Re: [Ejbca-develop] 'Allow Subject DN override' and web service call

[Tomas G. <to...@pr...>]

This is very common to do this using WS so there is probably something
wrong with your call. Are you using the correct certificate profile in
your WS call?

Debug logging will show in detail all decisions egarding override or not
that is takes during certificate issuance.

Regards,
Tomas
---
RSA Conference 2017
------------------------------------------------------------------
San Francisco | February 13-17 | Moscone Center
Come visit us in booth #627 at RSA Conference 2017!

Want a free expo pass?
Go to https://www.rsaconference.com/events/us17/register
and use the code: XE7PRMKEY

On 2017-02-02 04:44, Nikita Bedmutha wrote:
> Sorry for spamming, but just correcting the query:
> 
> I want to make a certificate request which uses the subject DN from CSR
> and not the registered end entity subject DN . I am using the
> certificate profile which has 'Allow subject DN override by CSR'
> checked. However the web service requests 'pkcs10Request' as well as
> 'certificateRequest' do not return certificates with subject DN
> overridden by the CSR but uses the registered DN only.
> 
> On the other hand, using the same CSR, the public web call 'Create
> Certificate from CSR' as well as the 'createcert' CLI command generates
> a certificate which has the subject DN overridden by the CSR.
> 
> Your inputs would really be very helpful.
> Thanks.
> 
> Regards,
> Nikita Bedmutha
> 
> 
> 
> On Wed, Feb 1, 2017 at 4:50 PM, Nikita Bedmutha
> <nik...@gs... <mailto:nik...@gs...>> wrote:
> 
>     Hi,
> 
>     I have a user(end-entity) created using a certificate profile which
>     has 'Allow Subject DN override' checked. This end-entity is
>     registered with Token as User Generated.
>     When I use 'Create Certificate from CSR' option on public web, I get
>     the certificate with the subject DN used while creating the CSR and
>     not the registered DN.
>     Now I want to achieve same using web service call. I tried the
>     'certificateRequest' and 'pkcs10' request with the same CSR that I
>     used in previous Public web call. But in the web service call case,
>     I get certificate with the registered DN and not overridden by the CSR.
> 
>     Kindly guide me how to achieve this.
> 
>     Thanks and Regards,
>     Nikita
> 
> 
> 
> 
> ------------------------------------------------------------------------------
> Check out the vibrant tech community on one of the world's most
> engaging tech sites, SlashDot.org! http://sdm.link/slashdot
> 
> 
> 
> _______________________________________________
> Ejbca-develop mailing list
> Ejb...@li...
> https://lists.sourceforge.net/lists/listinfo/ejbca-develop
>