When a migration of cert data is done from one version of cert system to the latest version of cert system on el7, the cert objects can be written to the ldap store in an unpredictable order.
Consequently, the agent GUI interface has a couple of places where the user can search for a list of certs based on a set of search terms.
In the non migration case, it turns out that the user will see any returned list in serial number order. This is basically the accidental side effect of having each cert added to the ldap store in order of creation.
The migration case allows no such convenient scenario and the migrated certs are added in random order.
Since the current search mechanism places no sorting constraints upon the search, the list can come up in unexpected order.
We need a simple bit of code to make sure the ldap server searches the data with sorting by serial number in mind.
Checked fix into master, closing:
commit f0b1854a8f5cfe97d2d267ea16e4556d94666bb6 Author: Jack Magne jmagne@dhcp-16-206.sjc.redhat.com Date: Wed Aug 3 18:01:23 2016 -0700
Fix to sort the output of a cert search by serialno.
Metadata Update from @jmagne: - Issue set to the milestone: 10.3.5
Dogtag PKI is moving from Pagure issues to GitHub issues. This means that existing or new issues will be reported and tracked through Dogtag PKI's GitHub Issue tracker.
This issue has been cloned to GitHub and is available here: https://github.com/dogtagpki/pki/issues/2550
If you want to receive further updates on the issue, please navigate to the GitHub issue and click on Subscribe button.
Subscribe
Thank you for understanding, and we apologize for any inconvenience.
Login to comment on this ticket.