Uploaded image for project: 'EJBCA'
  1. EJBCA
  2. ECA-9152

Some certificates are missing when downloading a JKS chain

    Details

    • Type: Bug
    • Status: Closed
    • Priority: Cosmetic
    • Resolution: Fixed
    • Affects Version/s: EJBCA 7.3.1.4
    • Fix Version/s: EJBCA 7.4.0
    • Component/s: None
    • Labels:
    • Issue discovered during:
      Customer
    • Sprint:
      EJBCA Team Alice - 2020 w20

      Description

      When going to CA Certificates & CRLs in the RA web and clicking on the JKS link in the Certificate Chain column for a sub CA, some certificates may be missing due (see below for an explanation).

      The link is: https://<HOST>:8443/ejbca/ra/cert?caid=<SUB_CA_ID>&chain=true&format=jks

      The JKS can be inspected using keytool. This is what it may look like when a certificate is missing.

      > keytool -list -keystore ContainerQuickstartSubCA.cacert.jks        mån 18 maj 2020 11:07:56
      Enter keystore password:  
      Keystore type: jks
      Keystore provider: SUN
      
      Your keystore contains 1 entry
      
      containerquickstartsubca, May 18, 2020, trustedCertEntry, 
      Certificate fingerprint (SHA1): 3F:5E:E6:AE:EB:09:C1:3E:F8:88:1F:F5:82:79:06:60:01:94:13:42
      

      This is what it should look like:

      > keytool -list -keystore StormhubECHighAssuranceG1-chain.jks 
      Enter keystore password:  
      Keystore type: jks
      Keystore provider: SUN
      
      Your keystore contains 2 entries
      
      stormhub_ec_hig, May 18, 2020, trustedCertEntry, 
      Certificate fingerprint (SHA1): 33:39:E9:9C:B3:48:CF:0D:C4:41:AB:18:CA:32:E1:F0:40:06:C1:4A
      stormhub_ec_roo, May 18, 2020, trustedCertEntry, 
      Certificate fingerprint (SHA1): 9E:0F:41:6B:7E:38:03:C8:C7:D5:A7:48:E3:33:DF:F9:D7:E2:89:E2
      
      

        Attachments

          Activity

            People

            Assignee:
            bastianf Bastian Fredriksson
            Reporter:
            bastianf Bastian Fredriksson
            Verified by:
            Mike Agrenius Kushner
            Votes:
            0 Vote for this issue
            Watchers:
            3 Start watching this issue

              Dates

              Created:
              Updated:
              Resolved:

                Time Tracking

                Estimated:
                Original Estimate - 3 hours
                3h
                Remaining:
                Time Spent - 1 hour Remaining Estimate - 2 hours
                2h
                Logged:
                Time Spent - 1 hour Remaining Estimate - 2 hours
                1h