Null pointer Exception when downloading root/intermediate certs.

[Matt032]

Hi,

The root/intermediate certificates we use don't have a CN (not required afaik) in the subject. There is a minor bug in CACertServlet.java in that it expects a CN to exist e.g.

String strippedCACN = CertTools.getPartFromDN(cacert.getSubjectX500Principal().getName(), "CN").replaceAll("\\W", "");

maybe the the cert serial number could be used if the CN doesn't exist?

Regards
Matt


     

-------------------------------------------------------------------------
This SF.net email is sponsored by: Microsoft
Defy all challenges. Microsoft(R) Visual Studio 2008.
http://clk.atdmt.com/MRT/go/vse0120000070mrt/direct/01/
_______________________________________________
Ejbca-develop mailing list
Ejbca-develop@...
https://lists.sourceforge.net/lists/listinfo/ejbca-develop

[Tomas Gustavsson]

Thanks for the report Matt. We'll fix it for the next release.

https://jira.primekey.se/browse/ECA-815

Cheers,
Tomas

Matt Stevenson wrote:

> Hi,
>
> The root/intermediate certificates we use don't have a CN (not required afaik) in the subject. There is a minor bug in CACertServlet.java in that it expects a CN to exist e.g.
>
> String strippedCACN = CertTools.getPartFromDN(cacert.getSubjectX500Principal().getName(), "CN").replaceAll("\\W", "");
>
> maybe the the cert serial number could be used if the CN doesn't exist?
>
> Regards
> Matt
>
>
>      
>
> -------------------------------------------------------------------------
> This SF.net email is sponsored by: Microsoft
> Defy all challenges. Microsoft(R) Visual Studio 2008.
> http://clk.atdmt.com/MRT/go/vse0120000070mrt/direct/01/
> _______________________________________________
> Ejbca-develop mailing list
> Ejbca-develop@...
> https://lists.sourceforge.net/lists/listinfo/ejbca-develop

-------------------------------------------------------------------------
This SF.net email is sponsored by: Microsoft
Defy all challenges. Microsoft(R) Visual Studio 2008.
http://clk.atdmt.com/MRT/go/vse0120000070mrt/direct/01/
_______________________________________________
Ejbca-develop mailing list
Ejbca-develop@...
https://lists.sourceforge.net/lists/listinfo/ejbca-develop

[Johan Eklund]

Thanks for the report Matt. This has been fixed to EJBCA 3.6.2.
https://jira.primekey.se/browse/ECA-815

Cheers,
Tomas
-----
PrimeKey Solutions offers a commercial EJBCA support subscription and
training for EJBCA. Please see www.primekey.se or contact
info@... for more information.
http://download.primekey.se/documents/ejbca_subscription.pdf
http://download.primekey.se/documents/ejbca_training.pdf

Matt Stevenson wrote:

> Hi,
>
> The root/intermediate certificates we use don't have a CN (not required afaik) in the subject. There is a minor bug in CACertServlet.java in that it expects a CN to exist e.g.
>
> String strippedCACN = CertTools.getPartFromDN(cacert.getSubjectX500Principal().getName(), "CN").replaceAll("\\W", "");
>
> maybe the the cert serial number could be used if the CN doesn't exist?
>
> Regards
> Matt
>
>
>      
>
> -------------------------------------------------------------------------
> This SF.net email is sponsored by: Microsoft
> Defy all challenges. Microsoft(R) Visual Studio 2008.
> http://clk.atdmt.com/MRT/go/vse0120000070mrt/direct/01/
> _______________________________________________
> Ejbca-develop mailing list
> Ejbca-develop@...
> https://lists.sourceforge.net/lists/listinfo/ejbca-develop

-------------------------------------------------------------------------
Check out the new SourceForge.net Marketplace.
It's the best place to buy or sell services for
just about anything Open Source.
http://sourceforge.net/services/buy/index.php
_______________________________________________
Ejbca-develop mailing list
Ejbca-develop@...
https://lists.sourceforge.net/lists/listinfo/ejbca-develop