Re: [Ejbca-develop] EJBCA stacktraces when trying to import large CRL

[Tomas G. <to...@pr...>]

I don't. Looks like the security filter (OWASP CSRFGuard) has a built in
size limit for uploads. As you are using the Web UI for this, you may
try the CLI instead as that does not go via the web interface.

Cheers,
Tomas

PS: I will be away on vacation after today and will not be active in
this list for a couple of weeks now.

On 2019-06-28 14:24, ohaya--- via Ejbca-develop wrote:
> Does anyone have any solution to this problem?
> 
> Thanks,
> Jim
> 
> 
> On Thursday, June 27, 2019, 3:12:35 PM EDT, <oh...@ya...> wrote:
> 
> 
> Hi,
> 
> I tried changing the <http-listener> in the standalone.xml to:
> 
> <https-listener name="httpspub" socket-binding="httpspub"
> max-post-size="100000000" max-parameters="2048" ssl-context="httpspub"/>
> <https-listener name="httpspriv" socket-binding="httpspriv"
> max-post-size="100000000" max-parameters="2048" ssl-context="httpspriv"/>
> 
> and now when I try to import the CRL, I get:
> 
> 14:53:10,355 ERROR [io.undertow.request] (default task-1) UT005023:
> Exception handling request to /ejbca/adminweb/ca/cafunctions.jsp:
> java.lang.IllegalArgumentException: byte limit exceeded: -58
> at
> org.owasp.csrfguard.MultipartFormData.decrementLimit(MultipartFormData.java:1339)
> at
> org.owasp.csrfguard.MultipartFormData.readData(MultipartFormData.java:1305)
> at
> org.owasp.csrfguard.MultipartFormData.readPart(MultipartFormData.java:1145)
> 
> 
> On Thursday, June 27, 2019, 2:25:39 PM EDT, <oh...@ya...> wrote:
> 
> 
> Hi,
> 
> I am trying to import a somewhat large (> 70MB) CRL into EJBCA, and when
> I try that it is throwing an exception and outputting the following
> stacktrace:
> 
> 14:17:41,407 ERROR [stderr] (default task-1)
> io.undertow.server.RequestTooBigException: UT000020: Connection
> terminated as request was larger than 10485760
> 14:17:41,408 ERROR [stderr] (default task-1)    at
> io.undertow.conduits.FixedLengthStreamSourceConduit.checkMaxSize(FixedLengthStreamSourceConduit.java:168)
> 14:17:41,408 ERROR
> 
> How can I import this CRL into EJBCA?
> 
> Thanks,
> Jim
> 
> 
> _______________________________________________
> Ejbca-develop mailing list
> Ejb...@li...
> https://lists.sourceforge.net/lists/listinfo/ejbca-develop
>