000022817 - XudaCACreateCRL() function ignores XresSERIALNUMBER value when generating CRL in RSA Certificate Manager 6.6

Document created by RSA Customer Support Employee on Jun 14, 2016Last modified by RSA Customer Support Employee on Apr 22, 2017
Version 2Show Document
  • View in full screen mode

Article Content

Article Number000022817
Applies ToRSA Certificate Manager 6.6
RSA Certificate Manager 6.6 API
IssueXudaCACreateCRL() function ignores XresSERIALNUMBER value when generating CRL in RSA Certificate Manager 6.6
RSA Certificate Manager 6.6 API function XudaCACreateCRL() ignores the resource XresSERIALNUMBER set in the session when generating CRL through custom application. The CRL generated as a result of calling XudaCACreateCRL() gets the serial number incremental in sequence with the last CRL generated and ignores the value set for XresSERIALNUMBER.
The same custom application compiled with RSA Keon Certificate Authority 6.5.1 API and used against RSA Keon Certificate Authority 6.5.1 works correctly and generates a CRL with serial number set to the value of XresSERIALNUMBER
ResolutionThis issue has been fixed in Build 304 for RSA Certificate Manager 6.6. The fix includes change in RSA Certificate Manager binaries, and there's no change to the API libraries, hence only a server side fix (Build 304) is required to resolve the issue and no need to recompile the RSA Certificate Manager API application.

Contact RSA Security Customer Support to request build 304 or the most recent build for RSA Certificate Manager 6.6.
Legacy Article IDa30535

Attachments

    Outcomes