Bugzilla will be upgraded to version 5.0. The upgrade date is tentatively scheduled for 2 December 2018, pending final testing and feedback.
Bug 1436334 - WebUI: Adding certificate mapping data using certificate fails
WebUI: Adding certificate mapping data using certificate fails
Status: CLOSED ERRATA
Product: Red Hat Enterprise Linux 7
Classification: Red Hat
Component: ipa (Show other bugs)
7.4
Unspecified Unspecified
medium Severity unspecified
: rc
: ---
Assigned To: IPA Maintainers
Scott Poore
:
Depends On:
Blocks:
  Show dependency treegraph
 
Reported: 2017-03-27 12:53 EDT by Petr Vobornik
Modified: 2017-08-01 05:46 EDT (History)
6 users (show)

See Also:
Fixed In Version: ipa-4.5.0-3.el7
Doc Type: If docs needed, set a value
Doc Text:
Story Points: ---
Clone Of:
Environment:
Last Closed: 2017-08-01 05:46:16 EDT
Type: ---
Regression: ---
Mount Type: ---
Documentation: ---
CRM:
Verified Versions:
Category: ---
oVirt Team: ---
RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: ---


Attachments (Terms of Use)


External Trackers
Tracker ID Priority Status Summary Last Updated
Red Hat Product Errata RHBA-2017:2304 normal SHIPPED_LIVE ipa bug fix and enhancement update 2017-08-01 08:41:35 EDT

  None (edit)
Description Petr Vobornik 2017-03-27 12:53:09 EDT
Cloned from upstream: https://pagure.io/freeipa/issue/6772

When pasting certificate in PEM the action fails unless user omits ```-----BEGIN CERTIFICATE-----``` and ```-----END CERTIFICATE-----```. Other fields in WebUI accepts certificates with encapsulation boundaries without problems.
Comment 2 Petr Vobornik 2017-03-27 12:53:25 EDT
Upstream ticket:
https://pagure.io/freeipa/issue/6772
Comment 3 Petr Vobornik 2017-03-27 12:54:55 EDT
ipa-4-5:
    eda23a9847197513555f6237b46c658365dfc12d WebUI: Allow to add certs to certmapping with CERT LINES around
    

master:
    84b38b6793cbc45d36c39abf79893e22e90baac6 WebUI: Allow to add certs to certmapping with CERT LINES around


This fix makes the user experience more consistent with other cert related operations.
Comment 5 Scott Poore 2017-05-01 22:07:40 EDT
Verified.

Version ::

ipa-server-4.5.0-8.el7.x86_64

Results ::

Select demosc3 user
Select "Certificate mapping data" add
Select Certificate add
Paste:

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Clicked Add at bottom of window

In user listing it now shows for certificate mapping data:

X509:<I>O=TESTRELM.TEST,CN=Certificate Authority<S>O=TESTRELM.TEST,CN=demosc1
Comment 6 errata-xmlrpc 2017-08-01 05:46:16 EDT
Since the problem described in this bug report should be
resolved in a recent advisory, it has been closed with a
resolution of ERRATA.

For information on the advisory, and where to find the updated
files, follow the link below.

If the solution does not work for you, open a new bug report.

https://access.redhat.com/errata/RHBA-2017:2304

Note You need to log in before you can comment on or make changes to this bug.