[#DIRSERVER-715] Unable to match entry by X.509 certificate

Directory ApacheDS

Unable to match entry by X.509 certificate

Created: 23/Aug/06 10:12 AM Updated: 04/Sep/06 07:08 PM

Return to search

Component/s:

ldap

Affects Version/s:

1.0-RC3

Fix Version/s:

1.5.0, 1.0-RC4

Time Tracking:

Not Specified

File Attachments:

File Name	Date Attached	Attached By	Size
LdapTest.java	2006-08-23 03:16 PM	Nikola Goran Cutura	5 kB
no-binary.log	2006-08-23 10:12 AM	Nikola Goran Cutura	77 kB
test-export.pem	2006-08-23 03:16 PM	Nikola Goran Cutura	0.8 kB
test.ldif	2006-08-23 03:16 PM	Nikola Goran Cutura	3 kB
with-binary.log	2006-08-23 10:12 AM	Nikola Goran Cutura	50 kB

Environment:

Windows XP, Intel Pentium 4

Issue Links:

Reference

This issue relates to:

~~DIRSERVER-169~~ Incorrect SearchResult name and "compare" failure using CoreContextFactory

Resolution Date:

27/Aug/06 08:07 AM

Description

« Hide

There is an entry containing valid X.509 certificate. When I attempt to find that entry by that certificate, search fails. There are two variants of search: one uses 'userCrtificate' attribute name and the other uses 'userCrtificate;certificate' attribute name ('binary' may be specified instead of 'certiifcate' - no change). Attached are log files produced in each of the search attempts.

Case 1:

Java statement:
NamingEnumeration results = ctx.search("ou=users,o=ActiveMQ,dc=example,dc=com", "userCertificate = {0}", new Object[] {cert}, constraints);

produces log as in file ' no-binary.log'

Case 2:

Java statement:
NamingEnumeration results = ctx.search("ou=users,o=ActiveMQ,dc=example,dc=com", "userCertificate;binary = {0}", new Object[] {cert}, constraints);

produces log as in file 'with-binary.log'

All

Comments

Work Log

Change History

Subversion Commits

Sort Order:

No work has yet been logged on this issue.