diff options
| author | Endi S. Dewata <edewata@redhat.com> | 2016-05-19 16:54:17 +0200 |
|---|---|---|
| committer | Endi S. Dewata <edewata@redhat.com> | 2016-05-24 19:28:57 +0200 |
| commit | 56d87a8f5036f63fc0a5fbbd3b1f5ea7076e386a (patch) | |
| tree | 70a95529bdde6a707f00abf537e7e5734132c92e /base/server/cms/src/com | |
| parent | f0551f75618cd30de3efc3154f37a5f53504896c (diff) | |
| download | pki-56d87a8f5036f63fc0a5fbbd3b1f5ea7076e386a.tar.gz pki-56d87a8f5036f63fc0a5fbbd3b1f5ea7076e386a.tar.xz pki-56d87a8f5036f63fc0a5fbbd3b1f5ea7076e386a.zip | |
Fixed cert enrollment problem with empty rangeUnit in profile.
Previously cert enrollment might fail after editing the profile
using the console. This is because the console added an empty
rangeUnit parameter, but the server rejected the empty value.
The convertRangeUnit() methods in several classes have been
modified to accept the empty value and convert it into the
default value (i.e. day).
https://fedorahosted.org/pki/ticket/2308
Diffstat (limited to 'base/server/cms/src/com')
3 files changed, 9 insertions, 9 deletions
diff --git a/base/server/cms/src/com/netscape/cms/profile/constraint/ValidityConstraint.java b/base/server/cms/src/com/netscape/cms/profile/constraint/ValidityConstraint.java index eaf0b3bbf..dcb11daf1 100644 --- a/base/server/cms/src/com/netscape/cms/profile/constraint/ValidityConstraint.java +++ b/base/server/cms/src/com/netscape/cms/profile/constraint/ValidityConstraint.java @@ -22,9 +22,6 @@ import java.util.Calendar; import java.util.Date; import java.util.Locale; -import netscape.security.x509.CertificateValidity; -import netscape.security.x509.X509CertInfo; - import com.netscape.certsrv.apps.CMS; import com.netscape.certsrv.base.IConfigStore; import com.netscape.certsrv.profile.EProfileException; @@ -41,6 +38,9 @@ import com.netscape.cms.profile.def.RandomizedValidityDefault; import com.netscape.cms.profile.def.UserValidityDefault; import com.netscape.cms.profile.def.ValidityDefault; +import netscape.security.x509.CertificateValidity; +import netscape.security.x509.X509CertInfo; + /** * This class implements the validity constraint. * It checks if the validity in the certificate @@ -113,7 +113,7 @@ public class ValidityConstraint extends EnrollConstraint { } else if (unit.equals("month")) { return Calendar.MONTH; - } else if (unit.equals("day")) { + } else if (unit.equals("day") || unit.equals("")) { return Calendar.DAY_OF_YEAR; } else if (unit.equals("hour")) { diff --git a/base/server/cms/src/com/netscape/cms/profile/def/CAValidityDefault.java b/base/server/cms/src/com/netscape/cms/profile/def/CAValidityDefault.java index a98b2c28c..2df256eb1 100644 --- a/base/server/cms/src/com/netscape/cms/profile/def/CAValidityDefault.java +++ b/base/server/cms/src/com/netscape/cms/profile/def/CAValidityDefault.java @@ -316,7 +316,7 @@ public class CAValidityDefault extends EnrollDefault { } else if (unit.equals("month")) { return Calendar.MONTH; - } else if (unit.equals("day")) { + } else if (unit.equals("day") || unit.equals("")) { return Calendar.DAY_OF_YEAR; } else if (unit.equals("hour")) { diff --git a/base/server/cms/src/com/netscape/cms/profile/def/ValidityDefault.java b/base/server/cms/src/com/netscape/cms/profile/def/ValidityDefault.java index 02807346f..ad4281b80 100644 --- a/base/server/cms/src/com/netscape/cms/profile/def/ValidityDefault.java +++ b/base/server/cms/src/com/netscape/cms/profile/def/ValidityDefault.java @@ -24,9 +24,6 @@ import java.util.Calendar; import java.util.Date; import java.util.Locale; -import netscape.security.x509.CertificateValidity; -import netscape.security.x509.X509CertInfo; - import com.netscape.certsrv.apps.CMS; import com.netscape.certsrv.base.IConfigStore; import com.netscape.certsrv.profile.EProfileException; @@ -36,6 +33,9 @@ import com.netscape.certsrv.property.EPropertyException; import com.netscape.certsrv.property.IDescriptor; import com.netscape.certsrv.request.IRequest; +import netscape.security.x509.CertificateValidity; +import netscape.security.x509.X509CertInfo; + /** * This class implements an enrollment default policy * that populates a server-side configurable validity @@ -231,7 +231,7 @@ public class ValidityDefault extends EnrollDefault { } else if (unit.equals("month")) { return Calendar.MONTH; - } else if (unit.equals("day")) { + } else if (unit.equals("day") || unit.equals("")) { return Calendar.DAY_OF_YEAR; } else if (unit.equals("hour")) { |
