Uploaded image for project: 'Help-Desk'
  1. Help-Desk
  2. HELP-593

FIWARE.Request.Tech.Security.AuthorizationPDP.InstallGuideIssueGettingClientDN

    Details

    • HD-Chapter:
      Security
    • HD-Enabler:
      AuthZForce

      Description

      Hi,

      While doing the User Registration https://forge.fi-ware.org/plugins/mediawiki/wiki/fiware/index.php/Access_Control_-_Installation_and_Administration_Guide#User_Registration , actually while registering in the User Database, the way to get the subject DN (UUID) is not trivial, so we suggest to add some extra information in order to make it easier.

      If helps, we did this:

      openssl x509 -in johndoe-taz-client-cert.pem -text | grep CN=

      OS: Ubuntu 14.04 Server x64

      Regards,

      Alberto Martín
      _______________________________________________
      Fiware-tech-help mailing list
      Fiware-tech-help@lists.fi-ware.org
      https://lists.fi-ware.org/listinfo/fiware-tech-help

        Activity

        FIWARE-TECH-HELP FIWARE-TECH-HELP created issue -
        mev Manuel Escriche made changes -
        Field Original Value New Value
        Status Open [ 1 ] Answered [ 10104 ]
        mev Manuel Escriche made changes -
        Assignee Cyril Dangerville [ cyril.dangerville ]
        mev Manuel Escriche made changes -
        Link This issue is cloned by HELP-637 [ HELP-637 ]
        mev Manuel Escriche made changes -
        Component/s FIWARE-TECH-HELP [ 10278 ]
        mev Manuel Escriche made changes -
        Reporter FIWARE-TECH-HELP [ fiware-tech-help ] FW External User [ fw.external.urser ]
        mev Manuel Escriche made changes -
        Reporter FW External User [ fw.external.urser ] Alberto Martín [ alberto.martin ]
        mev Manuel Escriche made changes -
        Workflow FW eRequest Workflow [ 17426 ] FW extRequest Workflow-II [ 20385 ]
        Issue Type eRequest [ 10101 ] extRequest [ 10104 ]
        FI-WARE Environment FI-LAB [ 10100 ]
        Hide
        cdangerville Cyril Dangerville added a comment -

        Fixed in next release document. The doc will given an example of command to extract the UUID from the certificate subject's common name (CN), like the one suggestion in this issue description. The actual command to get exactly the UUID value will be this one:
        $ openssl x509 -in johndoe-taz-client-cert.pem -subject -noout | grep -oP "(?<=/CN=)[^/]+(?=/?)"

        Show
        cdangerville Cyril Dangerville added a comment - Fixed in next release document. The doc will given an example of command to extract the UUID from the certificate subject's common name (CN), like the one suggestion in this issue description. The actual command to get exactly the UUID value will be this one: $ openssl x509 -in johndoe-taz-client-cert.pem -subject -noout | grep -oP "(?<=/CN=) [^/] +(?=/?)"
        cdangerville Cyril Dangerville made changes -
        Resolution Done [ 10000 ]
        Status Answered [ 10104 ] Closed [ 6 ]
        cdangerville Cyril Dangerville made changes -
        Priority Major [ 3 ] Minor [ 4 ]
        mev Manuel Escriche made changes -
        Fix Version/s Sprint 4.1.2 [ 10738 ]
        cdangerville Cyril Dangerville made changes -
        Summary [Fiware-tech-help] [Chp - Security][Access Control] Registration in the User Database FIWARE.Request.Lab.Security.AuthorizationPDP.InstallGuideIssueGettingClientDN
        mev Manuel Escriche made changes -
        Summary FIWARE.Request.Lab.Security.AuthorizationPDP.InstallGuideIssueGettingClientDN FIWARE.Request.Tech.Security.AuthorizationPDP.InstallGuideIssueGettingClientDN
        mev Manuel Escriche made changes -
        HD-Enabler AuthZForce [ 10887 ]
        HD-Chapter Security [ 10841 ]
        Transition Time In Source Status Execution Times Last Executer Last Execution Date
        Open Open Answered Answered
        15h 33m 1 Manuel Escriche 24/Oct/14 10:27 AM
        Answered Answered Closed Closed
        27d 5h 24m 1 Cyril Dangerville 20/Nov/14 2:52 PM

          People

          • Assignee:
            cdangerville Cyril Dangerville
            Reporter:
            alberto.martin Alberto Martín
          • Votes:
            0 Vote for this issue
            Watchers:
            2 Start watching this issue

            Dates

            • Created:
              Updated:
              Resolved: