Back to bug 1390322

Who When What Removed Added
Matthew Harmsen 2016-11-01 10:03:34 UTC Status NEW MODIFIED
Fixed In Version pki-core-10.3.3-12.el7_3
errata-xmlrpc 2016-11-01 10:14:22 UTC Status MODIFIED ON_QA
Kaleem 2016-11-09 05:47:20 UTC CC ksiddiqu
Flags needinfo?(ftweedal)
Fraser Tweedale 2016-11-09 10:08:16 UTC Flags needinfo?(ftweedal)
Geetika Kapoor 2016-11-10 14:11:53 UTC CC gkapoor
Flags needinfo?(ftweedal)
Fraser Tweedale 2016-11-13 23:49:59 UTC Flags needinfo?(ftweedal)
Geetika Kapoor 2016-11-14 16:59:34 UTC Flags needinfo?(ftweedal)
Endi Sukma Dewata 2016-11-14 19:46:11 UTC CC edewata
Flags needinfo?(ftweedal)
Geetika Kapoor 2016-11-15 07:10:36 UTC Flags needinfo?(edewata)
Fraser Tweedale 2016-11-15 07:23:16 UTC Flags needinfo?(edewata)
Geetika Kapoor 2016-11-15 08:19:32 UTC Status ON_QA VERIFIED
Fraser Tweedale 2016-11-16 00:35:29 UTC Doc Text Cause: When the CA's Subject Distinguished Name contains values that use a string encoding other than UTF8String, it compares unequal to the same DN when parsed from a string.

Consequence: A new LDAP authority entry is added for the main CA every time the CA is started.

Fix: Compare the string representations of the Subject DNs, instead of the X500Name values.

Result: Spurious authorities entries are not added on every startup.
Doc Type If docs needed, set a value Bug Fix
Petr Bokoc 2016-11-21 14:22:10 UTC CC pbokoc
Doc Text Cause: When the CA's Subject Distinguished Name contains values that use a string encoding other than UTF8String, it compares unequal to the same DN when parsed from a string.

Consequence: A new LDAP authority entry is added for the main CA every time the CA is started.

Fix: Compare the string representations of the Subject DNs, instead of the X500Name values.

Result: Spurious authorities entries are not added on every startup.
Previously, when the CA's Subject Distinguished Name contained values that used string encodings other than "UTF8String", the string always compared as unequal to itself when parsed from a string. This caused Certificate System to add a new LDAP authority entry to the main CA every time the CA was started. With this update, Certificate System compares string representations of the Subject DNs instead of "X500Name" values used previously, which fixes the underlying problem and prevents unneeded LDAP authority entries from being added on every startup.
errata-xmlrpc 2016-12-06 00:24:58 UTC Status VERIFIED RELEASE_PENDING
errata-xmlrpc 2016-12-06 17:05:18 UTC Status RELEASE_PENDING CLOSED
Resolution --- ERRATA
Last Closed 2016-12-06 12:05:18 UTC

Back to bug 1390322