search

dogtagpki / pki

The Dogtag Certificate System is an enterprise-class Certificate Authority (CA) which supports all aspects of certificate lifecycle management, including key archival, OCSP and smartcard management.
https://www.dogtagpki.org
GNU General Public License v2.0
362 stars 135 forks source link

NPE in getconfigEntries when internaldb password is removed from master #1705

Closed pki-bot closed 3 years ago

pki-bot commented 3 years ago

This issue was migrated from Pagure Issue #1142. Originally filed by vakwetu (@vakwetu) on 2014-09-04 18:50:16:

This is something that was encountered in IPA when encukoun attempted to clone an instance where the diectory manager password had been removed from password.conf. Because IPA uses a client cert to connect to the DB, the password is not needed.

The clone attempts to contact the master to get config entries from CS.cfg etc. If the password is missing, it adds a null value to the XML structure it returns, resulting in a NPE when the XML Object is serialized. This exception is sadly swallowed up.

Needs a null check for the values ..

pki-bot commented 3 years ago

Comment from vakwetu (@vakwetu) at 2014-09-04 19:05:20

Fixed in 10.2:

To ssh://vakwetu@git.fedorahosted.org/git/pki.git 8acd59f..745226e master -> master

pki-bot commented 3 years ago

Comment from mharmsen (@mharmsen) at 2014-11-21 23:48:56

Cherry-picked and committed to DOGTAG_10_1_BRANCH:

commit 746f97de4f46bd249277a05f8c49c107d7055384
Author: Ade Lee <alee@redhat.com>
Date:   Thu Sep 4 12:54:23 2014 -0400

    Check for null values in GetConfigEntries

    Ticket 1142

    (cherry picked from commit 745226e75d1d368e252993c36abb12c4c544a197)
pki-bot commented 3 years ago

Comment from vakwetu (@vakwetu) at 2017-02-27 13:59:41

Metadata Update from @vakwetu: