Bug 2150025

Summary: [RFE] Certificate format validation when adding the SCEP server's CA
Product: Red Hat Enterprise Linux 8 Reporter: Rob Crittenden <rcritten>
Component: certmongerAssignee: Rob Crittenden <rcritten>
Status: CLOSED ERRATA QA Contact: ipa-qe <ipa-qe>
Severity: medium Docs Contact: David Voženílek <dvozenil>
Priority: medium    
Version: 8.8CC: aheverle, ipa-qe, ksiddiqu, lmcgarry, mpolovka, myusuf, pcech, rcritten, sumenon, tscherf
Target Milestone: rcKeywords: FutureFeature, Triaged
Target Release: ---Flags: pm-rhel: mirror+
Hardware: Unspecified   
OS: Unspecified   
Whiteboard:
Fixed In Version: certmonger-0.79.17-2.el8 Doc Type: Enhancement
Doc Text:
.`getcert add-scep-ca` now checks if user-provided SCEP CA certificates are in a valid PEM format To add a SCEP CA to `certmonger` using the `getcert add-scep-ca` command, the provided certificate must be in a valid PEM format. Previously, the command did not check the user-provided certificate and did not return an error in case of an incorrect format. With this update, `getcert add-scep-ca` now checks the user-provided certificate and returns an error if the certificate is not in the valid PEM format.
Story Points: ---
Clone Of: 1492112 Environment:
Last Closed: 2023-05-16 08:36:53 UTC Type: Bug
Regression: --- Mount Type: ---
Documentation: --- CRM:
Verified Versions: Category: ---
oVirt Team: --- RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: --- Target Upstream Version:
Embargoed:
Bug Depends On: 1492112    
Bug Blocks:    

Comment 19 errata-xmlrpc 2023-05-16 08:36:53 UTC
Since the problem described in this bug report should be
resolved in a recent advisory, it has been closed with a
resolution of ERRATA.

For information on the advisory (certmonger bug fix and enhancement update), and where to find the updated
files, follow the link below.

If the solution does not work for you, open a new bug report.

https://access.redhat.com/errata/RHBA-2023:2832