Bug 623113 - Invalid serial number recorded in CRL
Invalid serial number recorded in CRL
Status: CLOSED NOTABUG
Product: Candlepin
Classification: Community
Component: candlepin (Show other bugs)
0.5
All Solaris
high Severity medium
: ---
: ---
Assigned To: Bryan Kearney
wes hayutin
: QA-Closed
Depends On:
Blocks:
  Show dependency treegraph
 
Reported: 2010-08-11 07:24 EDT by spandey
Modified: 2015-05-14 11:22 EDT (History)
2 users (show)

See Also:
Fixed In Version:
Doc Type: Bug Fix
Doc Text:
Story Points: ---
Clone Of:
Environment:
Last Closed: 2010-09-10 13:31:48 EDT
Type: ---
Regression: ---
Mount Type: ---
Documentation: ---
CRM:
Verified Versions:
Category: ---
oVirt Team: ---
RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: ---


Attachments (Terms of Use)
Attached CRL (938 bytes, application/pkix-crl)
2010-08-11 07:24 EDT, spandey
no flags Details

  None (edit)
Description spandey 2010-08-11 07:24:11 EDT
Created attachment 438162 [details]
Attached CRL

Description of problem:


Version-Release number of selected component (if applicable):


How reproducible:
100%

Prerequisites:
Candlepin1 : on-premises 
Client : RHEL6 with sm version 74 

Steps to repro : 
Login to client console 
subscribe and unsubscribe multiple entitlement 
Verify the unsubscribe serial nuber in CRL 

Expected Result : 
CRL should contain unsubscribed valid serial number 

Actual Result : 
Invalid entry recored in CRL 
ie : Serial Number: 0E

        Revocation Date: Aug 10 16:34:00 2010 GMT

        CRL entry extensions:

            X509v3 CRL Reason Code: 

                Privilege Withdrawn

    Serial Number: 0D

        Revocation Date: Aug 10 16:33:00 2010 GMT

        CRL entry extensions:

            X509v3 CRL Reason Code: 

                Privilege Withdrawn

    Serial Number: 0A

        Revocation Date: Aug 10 16:30:00 2010 GMT

        CRL entry extensions:

            X509v3 CRL Reason Code: 

                Privilege Withdrawn
Comment 1 spandey 2010-08-12 14:18:49 EDT
same issue find with candlepin1

executed command :

subscription-manager-cli unsubscribe --serial=1914

revoked serial number in CRL

Revoked Certificates:
    Serial Number: 077A
        Revocation Date: Aug 12 18:12:00 2010 GMT
        CRL entry extensions:
            X509v3 CRL Reason Code: 
                9
Comment 2 Bryan Kearney 2010-09-10 13:31:48 EDT
I believe 077A is the hexidecimal verison of 1914.

Note You need to log in before you can comment on or make changes to this bug.