Bug 1257744

Summary:	RHCS error when agent tries to look at requests
Product:	[Retired] Dogtag Certificate System	Reporter:	Marc Richter <mrichter>
Component:	Certificate Manager	Assignee:	Christina Fu <cfu>
Status:	CLOSED DEFERRED	QA Contact:	Ben Levenson <benl>
Severity:	medium	Docs Contact:
Priority:	medium
Version:	9.0	CC:	dpal, rzaleski
Target Milestone:	9.0
Target Release:	---
Hardware:	All
OS:	Linux
Whiteboard:
Fixed In Version:		Doc Type:	Bug Fix
Doc Text:		Story Points:	---
Clone Of:		Environment:
Last Closed:	2015-11-16 20:06:52 UTC	Type:	Bug
Regression:	---	Mount Type:	---
Documentation:	---	CRM:
Verified Versions:		Category:	---
oVirt Team:	---	RHEL 7.3 requirements from Atomic Host:
Cloudforms Team:	---	Target Upstream Version:
Embargoed:

Description Marc Richter 2015-08-27 20:15:39 UTC

Description of problem: "We performed an os patch and rebooted the server last weekend.  Now when we receive a certificate request and we click on it to review it we get this error:

 The Certificate System has encountered an unrecoverable error.

Error Message:
java.lang.ClassCastException: netscape.security.x509.Extension cannot be cast to netscape.security.x509.CRLDistributionPointsExtension

Please contact your local administrator for assistance. 

Our certificate profiles have not changed in over a year"


Version-Release number of selected component (if applicable): 8.1


How reproducible: Constantly


Steps to Reproduce:
use the suggested workaround:
- Enable a profile with CRLDistributionPointsExtDefault extension in it
- Go to end-services page and submit a cert request using that profile (any dumb req will do)

And voila, you've got CRLDistributionPointsExtension working. You can now go to agent page and reject/delete dump request. This will last till next CA reboot.

Works on RH CA 8.1.

After the workaround, reboot the system and it will fail again.