Bug 1061772 – [WebUI] Maximum serial number search accepts negative inputs and lists wrong search results.

Bugzilla will be upgraded to version 5.0. The upgrade date is tentatively scheduled for 2 December 2018, pending final testing and feedback.

Bug 1061772 - [WebUI] Maximum serial number search accepts negative inputs and lists wrong search results.

Summary:	[WebUI] Maximum serial number search accepts negative inputs and lists wrong ...

Status:	CLOSED ERRATA

Aliases:	None

Product:	Red Hat Enterprise Linux 7
Classification:	Red Hat
Component:	ipa (Show other bugs)
Sub Component:
Version:	7.0
Hardware:	x86_64 Linux

Priority	medium Severity unspecified
Target Milestone:	rc
Target Release:	---
Assigned To:	Martin Kosek
QA Contact:	Namita Soman
Docs Contact:

URL:
Whiteboard:
Keywords:

Depends On:
Blocks:
	Show dependency tree / graph

Reported:	2014-02-05 10:33 EST by Xiyang Dong
Modified:	2015-03-05 05:10 EST (History)
CC List:	3 users (show)

See Also:
Fixed In Version:	ipa-4.0.3-1.el7
Doc Type:	Bug Fix
Doc Text:
Story Points:	---
Clone Of:
Environment:
Last Closed:	2015-03-05 05:10:28 EST
Type:	Bug
Regression:	---
Mount Type:	---
Documentation:	---
CRM:
Verified Versions:
Category:	---
oVirt Team:	---
RHEL 7.3 requirements from Atomic Host:
Cloudforms Team:	---

Attachments	(Terms of Use)
min serial number search -1 (414.67 KB, image/png) 2014-02-05 10:34 EST, Xiyang Dong	no flags	Details
max serial number search -1 (473.82 KB, image/png) 2014-02-05 10:35 EST, Xiyang Dong	no flags	Details
max serial number search -10 (481.82 KB, image/png) 2014-02-05 10:35 EST, Xiyang Dong	no flags	Details
IPA Error 3009: ValidationError (63.59 KB, image/png) 2015-01-27 09:23 EST, Varun Mylaraiah	no flags	Details
Add an attachment (proposed patch, testcase, etc.)

External Trackers
Tracker	ID	Priority	Status	Summary	Last Updated
Red Hat Product Errata	RHSA-2015:0442	normal	SHIPPED_LIVE	Moderate: ipa security, bug fix, and enhancement update	2015-03-05 09:50:39 EST

Groups: None (edit)

Description Xiyang Dong 2014-02-05 10:33:16 EST

Description of problem:
Maximum serial number search accepts negative inputs and lists wrong search results.
when search max serial number between -1 and -9 :  it lists out cert #1-9
when search max serial number <= -10 : it lists out all certs #1-10
 
While Minimum serial number search would throw error:
invalid 'min_serial_number': must be at least 0 for negative inputs

See attachment for details. 

Version-Release number of selected component (if applicable):
ipa-server-3.3.3-10.el7.x86_64

How reproducible:
Always

Steps to Reproduce:
1.Go to WebUI cert page 
2.Search for maximum serial number with a negative integer
3.Check search result

Actual results:
Instead of throwing out an error like min serial number does, it lists out wrong search result.

Expected results:
throw out an error like min serial number does:
invalid 'max_serial_number': must be at least 0

Additional info:

Comment 1 Xiyang Dong 2014-02-05 10:34:07 EST

Created attachment 859703 [details]
min serial number search -1

Comment 2 Xiyang Dong 2014-02-05 10:35:11 EST

Created attachment 859704 [details]
max serial number search -1

Comment 3 Xiyang Dong 2014-02-05 10:35:41 EST

Created attachment 859705 [details]
max serial number search -10

Comment 4 Martin Kosek 2014-02-05 11:20:26 EST

This applies both for UI and CLI:

]# ipa cert-find --max-serial-number=-1
----------------------
9 certificates matched
----------------------
  Serial number (hex): 0x1
  Serial number: 1
  Status: VALID
  Subject: CN=Certificate Authority,O=EXAMPLE.COM
...

Comment 5 Martin Kosek 2014-02-05 11:21:02 EST

Upstream ticket:
https://fedorahosted.org/freeipa/ticket/4163

Comment 7 Martin Kosek 2014-02-25 11:34:08 EST

Fixed upstream:

be7b1b94e300b137c34bab80df3dc91195259c89 Certificate search max_serial_number problem fixed

Comment 10 Varun Mylaraiah 2015-01-27 09:23:26 EST

Created attachment 984685 [details]
IPA Error 3009: ValidationError

Verified.

IPA version:
------------
ipa-server-4.1.0-15.el7.x86_64

Comment 12 errata-xmlrpc 2015-03-05 05:10:28 EST

Since the problem described in this bug report should be
resolved in a recent advisory, it has been closed with a
resolution of ERRATA.

For information on the advisory, and where to find the updated
files, follow the link below.

If the solution does not work for you, open a new bug report.

https://rhn.redhat.com/errata/RHSA-2015-0442.html

Note You need to log in before you can comment on or make changes to this bug.