#3871 Add error handling to get_cert_nickname()
Closed: wontfix 5 years ago Opened 10 years ago by rcritten.

Worked with a guy in IRC having a problem with ipa-replica-manage to add a new winsync agreement (Zordrak). It was failing. I don't have the full backtrace, but the interesting parts are:

File "/usr/lib/python2.6/site-packages/ipaserver/install/certs.py", line 115, in get_cert_nickname
File "/usr/lib/python2.6/site-packages/ipapython/dn.py", line 1291, in __getitem__
return self.rdns[key]

Looking at get_cert_nickname() we pull the first element out of the subject DN. His certificate somehow had a blank subject. I'm not even sure that's legal, but blindly returning something is never a good idea. We should have some sort of try/except around it.


Metadata Update from @rcritten:
- Issue assigned to someone
- Issue set to the milestone: Future Releases

7 years ago

Thank you taking time to submit this request for FreeIPA. Unfortunately this bug was not given priority and the team lacks the capacity to work on it at this time.

Given that we are unable to fulfil this request I am closing the issue as wontfix. To request re-consideration of this decision please reopen this issue and provide additional technical details about its importance to you.

Metadata Update from @rcritten:
- Issue close_status updated to: wontfix
- Issue status updated to: Closed (was: Open)

5 years ago

Login to comment on this ticket.

Metadata