To configure MariaDB Jdbc to use SSL, you need to do put MariaDB DB server certificate to Jboss/Wildfly's truststore. I think you can add the jdbc url in the db.properties file jdbc:mariadb://hostname:port/database?useSSL=true&requireSSL=true&verifyServerCertificate=true NB! maybe you need to use & instead of & jdbc:mariadb://hostname:port/database?useSSL=true&requireSSL=true&verifyServerCertificate=true useSSL=true - enable ssl for the connection requireSSL=true - require the connection...
To configure MariaDB Jdbc to use SSL, you need to do put MariaDB DB server certificate to Jboss/Wildfly's truststore. I think you can add the jdbc url in the db.properties file jdbc:mariadb://hostname:port/database?useSSL=true&requireSSL=true&verifyServerCertificate=true NB! maybe you need to use & instead of & jdbc:mariadb://hostname:port/database?useSSL=true&requireSSL=true&verifyServerCertificate=true useSSL=true - enable ssl for the connection requireSSL=true - require the connection...
To configure MariaDB Jdbc to use SSL, you need to do put MariaDB DB server certificate to Jboss/Wildfly's truststore. I think you can add the jdbc url in the db.properties file jdbc:mariadb://hostname:port/database?useSSL=true&requireSSL=true&verifyServerCertificate=true NB! maybe you need to use & instead of & jdbc:mariadb://hostname:port/database?useSSL=true&requireSSL=true&verifyServerCertificate=true useSSL=true - enable ssl for the connection requireSSL=true - require the connection...
To configure MariaDB Jdbc to use SSL, you need to do put MariaDB DB server certificate to Jboss/Wildfly's truststore. I think you can add the jdbc url in the db.properties file jdbc:mariadb://hostname:port/database?useSSL=true&requireSSL=true&verifyServerCertificate=true NB! maybe you need to use & instead of & jdbc:mariadb://hostname:port/database?useSSL=true&requireSSL=true&verifyServerCertificate=true useSSL=true - enable ssl for the connection requireSSL=true - require the connection...
You can add end of database_url something like that: ?verifyServerCertificate=true&useSSL=true
Any suggestions?
Hi! I just deployed the latest EJBCA CE with docker, but I don't see Swagger-UI nor Docs? What I'm doing wrong? I set ejbca.productionmode to false grep ejbca.productionmode /opt/primekey/ejbca/conf/ejbca.properties ejbca.productionmode=false and then launch ejbca container. docker run -it --name ejbca --rm -p 80:8080 -p 443:8443 -h my-host -e TLS_SETUP_ENABLED="simple" -v /opt/primekey/ejbca/conf/web.properties:/etc/ejbca/conf/web.properties -v /opt/primekey/ejbca/conf/ejbca.properties:/etc/ejbca/conf/ejbca.properties...
Hi! I'm trying to figure out what is the best way how to use custom-conf for EJBCA with keyfactor/ejbca-ce:latest docker image. Has anyone use custom-conf with docker image? Thanks
Enrollment REST API is some kind of 3rd party app or how can I enable it? I just did docker pull primekey/ejbca-ce:latest and can't see it. Please show me the light :D
Still no REST API in the CE version?
Hi! What about JMSAppender.class https://access.redhat.com/security/cve/CVE-2021-4104 Regards, Alo
Hi! I just got EJBCA CE 7.4.0 pre-release version and it seems that modern API is still only in the Enterprise version, I'm right about this? If yes, is there any plans to add it also to CE v7.x version? Thanks
Hi! I just got EJBCA CE 7.4.0 pre-release version and it seems that modern API is still only in the Enterprise version, I'm right about this? If yes, there any plans to add it also to CE v7.x version? Thanks
Hi! Is there any plans to release EJBCA CE version 7 in the near future or CE version is like almost dead project now days? A
Thank you Tomas! I had read this section of rfc5280 # section-5.2.5 many times, but was still confused. After the "CRL partitioning" you mentioned, things became much clearer and I even found the corresponding lines in the EJBCA documentation https://doc.primekey.com/ejbca/ejbca-operations/ejbca-ca-concept-guide/certificate-authority-overview / partitioned-crls Regards, Alo
Hi! Maybe someone can help me with some strange issue with CRLs. What exactly means the following error? No IDP Intersection Base CRL. This is what my CRL file looks like: Certificate Revocation List (CRL): Version 2 (0x1) Signature Algorithm: sha256WithRSAEncryption Issuer: /CN=MY CA/OU=MY Dep/O=My Org/C=XX Last Update: Jan 16 12:12:58 2020 GMT Next Update: Jan 19 12:12:58 2020 GMT CRL extensions: X509v3 Authority Key Identifier: keyid:E3:79:A9:B3:99:3A:96:6C:AB:A8:07:19:0D:9A:66:F8:F0:E3:58:7E...
Never mind, I managed to restore my Super Admins rights via CLI.
Hi I have an odd issue with EJBCA UI. For some reason I see only "Administrator Roles" under the System Functions. Also under the "Administrator Roles" I see only one role, but there should be more roles. I have administrator rights. When I run ejbca.sh roles listadmins --role "Super Administrator Role" it works: ejbca.sh roles listadmins --role "Super Administrator Role" 'MYCA' WITH_SERIALNUMBER TYPE_EQUALCASE "XXXXXXXXXXXXXX" "Client cert for MYCA" [Admin unbound to CA] USERNAME TYPE_EQUALCASE...
Hi! At the moment REST API functionality needs EJBCA Enterprise version, but is there any plans to add it also to the Community version? For my point of view the REST API is a MUST feauture for today's software. This WebService thing is quite ugly thing;) Thanks Alo
Hi! Is there any information when the new version of Ejbca community version will be released? Thanks Alo
Hi! Is there any max length for CA issuer Default URI & CA issuer URI form (Edit CA page) on the admin web side? If there is some kind of max length where can I change it? I'm trying to add two HTTP URIs and one LDAP URI. Br, Alo
Hi! I migrated my EJBCA solution from the Oracle DB to the MariaDB. EJBCA service started without problems, but after some time "Connection reset" warning lines appears in the wildfly logs. 2017-08-31 00:07:12,947 WARN [org.jboss.jca.adapters.jdbc.local.LocalManagedConnectionFactory] (EJB default - 9) IJ030027: Destroying connection that is not valid, due to the following exception: org.mariadb.jdbc.MariaDbConnection@76f448: java.sql.SQLNonTransientConnectionException: (conn:8204) Could not send...
Hi! I migrated my EJBCA solution from the Oracle DB to the MariaDB. EJBCA service started without problems, but after some time "Connection reset" warning lines appears in the wildfly logs. 2017-08-31 00:07:12,947 WARN [org.jboss.jca.adapters.jdbc.local.LocalManagedConnectionFactory] (EJB default - 9) IJ030027: Destroying connection that is not valid, due to the following exception: org.mariadb.jdbc.MariaDbConnection@76f448: java.sql.SQLNonTransientConnectionException: (conn:8204) Could not send...
Hi! I have the same problem as Torsten with the Wildfly 10.1.0-Final and EJBCA CE 6.5.0.5. For me it seems that it is the Wildfly 10.1.0-Final and the Hibernate 5.0.1-Final mismatch issue. After I deleted the following constraints from Oracle DB side: ALTER TABLE EJBCA.ACCESSRULESDATA DROP CONSTRAINT FKABB4C1DFDBBC970; ALTER TABLE EJBCA.ADMINENTITYDATA DROP CONSTRAINT FKD9A99EBCB3A110AD; and redeployed ejbca ant clean deployear Wildfly started successfuly and now I have EJBCA CE 6.5.0.5 which run...
HI! After I upgrade my ejbca to the latest svn version I lost access to admin web interface and ejbca cli show the following error when I try list admin roles: ejbca.sh roles listadmins --role "Super Administrator Role" Allow external re-configuration: false 14:22:26,706 INFO [org.cesecore.audit.impl.log4j.Log4jDevice] (EJB default - 5) 2017-05-05 14:22:26+00:00;AUTHENTICATION;FAILURE;AUTHENTICATION;CORE;ejbca;;;;msg=Authentication failed. Further information: Incorrect one-time hash was passed with...
Hi! Are there any plans to release a new version of the EJBCA Community or all the...
Hi! Is there any possibility to use EJBCA 6.3.1.1 with the OpenJDK 8? Alo
Ironic indeed;) I just restored the DB to the state before deleting and I'm able...
sh> ejbca.sh roles removerole Admins No database integrity protection available in...
Hi! I deleted Super Administrator Role by accident and now I'm unable to log into...
Mike, I use Oracle DB Alo
Tomas, I did a quick grep in my new ejbca directory. grep -r PeerData * doc/sql-scripts/drop-tables-ejbca-oracle.sql:drop...
Hello! I just upgraded my EJBCA 6.1.1 to EJBCA 6.3.1.1 Community (r21429). Now I...
Hi! I need some advice what is wrong with my EJBCA instance. I have the following...
Any help?
Hi! I have enabled email notifications in the End Entity Profile, but I cannot configure...
Hello After I upgraded my EJBCA CA from version 6.1.1 to 6.2.0 I see a lot of errors...
So, missing EOL is by design?
Hi I have a little problem with the subject DN field When I add a new end entity...
Hi I have a little problem with the subject DN field When I add a new end entity...
./ejbca.sh batch EndEntityTest -dir /some/directory/
Hi, I don't know if this is a known issue or not, but when I batch generate the end-entity...
Hi, I don't know if this is a known issue or not, but when I batch generate the end-entity...
Hi, The problem was solved after I ran 3 alter table commands as described in ejbca/src/upgrade/600_610/600_610-upgrade-oracle.sql...
Ejbca version : EJBCA 6.1.1 Tomcat version: jboss-as-7.1.1.Final Ant: apache-ant-1.9.3...
When I tried to view the certificate in EJBCA Admin Web: RA Functions->Search End...
Is there any way to generate the certificate with a custom filename instead of the...
Hello is there any bulk import script for EJBCA?
I tried this: Created a new end-entity with the username test and password test (CN:...
Does this mean that I always need to change the user status to NEW before I can create...
Anders, what do you mean by "You just edit the end-entity for each new certificate"?....
Ok, but how can I configure EJBCA so that I can use only one user to generate certificates?...
Ok, but how can I configure EJBCA so that I can use only one user to generate certificates?...
Does EJBCA enable to use one user for creating certificates? Since my previous CA...