[Ejbca-develop] EJBCA isn't verifying PKCS #10 signature from EjbcaWS#certificateRequest

[Jaime H. E. <hab...@gm...>]

On EJBCA 6.2.0 (r19221), the WS method
org.ejbca.core.protocol.ws.EjbcaWS#certificateRequest, called like this
from a client:

ejbcaWS.certificateRequest(ejbcaUser, pkcs10inPemFormat,
CertificateHelper.CERT_REQ_TYPE_PKCS10, null,
CertificateHelper.RESPONSETYPE_CERTIFICATE);

Isn't performing POP, I can see it is quickly transformed to a
org.cesecore.certificates.certificate.request.SimpleRequestMessage by the
method
org.cesecore.certificates.certificate.request.RequestMessageUtils#getSimpleRequestMessageFromType,
and this SimpleRequestMessage always return true when its method #verify is
called.

Is this behaviour by design or is it a bug?


-- 
Jaime Hablutzel -  RPC 994690880