3keycompany/czertainly-ejbca-ng-connector

CZERTAINLY - EJBCA NG connector for certificate management and discovery

czertainly-ejbca-ng-connector's Issues

Add group attribute to replace discovery attributes dependent on selected entity instance

In EJBCA discovery attributes there are 3 data attributes which content is retrieved by callback when EJBCA instance is selected:

• ejbcaRestApiUrl
• ca
• endEntityProfile

Requirements:

• Replace attributes above with group attribute that will provide these attributes already with content based on selected EJBCA instance.
• fix response of ejbcaRestApi callback endpoint to retrieve EJBCA REST API base URL. It should return List<StringAttributeContent>

Generated username has 'null' as prefix or postfix when it is not defined for the username generation attributes

Affected EJBCA NG version: 1.0.0

When the usernamePrefix or usernamePostfix is not defined, it will be included in the generated username as null string.
For example: null24KoCPTG08I=null.

The correct behaviour is that the prefix or postfix will not be included and the resulting username us 24KoCPTG08I=.

Dependency Dashboard

This issue lists Renovate updates and detected dependencies. Read the Dependency Dashboard docs to learn more.

Open

These updates have all been created already. Click a checkbox below to force a retry/rebase of any.

• Update eclipse-temurin Docker tag to v17.0.11_9-jre-alpine
• Update maven Docker tag to v3.9.6
• Update eclipse-temurin Docker tag to v21
• Click on this checkbox to rebase all open PRs at once

Detected dependencies

dockerfile

Dockerfile

• maven 3.8.7-eclipse-temurin-17
• eclipse-temurin 17.0.10_7-jre-alpine

github-actions

.github/workflows/build.yml

• actions/checkout v4
• actions/setup-java v4
• actions/cache v4
• actions/checkout v4
• actions/setup-java v4
• actions/cache v4
• actions/cache v4

.github/workflows/codeql.yml

• actions/checkout v4
• github/codeql-action v3
• actions/setup-java v4
• actions/cache v4
• github/codeql-action v3

.github/workflows/workflow_run_pruner.yml

• actions/github-script v7
• actions/github-script v7

maven

pom.xml

• com.czertainly:dependencies 1.1.0
• com.czertainly:interfaces 2.11.0
• net.steppschuh.markdowngenerator:markdowngenerator 1.3.1.1

---

• Check this box to trigger a request for Renovate to run again on this repository

Validation of revocation attributes NullPointerException

The validation of revocation attributes does not handle exceptions properly.
Therefore, the NullPoniterException can be thrown in case no attributes are defined.

The expected behaviour is that the attributes validation exceptions are properly handled and logged.

EJBCA-NG-Connector does not migrate the credential data properly

EJBCA NG Connector does not migrate the credential_data column. It migrates only the attribute column and the credential data remains in the old format. Because of this, there are deserialization issues

Implement authority endpoint to retrieve issuing authority certificates and certificate revocation list

Implement endpoint POST /v1/authorityProvider/authorities/{uuid}/caCertificates from authority interface and use EJBCA WS to retrieve certificate chain of issuer authority specified by RA profiles attributes in request.

Implement endpoint POST /v1/authorityProvider/authorities/{uuid}/crl from authority interface and use EJBCA WS to retrieve certificate revocation list with support for delta CRL.