Xudad crashes when a certificate request is submitted via OneStep
Originally Published: 2008-12-22
Last Modified: 2023-10-06
Article Number
Applies To
RSA Certificate Manager OneStep 6.8
Mozilla FireFox 3.0
Issue
RSA Certificate Manager (RCM) Secure Directory Server (Xudad) crashes when a certificate request is made via OneStep using a test html page on Firefox 3.0.1 browser on Windows. The same request submitted via Microsoft Internet Explorer (MSIE) does not result in the crash.
Cause
**************************
Names Supplied by the Browser
The following names are required for certificate generation. They should be supplied by the enrollment page, not by the plug-in, because the end user's browser creates the key pair.
Name: KCSOSD_PUBLICKEY
Description/Value: The public key of the end user to be placed in the generated certificate. The format of the public key depends on the browser being used. For Microsoft Internet Explorer browsers, the key is in the PKCS #10 generated by XEnroll.cab. For Netscape Navigator, Mozilla Firefox, and Mozilla browsers, the key is in SubjectPublicKeyInfo format. The PKCS #10 is parsed, and only the SubjectPublicKeyInfo is used. The remaining values in the PKCS #10, such as Subject Distinguished Name, attributes, and so on, are ignored. These values must be specified in the other name/value pairs.
**************************
The value KCSOSD_PUBLICKEY for MSIE should be a complete PKCS#10. For Netscape or FireFox, the value should be only SubjectPublicKeyInfo value. For OneStep, RCM checks the browser type. If it is MSIE, it retrieves SPKI from PKCS#10 and sets the SPKI value properly. For Netscape type of browsers, such as FireFox, it sets the value directly.
Resolution
While the test html page used with OneStep was incorrectly constructed (as explained above), Xudad should not have crashed. RSA Certificate Manager 6.8, Build 516, fixes the crash problem. A certificate will still not be issued when KCSOSD_PUBLICKEY is not set with correctly formatted value, however Xudad will not crash.
Workaround
Notes
Related Articles
Xudad crashes soon after renewing System CA certificate Number of Views "Request could not be handled" error seen when clicking on submitted form tab for request raised via Webservices in RSA Id… Number of Views Generate a Certificate Signing Request Using the Operations Console Number of Views Xudad crashes on a multi-processor machine when trace logging is enabled Number of Views How to 'Trust' the RSA Authentication Manager Security Console Self-Signed Root CA certificate and prevent Cert warnings. Number of Views
Trending Articles
RSA MFA Agent 2.5 for Microsoft Windows Installation and Administration Guide RSA Authentication Manager 8.1 Quick Setup Fails with "Failed to Attach Replica Instance" User Application Portal How to manipulate imported RSA SecurID Software Token(s) on an iPhone or iPad device The RSA Identity Governance & Lifecycle AD Collector and AD ADC authentication source fail to establish a TLS 1.2 SSL conn…
Don't see what you're looking for?
