GetCACert can't return both an RA and a CA certificate

[pki-bot]

This issue was migrated from Pagure Issue #3163. Originally filed by cipherboy (@cipherboy) on 2020-03-16 16:49:51:

• Closed at 2020-03-16 16:56:04 as duplicate
• Assigned to nobody
• Associated bugzillas
  • https://bugzilla.redhat.com/show_bug.cgi?id=1198262

---

Description of problem:
When handling GetCACert requests, the logic currently doesn't attempt to return an application/x-x509-ca-ra-cert PKCS7 blob when the RA's certifying chain has more than one certificate in it. Unless a client "knows" to start with "message" set to 0 and attempt to walk the certifying chain, it will not be able to retrieve all of the certificates which are needed in order to successfully interact with the server.

Version-Release number of selected component (if applicable):
pki-common-9.0.3-38.el6_6.noarch

[pki-bot]

Comment from cipherboy (@cipherboy) at 2020-03-16 16:49:58

https://bugzilla.redhat.com/show_bug.cgi?id=1198262

[pki-bot]

Comment from cipherboy (@cipherboy) at 2020-03-16 16:49:59

Metadata Update from @cipherboy:

• Custom field component adjusted to None
• Custom field feature adjusted to None
• Custom field origin adjusted to None
• Custom field proposedmilestone adjusted to None
• Custom field proposedpriority adjusted to None
• Custom field reviewer adjusted to None
• Custom field rhbz adjusted to https://bugzilla.redhat.com/show_bug.cgi?id=1198262
• Custom field type adjusted to None
• Custom field version adjusted to None

[pki-bot]

Comment from cipherboy (@cipherboy) at 2020-03-16 16:56:06

Duplicate of https://pagure.io/dogtagpki/issue/1299

[pki-bot]

Comment from cipherboy (@cipherboy) at 2020-03-16 16:56:06

Metadata Update from @cipherboy:

• Issue close_status updated to: duplicate
• Issue status updated to: Closed (was: Open)