Uploaded image for project: 'EJBCA'
  1. EJBCA
  2. ECA-9000

Unclear error message when end entity does not match "batch generation" setting in profile

    Details

    • Type: Bug
    • Status: Open
    • Priority: Cosmetic
    • Resolution: Unresolved
    • Affects Version/s: None
    • Fix Version/s: None
    • Component/s: None
    • Issue discovered during:
      Customer
    • Sprint:
      Issues to Consider for Plan

      Description

      Steps to reproduce:

      1. Set Batch Generation Required in end entity profile
      2. Create and end entity with Batch Generation unchecked.
      3. Configure a CMP alias in client mode
      4. Try to use this end entity with CMP.

      Expected result:
      You should get a clear error message, for example:

      Userdata did not fulfill end entity profile XX, dn 'CN=xx': Clearpassword (used in batch processing) cannot be false in end entity.

      Or, for protocols, like CMP, etc (if possible to detect):

      Userdata did not fulfill end entity profile XX, dn 'CN=xx': Clearpassword (used in batch processing) must be false in profile.

      Actual result:
      You get this message:

      Userdata did not fulfill end entity profile XX, dn 'CN=xx': Clearpassword (used in batch processing) cannot be false..

      It is easy to misunderstand this message, since it is not obvious if the end entity or profile has the wrong value, if you don't read the full message carefully.

      To fix

      • Improve this particular message.
      • Check if this fix can be applied to all "user does not fulfill profile" errors.

        Attachments

          Activity

            People

            Assignee:
            Unassigned
            Reporter:
            samuel Samuel Lidén Borell
            Votes:
            0 Vote for this issue
            Watchers:
            1 Start watching this issue

              Dates

              Created:
              Updated:

                Time Tracking

                Estimated:
                Original Estimate - 1 hour
                1h
                Remaining:
                Remaining Estimate - 1 hour
                1h
                Logged:
                Time Spent - Not Specified
                Not Specified