Description of problem: The "Search Certificates" form of the CA's Agent Services website appears to ignore some of the search parameters. How reproducible: Always Steps to Reproduce: 1. Go to Agent Services and click on "Search for Certificates" 2. In the "Issuing Information" section, check the box for "Show certificates issued by" and type in an agent's username 3. Scroll down and click find Actual results: the first 10 certificates issued by the CA are shown, regardless of issuer Expected results: *only* certificates issued by the agent typed in above Additional info: Snipped from CA's debug log, for some reason the correct search filter is dropped and substituted with a wildcard which produces the "actual results" output: [07/Apr/2008:14:47:32][http-9443-Processor24]: useClientFilter=false [07/Apr/2008:14:47:32][http-9443-Processor24]: client queryCertFilter = (&(certIssuedBy=dstutzman)) [07/Apr/2008:14:47:32][http-9443-Processor24]: queryCertFilter = (&(certIssuedBy=*)) [07/Apr/2008:14:47:32][http-9443-Processor24]: Resetting timelimit from -1 to 30 [07/Apr/2008:14:47:32][http-9443-Processor24]: Start searching ... filter=(&(certIssuedBy=*)) maxreturns=10 timelimit=30 [07/Apr/2008:14:47:32][http-9443-Processor24]: getConn: mNumConns now 1 [07/Apr/2008:14:47:32][http-9443-Processor24]: searchCertificateswith time limit filter (&(certIssuedBy=*))
Attachment (id=320458) https://bugzilla.redhat.com/attachment.cgi?id=320458
with current builds, I'm unable to verify this bug. All certs are always approved by admin. file a separate bug for that ... https://bugzilla.redhat.com/show_bug.cgi?id=504697 And sure enough for this bug, Search Certificates page do not show any when searching for certificates issued by 'ckannan'.
works for me