Back to bug 1367683

Who When What Removed Added
Aneta Šteflová Petrová 2016-08-25 13:34:28 UTC CC jcholast
Docs Contact apetrova
Doc Type If docs needed, set a value Known Issue
Flags needinfo?(jcholast)
Jan Cholasta 2016-08-30 05:32:45 UTC Doc Text Cause:
certmonger uses incorrect API call to request certificate from IPA sub-CAs.

Consequence:
The sub CA setting is ignored and the certificate is always issued by the top-level IPA CA.

Workaround (if any):
N/A

Result:
Flags needinfo?(jcholast)
Aneta Šteflová Petrová 2016-08-30 06:36:43 UTC Docs Contact apetrova mmuehlfe
Marc Muehlfeld 2016-08-30 11:33:01 UTC Doc Text Cause:
certmonger uses incorrect API call to request certificate from IPA sub-CAs.

Consequence:
The sub CA setting is ignored and the certificate is always issued by the top-level IPA CA.

Workaround (if any):
N/A

Result:
The certmonger service fails to request certificates from IdM sub-CAs

The certmonger service uses incorrect API calls to request certificates
from IdM sub-CAs. As a consequence, the sub-CA setting is ignored and
the certificate is always issued by the IdM root CA. There is currently
no known workaround.
Flags needinfo?(jcholast)
Jan Cholasta 2016-09-01 06:41:47 UTC Flags needinfo?(jcholast)
Jan Cholasta 2016-09-06 08:35:58 UTC Status NEW POST
Martin Kosek 2016-09-06 11:19:48 UTC CC mkosek
Marcel Kolaja 2016-09-06 11:28:52 UTC CC mkolaja
Jan Cholasta 2016-09-06 11:31:17 UTC Status POST MODIFIED
Fixed In Version certmonger-0.78.4-3.el7
errata-xmlrpc 2016-09-06 11:37:29 UTC Status MODIFIED ON_QA
Abhijeet Kasurde 2016-09-20 06:19:02 UTC Status ON_QA VERIFIED
Aneta Šteflová Petrová 2016-10-13 07:35:04 UTC Doc Type Known Issue Bug Fix
Aneta Šteflová Petrová 2016-10-13 07:35:57 UTC Docs Contact mmuehlfe apetrova
Aneta Šteflová Petrová 2016-10-13 11:47:20 UTC Doc Text The certmonger service fails to request certificates from IdM sub-CAs

The certmonger service uses incorrect API calls to request certificates
from IdM sub-CAs. As a consequence, the sub-CA setting is ignored and
the certificate is always issued by the IdM root CA. There is currently
no known workaround.
*certmonger* no longer fails to request certificates from IdM sub-CAs

The *certmonger* service previously used incorrect API calls to request certificates from IdM sub-Certificate Authorities (sub-CAs). As a consequence, the sub-CA setting was ignored and the certificate was always issued by the IdM root CA. This update fixes the bug, and *certmonger* now requests certificates from IdM sub-CAs as expected.
Flags needinfo?(jcholast)
Jan Cholasta 2016-10-14 05:20:01 UTC Flags needinfo?(jcholast)
errata-xmlrpc 2016-11-02 13:47:56 UTC Status VERIFIED RELEASE_PENDING
errata-xmlrpc 2016-11-04 07:50:59 UTC Status RELEASE_PENDING CLOSED
Resolution --- ERRATA
Last Closed 2016-11-04 03:50:59 UTC

Back to bug 1367683