Open pki-bot opened 3 years ago
Comment from dmoluguw (@SilleBille) at 2020-06-29 11:01:17
This seems to be working correctly after setting a positive
value in CS.cfg..
However, -1
"logically" refers to unlimited but, the system does not accept a positive value. Since there is a workaround, lowering the priority
Comment from dmoluguw (@SilleBille) at 2020-06-29 11:01:18
Metadata Update from @SilleBille:
This issue was migrated from Pagure Issue #3179. Originally filed by dmoluguw (@SilleBille) on 2020-06-15 18:42:57:
Description
While issuing a CA cert, Path Length constraint accept only
-1
value.Steps to reproduce
1) Spawn CA 2) Submit certificate request
pki -c Secret.123 client-cert-request "cn=test" --profile caCACert
3) As agent, update the above request to specify the pathLen constraint :4) Approve or update request
PS: The same behavior is observed when updating/approving request via web UI
NOTE: The following constraint message is displayed on both Web UI and CLI