summaryrefslogtreecommitdiffstats
path: root/base/server/cms/src/com
diff options
context:
space:
mode:
authorEndi S. Dewata <edewata@redhat.com>2016-05-19 16:54:17 +0200
committerEndi S. Dewata <edewata@redhat.com>2016-05-24 19:28:57 +0200
commit56d87a8f5036f63fc0a5fbbd3b1f5ea7076e386a (patch)
tree70a95529bdde6a707f00abf537e7e5734132c92e /base/server/cms/src/com
parentf0551f75618cd30de3efc3154f37a5f53504896c (diff)
downloadpki-56d87a8f5036f63fc0a5fbbd3b1f5ea7076e386a.tar.gz
pki-56d87a8f5036f63fc0a5fbbd3b1f5ea7076e386a.tar.xz
pki-56d87a8f5036f63fc0a5fbbd3b1f5ea7076e386a.zip
Fixed cert enrollment problem with empty rangeUnit in profile.
Previously cert enrollment might fail after editing the profile using the console. This is because the console added an empty rangeUnit parameter, but the server rejected the empty value. The convertRangeUnit() methods in several classes have been modified to accept the empty value and convert it into the default value (i.e. day). https://fedorahosted.org/pki/ticket/2308
Diffstat (limited to 'base/server/cms/src/com')
-rw-r--r--base/server/cms/src/com/netscape/cms/profile/constraint/ValidityConstraint.java8
-rw-r--r--base/server/cms/src/com/netscape/cms/profile/def/CAValidityDefault.java2
-rw-r--r--base/server/cms/src/com/netscape/cms/profile/def/ValidityDefault.java8
3 files changed, 9 insertions, 9 deletions
diff --git a/base/server/cms/src/com/netscape/cms/profile/constraint/ValidityConstraint.java b/base/server/cms/src/com/netscape/cms/profile/constraint/ValidityConstraint.java
index eaf0b3bbf..dcb11daf1 100644
--- a/base/server/cms/src/com/netscape/cms/profile/constraint/ValidityConstraint.java
+++ b/base/server/cms/src/com/netscape/cms/profile/constraint/ValidityConstraint.java
@@ -22,9 +22,6 @@ import java.util.Calendar;
import java.util.Date;
import java.util.Locale;
-import netscape.security.x509.CertificateValidity;
-import netscape.security.x509.X509CertInfo;
-
import com.netscape.certsrv.apps.CMS;
import com.netscape.certsrv.base.IConfigStore;
import com.netscape.certsrv.profile.EProfileException;
@@ -41,6 +38,9 @@ import com.netscape.cms.profile.def.RandomizedValidityDefault;
import com.netscape.cms.profile.def.UserValidityDefault;
import com.netscape.cms.profile.def.ValidityDefault;
+import netscape.security.x509.CertificateValidity;
+import netscape.security.x509.X509CertInfo;
+
/**
* This class implements the validity constraint.
* It checks if the validity in the certificate
@@ -113,7 +113,7 @@ public class ValidityConstraint extends EnrollConstraint {
} else if (unit.equals("month")) {
return Calendar.MONTH;
- } else if (unit.equals("day")) {
+ } else if (unit.equals("day") || unit.equals("")) {
return Calendar.DAY_OF_YEAR;
} else if (unit.equals("hour")) {
diff --git a/base/server/cms/src/com/netscape/cms/profile/def/CAValidityDefault.java b/base/server/cms/src/com/netscape/cms/profile/def/CAValidityDefault.java
index a98b2c28c..2df256eb1 100644
--- a/base/server/cms/src/com/netscape/cms/profile/def/CAValidityDefault.java
+++ b/base/server/cms/src/com/netscape/cms/profile/def/CAValidityDefault.java
@@ -316,7 +316,7 @@ public class CAValidityDefault extends EnrollDefault {
} else if (unit.equals("month")) {
return Calendar.MONTH;
- } else if (unit.equals("day")) {
+ } else if (unit.equals("day") || unit.equals("")) {
return Calendar.DAY_OF_YEAR;
} else if (unit.equals("hour")) {
diff --git a/base/server/cms/src/com/netscape/cms/profile/def/ValidityDefault.java b/base/server/cms/src/com/netscape/cms/profile/def/ValidityDefault.java
index 02807346f..ad4281b80 100644
--- a/base/server/cms/src/com/netscape/cms/profile/def/ValidityDefault.java
+++ b/base/server/cms/src/com/netscape/cms/profile/def/ValidityDefault.java
@@ -24,9 +24,6 @@ import java.util.Calendar;
import java.util.Date;
import java.util.Locale;
-import netscape.security.x509.CertificateValidity;
-import netscape.security.x509.X509CertInfo;
-
import com.netscape.certsrv.apps.CMS;
import com.netscape.certsrv.base.IConfigStore;
import com.netscape.certsrv.profile.EProfileException;
@@ -36,6 +33,9 @@ import com.netscape.certsrv.property.EPropertyException;
import com.netscape.certsrv.property.IDescriptor;
import com.netscape.certsrv.request.IRequest;
+import netscape.security.x509.CertificateValidity;
+import netscape.security.x509.X509CertInfo;
+
/**
* This class implements an enrollment default policy
* that populates a server-side configurable validity
@@ -231,7 +231,7 @@ public class ValidityDefault extends EnrollDefault {
} else if (unit.equals("month")) {
return Calendar.MONTH;
- } else if (unit.equals("day")) {
+ } else if (unit.equals("day") || unit.equals("")) {
return Calendar.DAY_OF_YEAR;
} else if (unit.equals("hour")) {