From 47d33f36507d7af16daff5b9f7e4b4acfc6d963b Mon Sep 17 00:00:00 2001 From: Fraser Tweedale Date: Mon, 27 Jun 2016 16:26:24 +1000 Subject: Fix IssuerDN presence check in cert search result When checking for presence of IssuerDN in certificate search result, we mistakenly check for the presence of the SubjectDN field, then unsafely index into the IssuerDN field. Check the presence of IssuerDN correctly. Part of: https://fedorahosted.org/freeipa/ticket/4559 Reviewed-By: Martin Basti --- ipaserver/plugins/dogtag.py | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/ipaserver/plugins/dogtag.py b/ipaserver/plugins/dogtag.py index 919ecfeac..aef1e888e 100644 --- a/ipaserver/plugins/dogtag.py +++ b/ipaserver/plugins/dogtag.py @@ -1903,7 +1903,7 @@ class ra(rabase.rabase): response_request['subject'] = unicode(dn[0].text) issuer_dn = cert.xpath('IssuerDN') - if len(dn) == 1: + if len(issuer_dn) == 1: response_request['issuer'] = unicode(issuer_dn[0].text) status = cert.xpath('Status') -- cgit