Bug 1590727

Summary: SCEP operation GetCAChain is not valid. Should be GetCACertChain
Product: Red Hat Enterprise Linux 7 Reporter: Vincenzo Polidoro <vpolidor>
Component: certmongerAssignee: Rob Crittenden <rcritten>
Status: CLOSED ERRATA QA Contact: ipa-qe <ipa-qe>
Severity: unspecified Docs Contact:
Priority: unspecified    
Version: 7.7CC: myusuf, nalin, ndehadra, pvoborni, rcritten
Target Milestone: rc   
Target Release: ---   
Hardware: Unspecified   
OS: Unspecified   
Whiteboard:
Fixed In Version: certmonger-0.78.4-12.el7 Doc Type: If docs needed, set a value
Doc Text:
Story Points: ---
Clone Of: Environment:
Last Closed: 2020-03-31 19:44:23 UTC Type: Bug
Regression: --- Mount Type: ---
Documentation: --- CRM:
Verified Versions: Category: ---
oVirt Team: --- RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: --- Target Upstream Version:
Embargoed:

Description Vincenzo Polidoro 2018-06-13 09:33:54 UTC
Description of problem:
Request to backport https://pagure.io/certmonger/issue/50 into RHEL7.

Version-Release number of selected component (if applicable):
Version used: certmonger-0.78.4-3.el7_5.1

This is fixed in version 0.79 with commit https://pagure.io/certmonger/c/71545541e5064281f913d91a08b7352af7fe6899
(this version is not part of RHEL)

Comment 4 Rob Crittenden 2019-12-06 13:47:37 UTC
In the middle of this bug report being created (for a 3 year old change) and certmonger rebased to 0.79.7 the GetCACertChain operation was dropped.

See upstream commit https://pagure.io/certmonger/c/60a4db5796b0575ca2cc9f1af4ecb3fdc6359242

This reconciled the certmonger SCEP support to the latest (at the time) specifications. certmonger is more closely following the Gutmann spec.

So I think this can be closed as not a bug.

Comment 5 Rob Crittenden 2019-12-06 13:51:15 UTC
Sigh. Never mind. I was in the wrong branch.

Comment 6 Rob Crittenden 2019-12-06 14:18:30 UTC
Third time's a charm. Yes, this code is gone.

It was removed within the same build in the patch in BZ https://bugzilla.redhat.com/show_bug.cgi?id=1608781 also fixed in this release.

So it is a no-op. Technically it is included but there is nothing to verify.

Comment 7 Mohammad Rizwan 2019-12-09 06:48:57 UTC
version:
certmonger-0.78.4-12.el7.x86_64

Based on comment#6, marking the bug as verified

Comment 9 errata-xmlrpc 2020-03-31 19:44:23 UTC
Since the problem described in this bug report should be
resolved in a recent advisory, it has been closed with a
resolution of ERRATA.

For information on the advisory, and where to find the updated
files, follow the link below.

If the solution does not work for you, open a new bug report.

https://access.redhat.com/errata/RHBA-2020:1052