|
From: Quintin B. <qui...@ja...> - 2016-01-08 08:11:25
|
Good morning, I think the public web only allows retrieving the *certificate* for any user, and not the private key as well. The certificate is part of the public component. Quintin On 2016-01-08 08:04, Benedikt Weyer wrote: > good morning, why can i retrieve any certificate (even the superadmin) > in ejbca's public web interface without authenitification? am using > ejbca_ce_6_3_1_1, jboss-as-7.1.1.Final, H2, openjdk-7 on debian 8. > thanx a lot in advance. > > ------------------------------------------------------------------------------ > _______________________________________________ > Ejbca-develop mailing list > Ejb...@li... > https://lists.sourceforge.net/lists/listinfo/ejbca-develop > ------------------------------------------------------------------------------ _______________________________________________ Ejbca-develop mailing list Ejb...@li... https://lists.sourceforge.net/lists/listinfo/ejbca-develop JACKLIN ENTERPRISES Quintin Beukes Tel: +27 11 265 4442 Fax: +27 11 314 2984 Email: qui...@ja... @|from|wwwhomepage|@ This e-mail may contain confidential information belonging to the sender which is legally privileged. It is the responsibility of the recipient to ensure that any e-mails or attachments are virus free as Jacklin Enterprises accepts no responsibility. Should you not be the intended recipient then any disclosure, copying, distribution or the taking of any action in reliance of the contents of this email is strictly prohibited. If you have received this transmission in error, please notify the sender immediately. Jacklin Enterprises Limited is registered in England No. 4398837 Registered office: 3rd Floor, 12 Gough Square, London, EC4A 3DW. VAT Registration No: 831 0256 68. Please consider the environment before printing this email. |