Bug 1829490

Summary:	Certmonger replaces the trailing "BEGIN CERTIFICATE“ at wrong position in /var/lib/certmonger/cas/<id> file
Product:	Red Hat Enterprise Linux 8	Reporter:	Rob Crittenden <rcritten>
Component:	certmonger	Assignee:	Rob Crittenden <rcritten>
Status:	CLOSED ERRATA	QA Contact:	ipa-qe <ipa-qe>
Severity:	high	Docs Contact:
Priority:	unspecified
Version:	8.2	CC:	arajendr, bugzilla-redhat, ddas, ipa-qe, ksiddiqu, myusuf, nalin, ndehadra, pcech, rcritten
Target Milestone:	rc	Keywords:	TestCaseProvided, Triaged
Target Release:	8.0
Hardware:	Unspecified
OS:	Unspecified
Whiteboard:
Fixed In Version:	certmonger-0.79.7-10.el8	Doc Type:	If docs needed, set a value
Doc Text:		Story Points:	---
Clone Of:	1814976	Environment:
Last Closed:	2020-11-04 02:51:52 UTC	Type:	Bug
Regression:	---	Mount Type:	---
Documentation:	---	CRM:
Verified Versions:		Category:	---
oVirt Team:	---	RHEL 7.3 requirements from Atomic Host:
Cloudforms Team:	---	Target Upstream Version:
Embargoed:
Bug Depends On:	1814976
Bug Blocks:

Comment 1 Rob Crittenden 2020-05-04 18:10:49 UTC

Fixed in upstream:
master: f78f6eb06cdd803073f8e368921681e1986ee7ea

Comment 4 Mohammad Rizwan 2020-06-19 11:40:13 UTC

reproducer:
~~~~~~~~~~~
version:
certmonger-0.79.7-9.el8.x86_64

Remove newline character from ipa ca cert:
[root@master ~]# echo -n '-----END CERTIFICATE----' >> /etc/ipa/ca.crt
[root@master ~]# cat /etc/ipa/ca.crt 
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE----[root@master ~]# 
[root@master ~]# 
[root@master ~]# getcert add-scep-ca -c "Redwax Interop" -u http://interop.redwax.eu/test/simple/scep  -R /etc/pki/tls/certs/rw.crt  -r /etc/ipa/ca.crt
New CA "Redwax Interop" added.
[root@master ~]# 
[root@master ~]# 
[root@master ~]# cat /var/lib/certmonger/cas/20200619113018
id=Redwax Interop
ca_aka=SCEP (certmonger 0.79.7)
ca_is_default=0
ca_type=EXTERNAL
ca_external_helper=/usr/libexec/certmonger/scep-submit -u http://interop.redwax.eu/test/simple/scep -R /etc/pki/tls/certs/rw.crt -r /etc/ipa/ca.crt     
ca_capabilities=AES,POSTPKIOperation,SHA-1,SHA-256,SHA-512,SCEPStandard
ca_encryption_cert=-----BEGIN CERTIFICATE-----
 MIIEkTCCAvmgAwIBAgIBATANBgkqhkiG9w0BAQsFADA4MRYwFAYDVQQKDA1URVNU
 UkVMTS5URVNUMR4wHAYDVQQDDBVDZXJ0aWZpY2F0ZSBBdXRob3JpdHkwHhcNMjAw
 NjE5MTA1NjQ4WhcNNDAwNjE5MTA1NjQ4WjA4MRYwFAYDVQQKDA1URVNUUkVMTS5U
 RVNUMR4wHAYDVQQDDBVDZXJ0aWZpY2F0ZSBBdXRob3JpdHkwggGiMA0GCSqGSIb3
 DQEBAQUAA4IBjwAwggGKAoIBgQC+CIMLJW8OF9VfQfhIvYOGZ/hAa/tERQKoVz3p
 nef2hsnLzTrWU5Ucu4boy4vtQqHrB2J206KWEJsAF88VgaaiMbc5jmWQJovvX3YY
 BnHXeePngShgWDb2BYdseLxiOPib6MW9GtKvV6qrwLIirnKT2g2JviE1qEvFg13A
 2H/i12FhXN5DjldAU+Pstzzvj6r9Ua6Qzq+TrjNMuIGbqqcrUaimM/JmPG3DR922
 bpiiyuQ6l5mQR9Lh2nfNBXXmVS2PFEjarOfYsktLjGdsHcJeS7WYgr3lm0DWrT6d
 XN2zzIS6Bpq6kaiK+e5RVOKi/4DwZrpobAuCQ0WJOAsLJAuMiE0fpNolzjlmmi9E
 3E6Mcl4yewShUDCXkRimQWzT+IIP+IsQlWQZxOqq11JfiM8jQa3V2+0Nrw1CEL8r
 hR1oLnfdeJeandLkVtmiuL+cWLF7zHgaRHI9TwvTVvrO3ENc+kIb6lUc5j4FY2cB
 ccFECtNUWHWt86kxxl0g6xSJPssCAwEAAaOBpTCBojAfBgNVHSMEGDAWgBR2sXZ4
 ukKAtCOZgpLyxnk+U4ZSiTAPBgNVHRMBAf8EBTADAQH/MA4GA1UdDwEB/wQEAwIB
 xjAdBgNVHQ4EFgQUdrF2eLpCgLQjmYKS8sZ5PlOGUokwPwYIKwYBBQUHAQEEMzAx
 MC8GCCsGAQUFBzABhiNodHRwOi8vaXBhLWNhLnRlc3RyZWxtLnRlc3QvY2Evb2Nz
 cDANBgkqhkiG9w0BAQsFAAOCAYEAICdsN9tt6DyHByUSK5aKBLaz0jS9HUcFgtf2
 rLmc61WvPHGAWFGUBqc5mjnW0JUJUvlQL5FHMCxZnpz7qPuEKpf13K2X8OLkJbOC
 NC3EgH7n8VygK1I4HAs9HBFaUl+zAAzzLkhnuT4oyMzeOjGTn+J65uhAwvZO3HiQ
 PRSCT8xozOZR/NTCFQ/AgHdXU8aXiTU9mE/VK0dXAvRo11ijfCoRVGFnk0GL0iH9
 GJf+T8Vjk+CS0SsvU8bkv11XxHP8zbai6+UkFyLZA7OEZBYQVIW63Rni8wLUCNDt
 EpBrxYzzmdR+d563oyMobbM4oQytpCx642aV2NJF6tWpMNozhxEoSRALe7LFMmCe
 1uNathhKsWFVgDUgJnH5r/pLH0i5r9Ro3LgdnUojHEO7GJHOFBHilrEBFZt+s2oZ
 4B0koIgk2UNK3ouUmpzCCXVkuRocsH53W/XsYqUx4hyeBE//LPaQuflZZq+Dm3VL
 l2nx/o79D478FcllAQb5Uh0TyPd/
 -----END CERTIFICATE---------BEGIN CERTIFICATE-----
ca_encryption_issuer_cert=MIIEDTCCAvWgAwIBAgIUbxG32FXSfZoU87bpFStgyoxL4qowDQYJKoZIhvcNAQEF
 BQAwWjE/MD0GA1UEAxM2UmVkd2F4IEludGVyb3AgVGVzdGluZyBSb290IENlcnRp
 ZmljYXRlIEF1dGhvcml0eSAyMDQwMRcwFQYDVQQKEw5SZWR3YXggUHJvamVjdDAe
 Fw0yMDAyMTExNjM4NTZaFw00MDAyMDYxNjM4NTZaMFoxPzA9BgNVBAMTNlJlZHdh
 eCBJbnRlcm9wIFRlc3RpbmcgUm9vdCBDZXJ0aWZpY2F0ZSBBdXRob3JpdHkgMjA0
 MDEXMBUGA1UEChMOUmVkd2F4IFByb2plY3QwggEiMA0GCSqGSIb3DQEBAQUAA4IB
 DwAwggEKAoIBAQDnICcjGF9EcH0kRu9TgqiXAV+YdBUOjV4jG9wCbJdZMv6tGYWY
 IPszrK3Cmw49uMbMgAEL/hB2mr/gZIFMQ0rs2GWwkaKolvg0rw9gE8PwR2p6jthu
 L+CzocyHkc27f/UGhekYSnbcgIitFNseaJWEI/d+eF8LPkPXhsSUVkCF/wcEG2xM
 DgS1KckoF7EJ9Tsc7XRVQ3Doq5WL+NCCnuSmeMcVTGhI9XaGreu+DYYmCR3vnDXa
 vx67A45vlYcgJU4pDL/oMwJW+WKiwKjpiZm4kyRZWYHGLlCUb+ckedhM1eCZwwsg
 yJKm0aPJbTDjlqRBshU++4aZMV2AFdLRIVq7AgMBAAGjgcowgccwHQYDVR0OBBYE
 FO113jUUPEcj8bEa5BNDjLvMwitWMIGXBgNVHSMEgY8wgYyAFO113jUUPEcj8bEa
 5BNDjLvMwitWoV6kXDBaMT8wPQYDVQQDEzZSZWR3YXggSW50ZXJvcCBUZXN0aW5n
 IFJvb3QgQ2VydGlmaWNhdGUgQXV0aG9yaXR5IDIwNDAxFzAVBgNVBAoTDlJlZHdh
 eCBQcm9qZWN0ghRvEbfYVdJ9mhTztukVK2DKjEviqjAMBgNVHRMEBTADAQH/MA0G
 CSqGSIb3DQEBBQUAA4IBAQDONOZcaEB3HjLi4wCkeSucGgmDyC2bwPIvZojr9UOx
 45FyB5awhRgUP/pKwZIDJ7y5b1Gd20AKjkac3kiXETTjCvGSm3v9EKtKclykd3Jd
 oKK1WupKhQxoTb6qTakwahxf9nggsjt0u+G9ngnHJiIRdejP8TIAtxZVKAn1Riw7
 OdNWzrNdq9E/4Ysr9m5jEYBlZKHLAkyvltjQfet9fsMCG7Ty9kxYVX7AszTEBkeH
 4Zd5gubTX2phjMbQk+uzHtoAQF4E5mwrhNjuMn6q2COB+M254u/pGQsi3i1LMxBD
 ch5AKvxjPsO3pLFi1oWvkJNArKw3DJLcTnCQl7Wn4ZzR
 -----END CERTIFICATE-----
ca_encryption_cert_pool=-----BEGIN CERTIFICATE-----
 MIIEkTCCAvmgAwIBAgIBATANBgkqhkiG9w0BAQsFADA4MRYwFAYDVQQKDA1URVNU
 UkVMTS5URVNUMR4wHAYDVQQDDBVDZXJ0aWZpY2F0ZSBBdXRob3JpdHkwHhcNMjAw
 NjE5MTA1NjQ4WhcNNDAwNjE5MTA1NjQ4WjA4MRYwFAYDVQQKDA1URVNUUkVMTS5U
 RVNUMR4wHAYDVQQDDBVDZXJ0aWZpY2F0ZSBBdXRob3JpdHkwggGiMA0GCSqGSIb3
 DQEBAQUAA4IBjwAwggGKAoIBgQC+CIMLJW8OF9VfQfhIvYOGZ/hAa/tERQKoVz3p
 nef2hsnLzTrWU5Ucu4boy4vtQqHrB2J206KWEJsAF88VgaaiMbc5jmWQJovvX3YY
 BnHXeePngShgWDb2BYdseLxiOPib6MW9GtKvV6qrwLIirnKT2g2JviE1qEvFg13A
 2H/i12FhXN5DjldAU+Pstzzvj6r9Ua6Qzq+TrjNMuIGbqqcrUaimM/JmPG3DR922
 bpiiyuQ6l5mQR9Lh2nfNBXXmVS2PFEjarOfYsktLjGdsHcJeS7WYgr3lm0DWrT6d
 XN2zzIS6Bpq6kaiK+e5RVOKi/4DwZrpobAuCQ0WJOAsLJAuMiE0fpNolzjlmmi9E
 3E6Mcl4yewShUDCXkRimQWzT+IIP+IsQlWQZxOqq11JfiM8jQa3V2+0Nrw1CEL8r
 hR1oLnfdeJeandLkVtmiuL+cWLF7zHgaRHI9TwvTVvrO3ENc+kIb6lUc5j4FY2cB
 ccFECtNUWHWt86kxxl0g6xSJPssCAwEAAaOBpTCBojAfBgNVHSMEGDAWgBR2sXZ4
 ukKAtCOZgpLyxnk+U4ZSiTAPBgNVHRMBAf8EBTADAQH/MA4GA1UdDwEB/wQEAwIB
 xjAdBgNVHQ4EFgQUdrF2eLpCgLQjmYKS8sZ5PlOGUokwPwYIKwYBBQUHAQEEMzAx
 MC8GCCsGAQUFBzABhiNodHRwOi8vaXBhLWNhLnRlc3RyZWxtLnRlc3QvY2Evb2Nz
 cDANBgkqhkiG9w0BAQsFAAOCAYEAICdsN9tt6DyHByUSK5aKBLaz0jS9HUcFgtf2
 rLmc61WvPHGAWFGUBqc5mjnW0JUJUvlQL5FHMCxZnpz7qPuEKpf13K2X8OLkJbOC
 NC3EgH7n8VygK1I4HAs9HBFaUl+zAAzzLkhnuT4oyMzeOjGTn+J65uhAwvZO3HiQ
 PRSCT8xozOZR/NTCFQ/AgHdXU8aXiTU9mE/VK0dXAvRo11ijfCoRVGFnk0GL0iH9
 GJf+T8Vjk+CS0SsvU8bkv11XxHP8zbai6+UkFyLZA7OEZBYQVIW63Rni8wLUCNDt
 EpBrxYzzmdR+d563oyMobbM4oQytpCx642aV2NJF6tWpMNozhxEoSRALe7LFMmCe
 1uNathhKsWFVgDUgJnH5r/pLH0i5r9Ro3LgdnUojHEO7GJHOFBHilrEBFZt+s2oZ
 4B0koIgk2UNK3ouUmpzCCXVkuRocsH53W/XsYqUx4hyeBE//LPaQuflZZq+Dm3VL
 l2nx/o79D478FcllAQb5Uh0TyPd/
 -----END CERTIFICATE-----
 -----BEGIN CERTIFICATE-----
 MIIFFzCCA/+gAwIBAgIBBjANBgkqhkiG9w0BAQsFADBaMT8wPQYDVQQDEzZSZWR3
 YXggSW50ZXJvcCBUZXN0aW5nIFJvb3QgQ2VydGlmaWNhdGUgQXV0aG9yaXR5IDIw
 NDAxFzAVBgNVBAoTDlJlZHdheCBQcm9qZWN0MB4XDTIwMDIxNTIwNTM1MloXDTQw
 MDIxMDIwNTM1MlowajELMAkGA1UEBhMCTkwxFTATBgNVBAgMDFp1aWQtSG9sbGFu
 ZDEPMA0GA1UEBwwGTGVpZGVuMQ0wCwYDVQQKDARTQ0VQMSQwIgYDVQQDDBtSZWR3
 YXggSW50ZXJvcCBUZXN0IFNDRVAgUkEwggIiMA0GCSqGSIb3DQEBAQUAA4ICDwAw
 ggIKAoICAQDpdqS3jsAOjDltk6Q8Z0aSmgbD+f7zMGdhRBUnt2hgrHzN5nI88FBp
 ajFCDZGBhNUx5G8HJu9iHL8RZWiiwEtjs3tqTdIAIDNMxSQxy54mrFe2Iv5pUuwm
 D5uDA7N9TAxJAF2T1CNcqaT+0kXc/s7Ll6wka71KDiO2B+g0qIKq93uX+IT3rJ/5
 U3NGzOes53UlYtVxnrdL3D7+Iqr+dRjWDAb0FHxMjJcIcflRgtmkXxjOyULjhoGS
 fHCNqv7nM3jwk9V3LB97omppDVo2Fo1z1Db0fm67XuSgCCG/yEGNyfX6AK/oFqXa
 1RltfjzeJLZ5YgOIGzkqtqPX+cI1+qd4QSWLaSgjaI//ENo9O5rsdzeyZrekN0tO
 ou21nFkcds2fU/z5NTmhlg8rL6kCbBtk6nv0zwV2At6Sl6vEGxiWGP35r1omRmCJ
 S/+neNSmbDJ98FTQenxSxqfKyR08eB72Jf11zIM1VHFexoRadA273eXufeme+HQa
 GFVRq2Hhu+5zr9Dxc53OK822tXIcxRk3MWC7kVaOIqlpcFVXfXNetNjPk4Z9Ln4O
 3l5Cr3hx7lv7rdaufRj3QKRjBkfLug5hHaiHJi8UTnbJrbIgdRf3vOTSMej4cadx
 rYQ+ttkYWrA6a4UQSump/qpIdmuOMa3QJlY/86gKoHhpQ+0CCmPnyQIDAQABo4HX
 MIHUMAwGA1UdEwEB/wQCMAAwCwYDVR0PBAQDAgWgMB0GA1UdDgQWBBQsFKw9bTuk
 H/gqNi3O8RZlV8D6YzCBlwYDVR0jBIGPMIGMgBTtdd41FDxHI/GxGuQTQ4y7zMIr
 VqFepFwwWjE/MD0GA1UEAxM2UmVkd2F4IEludGVyb3AgVGVzdGluZyBSb290IENl
 cnRpZmljYXRlIEF1dGhvcml0eSAyMDQwMRcwFQYDVQQKEw5SZWR3YXggUHJvamVj
 dIIUbxG32FXSfZoU87bpFStgyoxL4qowDQYJKoZIhvcNAQELBQADggEBAH79n3Gl
 1VDwoPXaxjIxy/HePth5HiDU96nFb/zCR83xur+SqxpX+IXay1T2KFnZje4MAmY5
 ePcDmXnxJWfWykxgMsKCJasCwZHqWa3jDiiRwZFpN4dCs459fAEJzRE0MjQRtZhH
 q46fXkBdA6Gs7c9C/zQMXOWs85c+fT9FX0iVsa9p8rr1WphloZOt36IeR609Qtiw
 Anq7RPi2uTnnozb5G5zKho+3KnEXRqu9dtcxTGOExLIIQViL2eINHVr6I3l/AlK9
 tRxa4/vAiKFfL3IYOXunwSI82jSfkb/n3zuSIYWdzDTrk2au1l4NKUJfMKvmKydP
 U7vQT+Hr76KEn6o=
 -----END CERTIFICATE-----


Fix:
~~~~

version:
certmonger-0.79.7-14.el8.x86_64

[root@master ~]# getcert add-scep-ca -c "Redwax Interop" -u http://interop.redwax.eu/test/simple/scep  -R /etc/pki/tls/certs/rw.crt  -r /etc/ipa/ca.crt 
New CA "Redwax Interop" added.
[root@master ~]# 


[root@master ~]# cat /var/lib/certmonger/cas/20200619113533
id=Redwax Interop
ca_aka=SCEP (certmonger 0.79.7)
ca_is_default=0
ca_type=EXTERNAL
ca_external_helper=/usr/libexec/certmonger/scep-submit -u http://interop.redwax.eu/test/simple/scep -R /etc/pki/tls/certs/rw.crt -r /etc/ipa/ca.crt     
ca_capabilities=AES,POSTPKIOperation,SHA-1,SHA-256,SHA-512,SCEPStandard
ca_encryption_cert=-----BEGIN CERTIFICATE-----
 MIIEkTCCAvmgAwIBAgIBATANBgkqhkiG9w0BAQsFADA4MRYwFAYDVQQKDA1URVNU
 UkVMTS5URVNUMR4wHAYDVQQDDBVDZXJ0aWZpY2F0ZSBBdXRob3JpdHkwHhcNMjAw
 NjE5MTA1NjQ4WhcNNDAwNjE5MTA1NjQ4WjA4MRYwFAYDVQQKDA1URVNUUkVMTS5U
 RVNUMR4wHAYDVQQDDBVDZXJ0aWZpY2F0ZSBBdXRob3JpdHkwggGiMA0GCSqGSIb3
 DQEBAQUAA4IBjwAwggGKAoIBgQC+CIMLJW8OF9VfQfhIvYOGZ/hAa/tERQKoVz3p
 nef2hsnLzTrWU5Ucu4boy4vtQqHrB2J206KWEJsAF88VgaaiMbc5jmWQJovvX3YY
 BnHXeePngShgWDb2BYdseLxiOPib6MW9GtKvV6qrwLIirnKT2g2JviE1qEvFg13A
 2H/i12FhXN5DjldAU+Pstzzvj6r9Ua6Qzq+TrjNMuIGbqqcrUaimM/JmPG3DR922
 bpiiyuQ6l5mQR9Lh2nfNBXXmVS2PFEjarOfYsktLjGdsHcJeS7WYgr3lm0DWrT6d
 XN2zzIS6Bpq6kaiK+e5RVOKi/4DwZrpobAuCQ0WJOAsLJAuMiE0fpNolzjlmmi9E
 3E6Mcl4yewShUDCXkRimQWzT+IIP+IsQlWQZxOqq11JfiM8jQa3V2+0Nrw1CEL8r
 hR1oLnfdeJeandLkVtmiuL+cWLF7zHgaRHI9TwvTVvrO3ENc+kIb6lUc5j4FY2cB
 ccFECtNUWHWt86kxxl0g6xSJPssCAwEAAaOBpTCBojAfBgNVHSMEGDAWgBR2sXZ4
 ukKAtCOZgpLyxnk+U4ZSiTAPBgNVHRMBAf8EBTADAQH/MA4GA1UdDwEB/wQEAwIB
 xjAdBgNVHQ4EFgQUdrF2eLpCgLQjmYKS8sZ5PlOGUokwPwYIKwYBBQUHAQEEMzAx
 MC8GCCsGAQUFBzABhiNodHRwOi8vaXBhLWNhLnRlc3RyZWxtLnRlc3QvY2Evb2Nz
 cDANBgkqhkiG9w0BAQsFAAOCAYEAICdsN9tt6DyHByUSK5aKBLaz0jS9HUcFgtf2
 rLmc61WvPHGAWFGUBqc5mjnW0JUJUvlQL5FHMCxZnpz7qPuEKpf13K2X8OLkJbOC
 NC3EgH7n8VygK1I4HAs9HBFaUl+zAAzzLkhnuT4oyMzeOjGTn+J65uhAwvZO3HiQ
 PRSCT8xozOZR/NTCFQ/AgHdXU8aXiTU9mE/VK0dXAvRo11ijfCoRVGFnk0GL0iH9
 GJf+T8Vjk+CS0SsvU8bkv11XxHP8zbai6+UkFyLZA7OEZBYQVIW63Rni8wLUCNDt
 EpBrxYzzmdR+d563oyMobbM4oQytpCx642aV2NJF6tWpMNozhxEoSRALe7LFMmCe
 1uNathhKsWFVgDUgJnH5r/pLH0i5r9Ro3LgdnUojHEO7GJHOFBHilrEBFZt+s2oZ
 4B0koIgk2UNK3ouUmpzCCXVkuRocsH53W/XsYqUx4hyeBE//LPaQuflZZq+Dm3VL
 l2nx/o79D478FcllAQb5Uh0TyPd/
 -----END CERTIFICATE----
 -----BEGIN CERTIFICATE-----
 MIIEDTCCAvWgAwIBAgIUbxG32FXSfZoU87bpFStgyoxL4qowDQYJKoZIhvcNAQEF
 BQAwWjE/MD0GA1UEAxM2UmVkd2F4IEludGVyb3AgVGVzdGluZyBSb290IENlcnRp
 ZmljYXRlIEF1dGhvcml0eSAyMDQwMRcwFQYDVQQKEw5SZWR3YXggUHJvamVjdDAe
 Fw0yMDAyMTExNjM4NTZaFw00MDAyMDYxNjM4NTZaMFoxPzA9BgNVBAMTNlJlZHdh
 eCBJbnRlcm9wIFRlc3RpbmcgUm9vdCBDZXJ0aWZpY2F0ZSBBdXRob3JpdHkgMjA0
 MDEXMBUGA1UEChMOUmVkd2F4IFByb2plY3QwggEiMA0GCSqGSIb3DQEBAQUAA4IB
 DwAwggEKAoIBAQDnICcjGF9EcH0kRu9TgqiXAV+YdBUOjV4jG9wCbJdZMv6tGYWY
 IPszrK3Cmw49uMbMgAEL/hB2mr/gZIFMQ0rs2GWwkaKolvg0rw9gE8PwR2p6jthu
 L+CzocyHkc27f/UGhekYSnbcgIitFNseaJWEI/d+eF8LPkPXhsSUVkCF/wcEG2xM
 DgS1KckoF7EJ9Tsc7XRVQ3Doq5WL+NCCnuSmeMcVTGhI9XaGreu+DYYmCR3vnDXa
 vx67A45vlYcgJU4pDL/oMwJW+WKiwKjpiZm4kyRZWYHGLlCUb+ckedhM1eCZwwsg
 yJKm0aPJbTDjlqRBshU++4aZMV2AFdLRIVq7AgMBAAGjgcowgccwHQYDVR0OBBYE
 FO113jUUPEcj8bEa5BNDjLvMwitWMIGXBgNVHSMEgY8wgYyAFO113jUUPEcj8bEa
 5BNDjLvMwitWoV6kXDBaMT8wPQYDVQQDEzZSZWR3YXggSW50ZXJvcCBUZXN0aW5n
 IFJvb3QgQ2VydGlmaWNhdGUgQXV0aG9yaXR5IDIwNDAxFzAVBgNVBAoTDlJlZHdh
 eCBQcm9qZWN0ghRvEbfYVdJ9mhTztukVK2DKjEviqjAMBgNVHRMEBTADAQH/MA0G
 CSqGSIb3DQEBBQUAA4IBAQDONOZcaEB3HjLi4wCkeSucGgmDyC2bwPIvZojr9UOx
 45FyB5awhRgUP/pKwZIDJ7y5b1Gd20AKjkac3kiXETTjCvGSm3v9EKtKclykd3Jd
 oKK1WupKhQxoTb6qTakwahxf9nggsjt0u+G9ngnHJiIRdejP8TIAtxZVKAn1Riw7
 OdNWzrNdq9E/4Ysr9m5jEYBlZKHLAkyvltjQfet9fsMCG7Ty9kxYVX7AszTEBkeH
 4Zd5gubTX2phjMbQk+uzHtoAQF4E5mwrhNjuMn6q2COB+M254u/pGQsi3i1LMxBD
 ch5AKvxjPsO3pLFi1oWvkJNArKw3DJLcTnCQl7Wn4ZzR
 -----END CERTIFICATE-----
ca_encryption_issuer_cert=-----BEGIN CERTIFICATE-----
 MIIEkTCCAvmgAwIBAgIBATANBgkqhkiG9w0BAQsFADA4MRYwFAYDVQQKDA1URVNU
 UkVMTS5URVNUMR4wHAYDVQQDDBVDZXJ0aWZpY2F0ZSBBdXRob3JpdHkwHhcNMjAw
 NjE5MTA1NjQ4WhcNNDAwNjE5MTA1NjQ4WjA4MRYwFAYDVQQKDA1URVNUUkVMTS5U
 RVNUMR4wHAYDVQQDDBVDZXJ0aWZpY2F0ZSBBdXRob3JpdHkwggGiMA0GCSqGSIb3
 DQEBAQUAA4IBjwAwggGKAoIBgQC+CIMLJW8OF9VfQfhIvYOGZ/hAa/tERQKoVz3p
 nef2hsnLzTrWU5Ucu4boy4vtQqHrB2J206KWEJsAF88VgaaiMbc5jmWQJovvX3YY
 BnHXeePngShgWDb2BYdseLxiOPib6MW9GtKvV6qrwLIirnKT2g2JviE1qEvFg13A
 2H/i12FhXN5DjldAU+Pstzzvj6r9Ua6Qzq+TrjNMuIGbqqcrUaimM/JmPG3DR922
 bpiiyuQ6l5mQR9Lh2nfNBXXmVS2PFEjarOfYsktLjGdsHcJeS7WYgr3lm0DWrT6d
 XN2zzIS6Bpq6kaiK+e5RVOKi/4DwZrpobAuCQ0WJOAsLJAuMiE0fpNolzjlmmi9E
 3E6Mcl4yewShUDCXkRimQWzT+IIP+IsQlWQZxOqq11JfiM8jQa3V2+0Nrw1CEL8r
 hR1oLnfdeJeandLkVtmiuL+cWLF7zHgaRHI9TwvTVvrO3ENc+kIb6lUc5j4FY2cB
 ccFECtNUWHWt86kxxl0g6xSJPssCAwEAAaOBpTCBojAfBgNVHSMEGDAWgBR2sXZ4
 ukKAtCOZgpLyxnk+U4ZSiTAPBgNVHRMBAf8EBTADAQH/MA4GA1UdDwEB/wQEAwIB
 xjAdBgNVHQ4EFgQUdrF2eLpCgLQjmYKS8sZ5PlOGUokwPwYIKwYBBQUHAQEEMzAx
 MC8GCCsGAQUFBzABhiNodHRwOi8vaXBhLWNhLnRlc3RyZWxtLnRlc3QvY2Evb2Nz
 cDANBgkqhkiG9w0BAQsFAAOCAYEAICdsN9tt6DyHByUSK5aKBLaz0jS9HUcFgtf2
 rLmc61WvPHGAWFGUBqc5mjnW0JUJUvlQL5FHMCxZnpz7qPuEKpf13K2X8OLkJbOC
 NC3EgH7n8VygK1I4HAs9HBFaUl+zAAzzLkhnuT4oyMzeOjGTn+J65uhAwvZO3HiQ
 PRSCT8xozOZR/NTCFQ/AgHdXU8aXiTU9mE/VK0dXAvRo11ijfCoRVGFnk0GL0iH9
 GJf+T8Vjk+CS0SsvU8bkv11XxHP8zbai6+UkFyLZA7OEZBYQVIW63Rni8wLUCNDt
 EpBrxYzzmdR+d563oyMobbM4oQytpCx642aV2NJF6tWpMNozhxEoSRALe7LFMmCe
 1uNathhKsWFVgDUgJnH5r/pLH0i5r9Ro3LgdnUojHEO7GJHOFBHilrEBFZt+s2oZ
 4B0koIgk2UNK3ouUmpzCCXVkuRocsH53W/XsYqUx4hyeBE//LPaQuflZZq+Dm3VL
 l2nx/o79D478FcllAQb5Uh0TyPd/
 -----END CERTIFICATE-----
ca_encryption_cert_pool=-----BEGIN CERTIFICATE-----
 MIIFFzCCA/+gAwIBAgIBBjANBgkqhkiG9w0BAQsFADBaMT8wPQYDVQQDEzZSZWR3
 YXggSW50ZXJvcCBUZXN0aW5nIFJvb3QgQ2VydGlmaWNhdGUgQXV0aG9yaXR5IDIw
 NDAxFzAVBgNVBAoTDlJlZHdheCBQcm9qZWN0MB4XDTIwMDIxNTIwNTM1MloXDTQw
 MDIxMDIwNTM1MlowajELMAkGA1UEBhMCTkwxFTATBgNVBAgMDFp1aWQtSG9sbGFu
 ZDEPMA0GA1UEBwwGTGVpZGVuMQ0wCwYDVQQKDARTQ0VQMSQwIgYDVQQDDBtSZWR3
 YXggSW50ZXJvcCBUZXN0IFNDRVAgUkEwggIiMA0GCSqGSIb3DQEBAQUAA4ICDwAw
 ggIKAoICAQDpdqS3jsAOjDltk6Q8Z0aSmgbD+f7zMGdhRBUnt2hgrHzN5nI88FBp
 ajFCDZGBhNUx5G8HJu9iHL8RZWiiwEtjs3tqTdIAIDNMxSQxy54mrFe2Iv5pUuwm
 D5uDA7N9TAxJAF2T1CNcqaT+0kXc/s7Ll6wka71KDiO2B+g0qIKq93uX+IT3rJ/5
 U3NGzOes53UlYtVxnrdL3D7+Iqr+dRjWDAb0FHxMjJcIcflRgtmkXxjOyULjhoGS
 fHCNqv7nM3jwk9V3LB97omppDVo2Fo1z1Db0fm67XuSgCCG/yEGNyfX6AK/oFqXa
 1RltfjzeJLZ5YgOIGzkqtqPX+cI1+qd4QSWLaSgjaI//ENo9O5rsdzeyZrekN0tO
 ou21nFkcds2fU/z5NTmhlg8rL6kCbBtk6nv0zwV2At6Sl6vEGxiWGP35r1omRmCJ
 S/+neNSmbDJ98FTQenxSxqfKyR08eB72Jf11zIM1VHFexoRadA273eXufeme+HQa
 GFVRq2Hhu+5zr9Dxc53OK822tXIcxRk3MWC7kVaOIqlpcFVXfXNetNjPk4Z9Ln4O
 3l5Cr3hx7lv7rdaufRj3QKRjBkfLug5hHaiHJi8UTnbJrbIgdRf3vOTSMej4cadx
 rYQ+ttkYWrA6a4UQSump/qpIdmuOMa3QJlY/86gKoHhpQ+0CCmPnyQIDAQABo4HX
 MIHUMAwGA1UdEwEB/wQCMAAwCwYDVR0PBAQDAgWgMB0GA1UdDgQWBBQsFKw9bTuk
 H/gqNi3O8RZlV8D6YzCBlwYDVR0jBIGPMIGMgBTtdd41FDxHI/GxGuQTQ4y7zMIr
 VqFepFwwWjE/MD0GA1UEAxM2UmVkd2F4IEludGVyb3AgVGVzdGluZyBSb290IENl
 cnRpZmljYXRlIEF1dGhvcml0eSAyMDQwMRcwFQYDVQQKEw5SZWR3YXggUHJvamVj
 dIIUbxG32FXSfZoU87bpFStgyoxL4qowDQYJKoZIhvcNAQELBQADggEBAH79n3Gl
 1VDwoPXaxjIxy/HePth5HiDU96nFb/zCR83xur+SqxpX+IXay1T2KFnZje4MAmY5
 ePcDmXnxJWfWykxgMsKCJasCwZHqWa3jDiiRwZFpN4dCs459fAEJzRE0MjQRtZhH
 q46fXkBdA6Gs7c9C/zQMXOWs85c+fT9FX0iVsa9p8rr1WphloZOt36IeR609Qtiw
 Anq7RPi2uTnnozb5G5zKho+3KnEXRqu9dtcxTGOExLIIQViL2eINHVr6I3l/AlK9
 tRxa4/vAiKFfL3IYOXunwSI82jSfkb/n3zuSIYWdzDTrk2au1l4NKUJfMKvmKydP
 U7vQT+Hr76KEn6o=
 -----END CERTIFICATE-----
[root@master ~]# 


The fix properly parse the certificate file even if doesn't have new line(\n) char at /var/lib/certmonger/cas/<id> . Hence marking the bug as verified.

Comment 9 errata-xmlrpc 2020-11-04 02:51:52 UTC

Since the problem described in this bug report should be
resolved in a recent advisory, it has been closed with a
resolution of ERRATA.

For information on the advisory (certmonger bug fix and enhancement update), and where to find the updated
files, follow the link below.

If the solution does not work for you, open a new bug report.

https://access.redhat.com/errata/RHBA-2020:4671