Xudad crashes when a certificate request is submitted via OneStep
Originally Published: 2008-12-22
Article Number
Applies To
RSA Certificate Manager OneStep 6.8
Mozilla FireFox 3.0
Issue
RSA Certificate Manager (RCM) Secure Directory Server (Xudad) crashes when a certificate request is made via OneStep using a test html page on Firefox 3.0.1 browser on Windows. The same request submitted via Microsoft Internet Explorer (MSIE) does not result in the crash.
Cause
**************************
Names Supplied by the Browser
The following names are required for certificate generation. They should be supplied by the enrollment page, not by the plug-in, because the end user's browser creates the key pair.
Name: KCSOSD_PUBLICKEY
Description/Value: The public key of the end user to be placed in the generated certificate. The format of the public key depends on the browser being used. For Microsoft Internet Explorer browsers, the key is in the PKCS #10 generated by XEnroll.cab. For Netscape Navigator, Mozilla Firefox, and Mozilla browsers, the key is in SubjectPublicKeyInfo format. The PKCS #10 is parsed, and only the SubjectPublicKeyInfo is used. The remaining values in the PKCS #10, such as Subject Distinguished Name, attributes, and so on, are ignored. These values must be specified in the other name/value pairs.
**************************
The value KCSOSD_PUBLICKEY for MSIE should be a complete PKCS#10. For Netscape or FireFox, the value should be only SubjectPublicKeyInfo value. For OneStep, RCM checks the browser type. If it is MSIE, it retrieves SPKI from PKCS#10 and sets the SPKI value properly. For Netscape type of browsers, such as FireFox, it sets the value directly.
Resolution
While the test html page used with OneStep was incorrectly constructed (as explained above), Xudad should not have crashed. RSA Certificate Manager 6.8, Build 516, fixes the crash problem. A certificate will still not be issued when KCSOSD_PUBLICKEY is not set with correctly formatted value, however Xudad will not crash.
Workaround
Notes
Related Articles
The Cancel Pending Requests button on the Pending Submissions page is disabled in RSA Identity Governance & Lifecycle Number of Views Microsoft Office 365 – WS-Federation SSO and Hybrid Domain Join Configuration – RSA Ready Implementation Guide Number of Views Installation fails on Linux due to missing O/S libraries Number of Views RSA SecurID Software Token for Microsoft Windows shows blank screen when asked to select a device where the token will be … Number of Views Microsoft SharePoint - SSO Agent - WS-Fed Configuration - RSA Ready SecurID Access Implementation Guide Number of Views
Trending Articles
Download RSA SecurID Access Cloud User Event audit logs using Cloud Administration REST API CLU RSA Release Notes: Cloud Access Service and Authenticators RSA MFA Agent 2.5 for Microsoft Windows Installation and Administration Guide Quick Setup Guide - Passwordless Authentication in Windows MFA Agent for Active Directory How to manipulate imported RSA SecurID Software Token(s) on an iPhone or iPad device
Don't see what you're looking for?
