to these following default values:

      • CRL Expire Period = 1d
      • CRL Issue Interval = 0m
      • CRL Overlap Time = 10h
      • Delta CRL Period = 10h

      The problem: the Delta CRL is automatically created, even if we don't need it!

      Reproduce:
      1. GUI: Create a new CA,
      2. GUI: Export this CA to PKCS #12 file,
      3. GUI: Delete this CA,
      4. GUI: Import the CA from the PKCS #12 file,
      5. GUI: Edit the CA, and look at the CRL settings.

      On the other hand, when creating a New CA, the CRL default values (prefilled in the form fields) are:

      • CRL Expire Period = 1d
      • CRL Issue Interval = 0m
      • CRL Overlap Time = 10m
      • Delta CRL Period = 0m

      The most important is '0m' for Delta CRL Period.

      Best fix is that the CA import method have the same four CRL default values than the New CA creating form (i.e. 1d, 0m, 10m, 0m).

        Attachments

          Issue Links

            Activity

              People

              Assignee:
              dcarella David Carella
              Reporter:
              dcarella David Carella
              Verified by:
              Tomas Gustavsson
              Votes:
              0 Vote for this issue
              Watchers:
              4 Start watching this issue

                Dates

                Created:
                Updated:
                Resolved: