dogtagpki / pki

The Dogtag Certificate System is an enterprise-class Certificate Authority (CA) which supports all aspects of certificate lifecycle management, including key archival, OCSP and smartcard management.
https://www.dogtagpki.org
GNU General Public License v2.0
374 stars 137 forks source link

Common format for certificate serial number #3111

Open pki-bot opened 4 years ago

pki-bot commented 4 years ago

This issue was migrated from Pagure Issue #2993. Originally filed by mharmsen (@mharmsen) on 2018-04-19 20:25:19:


Need a common format for certificate serial number.

CA pages store certificate in Hex format while in ldap we store them as decimal format.

While sending requests for CMC revocation we use decimal format and in general revocation using CA agent pages we use Hex format.

We always have to convert hex serial number to decimal before sending revocation request.Do you think it's good to have one format?

All the cli's uses hex format.

Audit logs showsup in decimal format while debug logs has hex format.

Steps to Reproduce:

1.Try one CA agent revoke request.It needs a certificate serial in hex format.
2.CMC revoke needs decimal format.

Actual results:

manual efforts needed for conversion purpose.

Expected results:

following one format across system.
pki-bot commented 4 years ago

Comment from mharmsen (@mharmsen) at 2018-04-19 20:25:50

Metadata Update from @mharmsen:

pki-bot commented 4 years ago

Comment from mharmsen (@mharmsen) at 2018-04-19 20:35:13

Per 10.5.x/10.6 Triage: 10.6

cfu: it's a good idea, but maybe something to do when there is time.