Menu

Duplicate certificates

2006-04-04
2013-04-23
  • datadefender

    datadefender - 2006-04-04

    multiple times we had this symptom:
    user #1 registers and then requests a mailcertificate - Under Full name, he gives "James TheFirst" - all works fine.

    user #2 also registers and requests a certificate the sane way - giving his full name "James TheSecond".

    when he submits the form - her gets an eror message claiming that a certificate for "James TheSecond" has already been issued.
    But it then display the certificate of "James TheFirst".

    Change the name if "James TheSecond" to "James_TheSecond"  will cure the problem.

    we had that symptom multiple times and I come to the conclusion that the "Full Name Field" only uses the first string up to the first blank as unique identifier.

    Has anyone seen similar symptom. And am I on the wrong track ?

    thanks

     
    • shock

      shock - 2006-09-20
       
    • William Roadcap

      William Roadcap - 2007-01-04

      This should be fixed in v0.81.  CAdb_in() looks like this now:

      function CAdb_in($email="", $name="") {
          global $config;
          $email = escshellcmd($email);
          $name = escshellcmd($name);
          $regexp = "^[V].*CN=$name/(Email|emailAddress)=$email";
              $x =exec("egrep '$regexp' $config[index]");
              if ($x) {
              list($j,$j,$j,$serial,$j,$j) = explode("\t", $x);
              return "$serial";
          }
          else
              return false;
      }

      Please post a bug report if v0.81 of this function doesn't fix this for you.
      Some day I'll replace many of those exec() and system() calls with something better/safer. ;-)

       

Log in to post a comment.

Want the latest updates on software, tech news, and AI?
Get latest updates about software, tech news, and AI from SourceForge directly in your inbox once a month.