Back to bug 1381084

Who When What Removed Added
Matthew Harmsen 2016-10-03 16:32:11 UTC CC mharmsen
Endi Sukma Dewata 2016-10-03 19:39:52 UTC CC edewata, rpattath
Flags needinfo?(rpattath)
Endi Sukma Dewata 2016-10-03 22:56:51 UTC Summary KRA installation with externally signed CA fails if the CA certificate chain p12 is not specified in the CA config Externally-signed CA installation with incomplete certificate chain does not fail
Flags needinfo?(rpattath)
Matthew Harmsen 2016-10-04 00:45:37 UTC Keywords ZStream
Endi Sukma Dewata 2016-10-04 01:09:16 UTC CC cfu
Flags needinfo?(cfu)
Endi Sukma Dewata 2016-10-04 20:15:28 UTC CC kengert
Flags needinfo?(kengert)
Endi Sukma Dewata 2016-10-04 20:16:39 UTC CC pvoborni
Flags needinfo?(cfu) needinfo?(pvoborni)
Kai Engert (:kaie) (inactive account) 2016-10-04 20:56:23 UTC Flags needinfo?(kengert) needinfo?(pvoborni)
Matthew Harmsen 2016-10-04 23:46:51 UTC Keywords ZStream
Endi Sukma Dewata 2016-10-05 00:38:58 UTC Flags needinfo?(kengert)
Kai Engert (:kaie) (inactive account) 2016-10-05 21:22:07 UTC Flags needinfo?(kengert)
Endi Sukma Dewata 2016-10-05 22:46:42 UTC Flags needinfo?(kengert)
Kai Engert (:kaie) (inactive account) 2016-10-06 12:04:46 UTC Flags needinfo?(kengert)
Endi Sukma Dewata 2016-10-06 20:00:34 UTC Summary Externally-signed CA installation with incomplete certificate chain does not fail KRA installation failed against externally-signed CA with partial certificate chain
Endi Sukma Dewata 2016-10-06 21:02:55 UTC Status NEW POST
Matthew Harmsen 2016-10-06 22:04:06 UTC Keywords ZStream
Nathan Kinder 2016-10-20 23:46:00 UTC CC nkinder
Ann Marie Rubin 2016-10-21 16:35:05 UTC CC arubin
Eugene Keck 2016-10-31 15:55:01 UTC Priority unspecified urgent
CC ekeck
Hardware Unspecified All
OS Unspecified Linux
Severity unspecified urgent
Tom Lavigne 2016-10-31 17:05:50 UTC Blocks 1390324
Matthew Harmsen 2017-03-15 07:35:21 UTC Status POST MODIFIED
Fixed In Version pki-core-10.4.0-1.el7
errata-xmlrpc 2017-03-15 07:42:02 UTC Status MODIFIED ON_QA
Roshni 2017-05-02 14:59:40 UTC Status ON_QA VERIFIED
Endi Sukma Dewata 2017-07-10 18:28:57 UTC Doc Text Previously KRA installation failed with UNKNOWN_ISSUER error if it tries to connect to an intermediate CA that has a trusted issuer CA certificate but does not have the root CA certificate (i.e. incomplete certificate chain).

The installation code has been fixed to ignore the UNKNOWN_ISSUER error so the KRA installation will complete successfully.
Doc Type If docs needed, set a value Bug Fix
Petr Bokoc 2017-07-27 12:32:19 UTC CC pbokoc
Docs Contact pbokoc
Doc Text Previously KRA installation failed with UNKNOWN_ISSUER error if it tries to connect to an intermediate CA that has a trusted issuer CA certificate but does not have the root CA certificate (i.e. incomplete certificate chain).

The installation code has been fixed to ignore the UNKNOWN_ISSUER error so the KRA installation will complete successfully.
KRA installation no longer fails when connecting to an intermediate CA with an incomplete certificate chain

Previously, installing a Key Recovery Authority (KRA) subsystem failed with an `UNKNOWN_ISSUER` error if the KRA attempted to connect to an intermediate CA that had a trusted CA certificate but did not have the root CA certificate. With this update, KRA installation ignores the error and completes successfully.
errata-xmlrpc 2017-08-01 22:46:01 UTC Status VERIFIED CLOSED
Resolution --- ERRATA
Last Closed 2017-08-01 18:46:01 UTC
Dinesh Prasanth 2020-10-04 21:16:42 UTC Link ID Github dogtagpki/pki/issues/2617

Back to bug 1381084