Note: This bug is displayed in read-only format because the product is no longer active in Red Hat Bugzilla.

RHEL Engineering is moving the tracking of its product development work on RHEL 6 through RHEL 9 to Red Hat Jira (issues.redhat.com). If you're a Red Hat customer, please continue to file support cases via the Red Hat customer portal. If you're not, please head to the "RHEL project" in Red Hat Jira and file new tickets here. Individual Bugzilla bugs in the statuses "NEW", "ASSIGNED", and "POST" are being migrated throughout September 2023. Bugs of Red Hat partners with an assigned Engineering Partner Manager (EPM) are migrated in late September as per pre-agreed dates. Bugs against components "kernel", "kernel-rt", and "kpatch" are only migrated if still in "NEW" or "ASSIGNED". If you cannot log in to RH Jira, please consult article #7032570. That failing, please send an e-mail to the RH Jira admins at rh-issues@redhat.com to troubleshoot your issue as a user management inquiry. The email creates a ServiceNow ticket with Red Hat. Individual Bugzilla bugs that are migrated will be moved to status "CLOSED", resolution "MIGRATED", and set with "MigratedToJIRA" in "Keywords". The link to the successor Jira issue will be found under "Links", have a little "two-footprint" icon next to it, and direct you to the "RHEL project" in Red Hat Jira (issue links are of type "https://issues.redhat.com/browse/RHEL-XXXX", where "X" is a digit). This same link will be available in a blue banner at the top of the page informing you that that bug has been migrated.

Bug 1386371

Summary:	Remove xenroll.dll from pki-core
Product:	Red Hat Enterprise Linux 7	Reporter:	Nathan Kinder <nkinder>
Component:	pki-core	Assignee:	Jack Magne <jmagne>
Status:	CLOSED ERRATA	QA Contact:	Asha Akkiangady <aakkiang>
Severity:	medium	Docs Contact:
Priority:	high
Version:	7.4	CC:	arubin, enewland, mharmsen, ssidhaye
Target Milestone:	rc
Target Release:	---
Hardware:	Unspecified
OS:	Unspecified
Whiteboard:
Fixed In Version:	pki-core-10.4.0-1.el7	Doc Type:	No Doc Update
Doc Text:	This is a problem that a person would have to launch a detailed search to even find. Most won't care that it's been fixed.	Story Points:	---
Clone Of:		Environment:
Last Closed:	2017-08-01 22:48:25 UTC	Type:	Bug
Regression:	---	Mount Type:	---
Documentation:	---	CRM:
Verified Versions:		Category:	---
oVirt Team:	---	RHEL 7.3 requirements from Atomic Host:
Cloudforms Team:	---	Target Upstream Version:
Embargoed:

Description Nathan Kinder 2016-10-18 19:19:22 UTC

The PKI packages used by IdM include a DLL for browser-based certificate enrollment on Windows clients called xenroll.dll.  This is a deprecated DLL that was removed in Vista and later Windows systems, but we still used it for enrollment (and carried it in our packages).  We have already moved our PKI packages over to be able to use the replacement that is provided in Windows itself (certenroll.dll).  We should remove xenroll.dll from our packages since it is no longer needed.

Comment 1 Matthew Harmsen 2016-10-18 21:12:58 UTC

# for rpm in `rpm -qa | grep pki`; do
> echo $rpm
> rpm -ql $rpm | grep xenroll.dll
> done
redhat-pki-server-theme-10.3.3-1.el7.noarch
pki-tools-10.3.3-10.el7.x86_64
pki-base-10.3.3-10.el7.noarch
pki-server-10.3.3-10.el7.noarch
pki-base-java-10.3.3-10.el7.noarch
pki-ca-10.3.3-10.el7.noarch
/usr/share/pki/ca/webapps/ca/agent/xenroll.dll
tomcatjss-7.1.2-3.el7pki.noarch

# find . -name xenroll.dll
./base/ca/shared/webapps/ca/agent/xenroll.dll

# grep -ri xenroll.dll
Binary file .git/index matches
base/ca/shared/webapps/ca/admin/ca/EnrollSuccess.template:	CODEBASE="/xenroll.dll"
base/ca/shared/webapps/ca/admin/ca/ImportAdminCert.template:    codebase="xenroll.dll"
base/ca/shared/webapps/ca/admin/ca/ImportCert.template:	CODEBASE="/xenroll.dll"
base/ca/shared/webapps/ca/admin/ca/ImportCert.template:    document.writeln("<OBJECT classid='clsid:127698e4-e730-4e5c-a2b1-21490a70c8a1' CODEBASE='/xenroll.dll' id='Enroll'></OBJECT>");
base/ca/shared/webapps/ca/admin/ca/adminEnroll.html:	CODEBASE="/xenroll.dll"
base/ca/shared/webapps/ca/agent/ca/EnrollSuccess.template:	CODEBASE="/xenroll.dll"
base/ca/shared/webapps/ca/agent/ca/ImportCert.template:	CODEBASE="/xenroll.dll"
base/ca/shared/webapps/ca/agent/ca/ImportCert.template:    document.writeln("<OBJECT classid='clsid:127698e4-e730-4e5c-a2b1-21490a70c8a1' CODEBASE='/xenroll.dll' id='Enroll'></OBJECT>");
base/ca/shared/webapps/ca/agent/ca/displayBySerial.template:	CODEBASE="/xenroll.dll"
Binary file base/ca/shared/webapps/ca/agent/xenroll.dll matches
base/ca/shared/webapps/ca/ee/ca/AIMEnroll.html:	CODEBASE="/ee/xenroll.dll"
base/ca/shared/webapps/ca/ee/ca/CertBasedDualEnroll.html:	CODEBASE="/ee/xenroll.dll"
base/ca/shared/webapps/ca/ee/ca/CertBasedEncryptionEnroll.html:	CODEBASE="/ee/xenroll.dll"
base/ca/shared/webapps/ca/ee/ca/CertBasedSingleEnroll.html:	CODEBASE="/ee/xenroll.dll"
base/ca/shared/webapps/ca/ee/ca/DirPinUserEnroll.html:	CODEBASE="/xenroll.dll"
base/ca/shared/webapps/ca/ee/ca/DirUserEnroll.html:	CODEBASE="/xenroll.dll"
base/ca/shared/webapps/ca/ee/ca/EnrollSuccess.template:	CODEBASE="/xenroll.dll"
base/ca/shared/webapps/ca/ee/ca/ImportAdminCert.template:    codebase="xenroll.dll"
base/ca/shared/webapps/ca/ee/ca/ImportCert.template:	CODEBASE="/xenroll.dll"
base/ca/shared/webapps/ca/ee/ca/ImportCert.template:    document.writeln("<OBJECT classid='clsid:127698e4-e730-4e5c-a2b1-21490a70c8a1' CODEBASE='/xenroll.dll' id='Enroll'></OBJECT>");
base/ca/shared/webapps/ca/ee/ca/ManObjSignEnroll.html:	CODEBASE="/xenroll.dll"
base/ca/shared/webapps/ca/ee/ca/ManUserEnroll.html:	CODEBASE="/xenroll.dll"
base/ca/shared/webapps/ca/ee/ca/PortalEnrollment.html:	CODEBASE="/xenroll.dll"
base/ca/shared/webapps/ca/ee/ca/ProfileSelect.template:      document.writeln("<OBJECT classid='clsid:127698e4-e730-4e5c-a2b1-21490a70c8a1' CODEBASE='/xenroll.dll' id='Enroll'></OBJECT>");
base/ca/shared/webapps/ca/ee/ca/RenewalSuccess.template:	CODEBASE="/xenroll.dll"
base/ca/shared/webapps/ca/ee/ca/displayBySerial.template:	CODEBASE="/xenroll.dll"
base/server/share/webapps/pki/admin/console/config/wizard.vm:    codebase="xenroll.dll"

Comment 2 Matthew Harmsen 2016-10-18 21:16:08 UTC

Upstream ticket:
https://fedorahosted.org/pki/ticket/2524

Comment 3 Matthew Harmsen 2016-11-29 23:44:14 UTC

Per PKI Bug Council of 11/29/2016: 10.3 - critical

Comment 4 Matthew Harmsen 2016-11-30 00:25:47 UTC

arubin provided ZStream request flag; justification is provided in the Bug Description.

Comment 5 Matthew Harmsen 2016-12-10 00:38:17 UTC

Committed to master branch:

commit 6cf7cec3c559786b90dcca298a2d7c6c570eac35
Author: Matthew Harmsen <mharmsen>
Date:   Fri Dec 9 15:29:50 2016 -0700

    Removed all references to 'xenroll.dll'
    
    - PKI TRAC Ticket #2524 - Remove xenroll.dll from pki-core

Comment 8 Sumedh Sidhaye 2017-05-03 11:40:15 UTC

Build used:

[root@pki1 ~]# rpm -qi pki-core
package pki-core is not installed
[root@pki1 ~]# rpm -qi pki-base
Name        : pki-base
Version     : 10.4.1
Release     : 2.el7
Architecture: noarch
Install Date: Tuesday 02 May 2017 10:07:35 AM EDT
Group       : System Environment/Base
Size        : 2082927
License     : GPLv2
Signature   : RSA/SHA256, Tuesday 18 April 2017 08:37:55 PM EDT, Key ID 199e2f91fd431d51
Source RPM  : pki-core-10.4.1-2.el7.src.rpm
Build Date  : Tuesday 18 April 2017 08:09:41 PM EDT
Build Host  : ppc-041.build.eng.bos.redhat.com
Relocations : (not relocatable)
Packager    : Red Hat, Inc. <http://bugzilla.redhat.com/bugzilla>
Vendor      : Red Hat, Inc.
URL         : http://pki.fedoraproject.org/


[root@pki1 ~]# for rpm in `rpm -qa | grep pki`; do
> echo $rpm
> rpm -ql $rpm | grep xenroll.dll
> done
pki-kra-10.4.1-2.el7.noarch
pki-tps-10.4.1-2.el7pki.x86_64
pki-base-10.4.1-2.el7.noarch
redhat-pki-server-theme-10.4.1-1.el7pki.noarch
pki-tools-10.4.1-2.el7.x86_64
pki-server-10.4.1-2.el7.noarch
pki-javadoc-10.4.1-2.el7.noarch
redhat-pki-console-theme-10.4.1-1.el7pki.noarch
pki-tks-10.4.1-2.el7pki.noarch
pki-ocsp-10.4.1-2.el7pki.noarch
pki-ca-10.4.1-2.el7.noarch
pki-core-debuginfo-10.4.1-2.el7.x86_64
redhat-pki-10.4.1-1.el7pki.noarch
pki-console-10.4.1-2.el7pki.noarch
pki-base-java-10.4.1-2.el7.noarch
pki-symkey-10.4.1-2.el7.x86_64

[root@pki1 ~]# find / -name xenroll.dll
[root@pki1 ~]# 


[root@pki1 ~]# grep -ri xenroll.dll
[root@pki1 ~]#

Comment 9 errata-xmlrpc 2017-08-01 22:48:25 UTC

Since the problem described in this bug report should be
resolved in a recent advisory, it has been closed with a
resolution of ERRATA.

For information on the advisory, and where to find the updated
files, follow the link below.

If the solution does not work for you, open a new bug report.

https://access.redhat.com/errata/RHBA-2017:2110