Re: [Ejbca-develop] EJBCA stacktraces when trying to import large CRL

[<oh...@ya...>]

 Are you talking about this:

[root@ejbca bin]# ./ejbca.sh --help
--------------------------------
The following categories are available:
 [ ca | config | cryptotoken | hardtoken | keybind | ocsp | ra | roles | service | svgtemplate ]
--------------------------------
And the following commands are available:
 asn1dump Dumps PEM or DER encoded certificate as readable ASN.1
 batch Batch generate keys and certificates.
 clearcache Clears caches used internally by EJBCA.
 createcert Issue a certificate for a user based on a CSR
 encryptpwd Encrypts a password
 upgrade Upgrade command. Use 'ant upgrade' instead of running this directly.

Type a command and "--help" for more information.


I don't see where it has a command for import a CRL so far?




     On Friday, June 28, 2019, 9:01:03 AM EDT, <oh...@ya...> wrote:  
 
  You will DEFINITELY be missed!

If you have time before you go, can you point me to how to use the CLI to import the CRL?

Thanks,
Jim


     On Friday, June 28, 2019, 8:30:17 AM EDT, Tomas Gustavsson <to...@pr...> wrote:  
 
 
I don't. Looks like the security filter (OWASP CSRFGuard) has a built in
size limit for uploads. As you are using the Web UI for this, you may
try the CLI instead as that does not go via the web interface.

Cheers,
Tomas

PS: I will be away on vacation after today and will not be active in
this list for a couple of weeks now.

On 2019-06-28 14:24, ohaya--- via Ejbca-develop wrote:
> Does anyone have any solution to this problem?
> 
> Thanks,
> Jim
> 
> 
> On Thursday, June 27, 2019, 3:12:35 PM EDT, <oh...@ya...> wrote:
> 
> 
> Hi,
> 
> I tried changing the <http-listener> in the standalone.xml to:
> 
> <https-listener name="httpspub" socket-binding="httpspub"
> max-post-size="100000000" max-parameters="2048" ssl-context="httpspub"/>
> <https-listener name="httpspriv" socket-binding="httpspriv"
> max-post-size="100000000" max-parameters="2048" ssl-context="httpspriv"/>
> 
> and now when I try to import the CRL, I get:
> 
> 14:53:10,355 ERROR [io.undertow.request] (default task-1) UT005023:
> Exception handling request to /ejbca/adminweb/ca/cafunctions.jsp:
> java.lang.IllegalArgumentException: byte limit exceeded: -58
> at
> org.owasp.csrfguard.MultipartFormData.decrementLimit(MultipartFormData.java:1339)
> at
> org.owasp.csrfguard.MultipartFormData.readData(MultipartFormData.java:1305)
> at
> org.owasp.csrfguard.MultipartFormData.readPart(MultipartFormData.java:1145)
> 
> 
> On Thursday, June 27, 2019, 2:25:39 PM EDT, <oh...@ya...> wrote:
> 
> 
> Hi,
> 
> I am trying to import a somewhat large (> 70MB) CRL into EJBCA, and when
> I try that it is throwing an exception and outputting the following
> stacktrace:
> 
> 14:17:41,407 ERROR [stderr] (default task-1)
> io.undertow.server.RequestTooBigException: UT000020: Connection
> terminated as request was larger than 10485760
> 14:17:41,408 ERROR [stderr] (default task-1)    at
> io.undertow.conduits.FixedLengthStreamSourceConduit.checkMaxSize(FixedLengthStreamSourceConduit.java:168)
> 14:17:41,408 ERROR
> 
> How can I import this CRL into EJBCA?
> 
> Thanks,
> Jim
> 
> 
> _______________________________________________
> Ejbca-develop mailing list
> Ejb...@li...
> https://lists.sourceforge.net/lists/listinfo/ejbca-develop
> 


_______________________________________________
Ejbca-develop mailing list
Ejb...@li...
https://lists.sourceforge.net/lists/listinfo/ejbca-develop