freeipa

#5919 cert-request rfc822Name check compares whole email address case-sensitively
Closed: fixed Opened by ftweedal.

Closed: fixed
Reopen Issue

The 'cert-request' command checks that all rfc822Name altNames
in the SAN extension request match one of the user's email
addresses, however, it does a case-sensitive comparison of the whole
email address.

The domain part should be compared case-insensitively.

Metadata Update from @ftweedal:
- Issue assigned to someone
- Issue set to the milestone: Future Releases

Metadata Update from @fbarreto:
- Custom field component reset (from Certificate management)
- Custom field keywords reset (from easyfix)
- Custom field on_review reset (from 0)
- Custom field rhbz reset (from todo)
- Custom field type reset (from defect)
- Issue close_status updated to: None

PR to fix it: https://github.com/freeipa/freeipa/pull/736

Moving to 4.6 given the PR.

Metadata Update from @pvoborni:
- Issue set to the milestone: FreeIPA 4.6 (was: Future Releases)

Metadata Update from @simo:
- Assignee reset

Metadata Update from @simo:
- Issue assigned to fbarreto

master:

  • d973168e89c7fb5e8c36919b3adb685371e1a3ab Fixing the cert-request comparing whole email address case-sensitively.

Metadata Update from @mbasti:
- Issue close_status updated to: fixed
- Issue status updated to: Closed (was: Open)

ipa-4-5:

  • 4117db41cbb1dc1236525dd073efc32fa1c0bc07 Fixing the cert-request comparing whole email address case-sensitively.

Metadata Update from @frenaud:
- Issue set to the milestone: FreeIPA 4.5.5 (was: FreeIPA 4.6)

Milestone updated to FreeIPA 4.5.5 as there was a backport to 4-5 branch
Edited by frenaud
Metadata
None
None
None
High
Static archive. pagure.io was sunset in 2026; this is a read-only snapshot.
Red Hat Logo

Fedora is sponsored by Red Hat. Learn more about the relationship between Red Hat and Fedora »

© Red Hat, Inc. and others.