swedenconnect/ca-headless

Certificate Authority service with no admin UI, using CMC as API for certificate issuance and admin operations.

ca-headless's Issues

Add support for non escaped unicode charater

Add support in configuraiton to accept åäö ÅÄÖ instead of needing to escape them with \u00f6

Issue from eemeli/prettier-plugin-properties#11

Generates OCSP certificates that expires in 5 days

We upgraded some of our headless-ca applications from 1.1.5 to 1.3.2 and noticed that some of them started to generate OCSP certificates with 5 days expiry time in our OpenShift cluster from the previous 10 years and we didn’t think more about it since it didn’t happen in any of our production environments, but now after deploying some new production changes they (our productions environments) also started to generate OCSP certificates with 5 days expiry time.

What has changed to cause this drastic validity time change for the OCSP certificates?

P.S. We are using the same configuration (below) for all our OCSP certificates

ca-service.instance.conf.default.ocsp.enabled=true
ca-service.instance.conf.default.ocsp.algorithm=${ca-service.instance.conf.default.ca.algorithm}
ca-service.instance.conf.default.ocsp.validity.start-offset-sec=-10
ca-service.instance.conf.default.ocsp.validity.unit=H
ca-service.instance.conf.default.ocsp.validity.amount=0

ca-repo-migration-tool uses an older version of ca-service-base

While checking the dependencies of headless-ca I noticed that it uses ca-service-base 1.4.0 while ca-repo-migration-tool (repo-migration) uses the 1.3.0 version.

Should they be the same?

Repomigrate.jar appends `target` to path

After adding some System.out.println trying to investiage why my instances folder where not read i found that /target/ is appended on my path, -d has the same issues

bash-4.4$ java -jar -D-spring.datasource.password=$SPRING_DATASOURCE_PASSWORD -D-spring.datasource.platform=$SPRING_DATASOURCE_PLATFORM -D-spring.datasource.url=$SPRING_DATASOURCE_URL -D-spring.datasource.username=$SPRING_DATASOURCE_USERNAME -D-spring.jpa.database=$SPRING_JPA_DATABASE -D-spring.jpa.properties.hibernate.jdbc.lob.non_contextual_creation=$SPRING_JPA_PROPERTIES_HIBERNATE_JDBC_LOB_NOCONTEXTUALCREATION -D-spring.jpa.show-sql=$SRPING_JPA_SHOWSQL -D-spring.jpa.hibernate.ddl-auto=none -D-spring.jpa.database-platform=org.hibernate.dialect.PostgreSQLDialect /tmp/repomigrate.jar -d /opt/ca -list
CA Repository migration tool version 1.0.0
Configuring CA Repositories ...
caRepositoryMap 1
/opt/ca/target/instances/aprot/repository
caRepositoryMap 2
/opt/ca/target/instances/aprot/repository/aprot-repo.json
MergeJsonCARepository 1
caRepositoryMap 1
/opt/ca/target/instances/apca/repository
caRepositoryMap 2
/opt/ca/target/instances/apca/repository/apca-repo.json
MergeJsonCARepository 1
caRepositoryMap 1
/opt/ca/target/instances/smpca/repository
caRepositoryMap 2
/opt/ca/target/instances/smpca/repository/smpca-repo.json
MergeJsonCARepository 1
Merge status information : Verbose = false

getMergeStatus 1
[apca, aprot, smpca]
getMergeStatus 2
[]
Hibernate: select dbcertific0_.id as id1_0_, dbcertific0_.certificate as certific2_0_, dbcertific0_.expiry_date as expiry_d3_0_, dbcertific0_.instance as instance4_0_, dbcertific0_.issue_date as issue_da5_0_, dbcertific0_.reason as reason6_0_, dbcertific0_.revocation_time as revocati7_0_, dbcertific0_.revoked as revoked8_0_ from dbcertificate_record dbcertific0_ where dbcertific0_.instance=? limit ?
getMergeStatus 2
[]
Hibernate: select dbcertific0_.id as id1_0_, dbcertific0_.certificate as certific2_0_, dbcertific0_.expiry_date as expiry_d3_0_, dbcertific0_.instance as instance4_0_, dbcertific0_.issue_date as issue_da5_0_, dbcertific0_.reason as reason6_0_, dbcertific0_.revocation_time as revocati7_0_, dbcertific0_.revoked as revoked8_0_ from dbcertificate_record dbcertific0_ where dbcertific0_.instance=? limit ?
getMergeStatus 2
[]
Hibernate: select dbcertific0_.id as id1_0_, dbcertific0_.certificate as certific2_0_, dbcertific0_.expiry_date as expiry_d3_0_, dbcertific0_.instance as instance4_0_, dbcertific0_.issue_date as issue_da5_0_, dbcertific0_.reason as reason6_0_, dbcertific0_.revocation_time as revocati7_0_, dbcertific0_.revoked as revoked8_0_ from dbcertificate_record dbcertific0_ where dbcertific0_.instance=? limit ?
Merge status for instance: apca
---------------------------------------------------------
File repo certs missing in DB repo (0)
DB repo certs missing in File repo (0)
Duplicate cert records (0):

Merge status for instance: aprot
---------------------------------------------------------
File repo certs missing in DB repo (0)
DB repo certs missing in File repo (0)
Duplicate cert records (0):

Merge status for instance: smpca
---------------------------------------------------------
File repo certs missing in DB repo (0)
DB repo certs missing in File repo (0)
Duplicate cert records (0):

bash-4.4$ java -jar -D-spring.datasource.password=$SPRING_DATASOURCE_PASSWORD -D-spring.datasource.platform=$SPRING_DATASOURCE_PLATFORM -D-spring.datasource.url=$SPRING_DATASOURCE_URL -D-spring.datasource.username=$SPRING_DATASOURCE_USERNAME -D-spring.jpa.database=$SPRING_JPA_DATABASE -D-spring.jpa.properties.hibernate.jdbc.lob.non_contextual_creation=$SPRING_JPA_PROPERTIES_HIBERNATE_JDBC_LOB_NOCONTEXTUALCREATION -D-spring.jpa.show-sql=$SRPING_JPA_SHOWSQL -D-spring.jpa.hibernate.ddl-auto=none -D-spring.jpa.database-platform=org.hibernate.dialect.PostgreSQLDialect /tmp/repomigrate.jar -list
No config dir specified. Using working dir: /opt/ca
CA Repository migration tool version 1.0.0
Configuring CA Repositories ...
caRepositoryMap 1
/opt/ca/target/instances/aprot/repository
caRepositoryMap 2
/opt/ca/target/instances/aprot/repository/aprot-repo.json
MergeJsonCARepository 1
caRepositoryMap 1
/opt/ca/target/instances/apca/repository
caRepositoryMap 2
/opt/ca/target/instances/apca/repository/apca-repo.json
MergeJsonCARepository 1
caRepositoryMap 1
/opt/ca/target/instances/smpca/repository
caRepositoryMap 2
/opt/ca/target/instances/smpca/repository/smpca-repo.json
MergeJsonCARepository 1
Merge status information : Verbose = false

getMergeStatus 1
[apca, aprot, smpca]
getMergeStatus 2
[]
Hibernate: select dbcertific0_.id as id1_0_, dbcertific0_.certificate as certific2_0_, dbcertific0_.expiry_date as expiry_d3_0_, dbcertific0_.instance as instance4_0_, dbcertific0_.issue_date as issue_da5_0_, dbcertific0_.reason as reason6_0_, dbcertific0_.revocation_time as revocati7_0_, dbcertific0_.revoked as revoked8_0_ from dbcertificate_record dbcertific0_ where dbcertific0_.instance=? limit ?
getMergeStatus 2
[]
Hibernate: select dbcertific0_.id as id1_0_, dbcertific0_.certificate as certific2_0_, dbcertific0_.expiry_date as expiry_d3_0_, dbcertific0_.instance as instance4_0_, dbcertific0_.issue_date as issue_da5_0_, dbcertific0_.reason as reason6_0_, dbcertific0_.revocation_time as revocati7_0_, dbcertific0_.revoked as revoked8_0_ from dbcertificate_record dbcertific0_ where dbcertific0_.instance=? limit ?
getMergeStatus 2
[]
Hibernate: select dbcertific0_.id as id1_0_, dbcertific0_.certificate as certific2_0_, dbcertific0_.expiry_date as expiry_d3_0_, dbcertific0_.instance as instance4_0_, dbcertific0_.issue_date as issue_da5_0_, dbcertific0_.reason as reason6_0_, dbcertific0_.revocation_time as revocati7_0_, dbcertific0_.revoked as revoked8_0_ from dbcertificate_record dbcertific0_ where dbcertific0_.instance=? limit ?
Merge status for instance: apca
---------------------------------------------------------
File repo certs missing in DB repo (0)
DB repo certs missing in File repo (0)
Duplicate cert records (0):

Merge status for instance: aprot
---------------------------------------------------------
File repo certs missing in DB repo (0)
DB repo certs missing in File repo (0)
Duplicate cert records (0):

Merge status for instance: smpca
---------------------------------------------------------
File repo certs missing in DB repo (0)
DB repo certs missing in File repo (0)
Duplicate cert records (0):