CA Gateway 3.6.0 fixes the following bugs.
- Unexpected warning logs (ATEAM-18776)
- URL not hardcoded on Sectigo configuration (ATEAM-18856)
- Error when renewing a Sectigo-issued SSL certificate (ATEAM-18858)
- Sectigo plugin requires profile synchronization enabled by default (ATEAM-18863)
- Failed deployments reported as successful (ATEAM-18893)
- Digicert CA with Certificate Enrollment Gateway not supported (ATEAM-18920)
- Documentation does not describe the risks of enabling SAN attributes on request (ATEAM-19009)
- EJBCA plugin ignores the default-query-page-size setting (ATEAM-19038)
- Error when enrolling certificates with a DigiCert CA (ATEAM-19060)
Unexpected warning logs (ATEAM-18776)
CA Gateway records unexpected warning logs triggered by the Spring framework. For example:
Check the corresponding BeanPostProcessor declaration and its dependencies/advisors. If this bean does not have to be post-processed, declare it with ROLE_INFRASTRUCTURE.URL not hardcoded on Sectigo configuration (ATEAM-18856)
When integrating a Sectigo CA, the configuration settings require entering a URL setting. However, this URL value should be hardcoded, as is always the following.
https://cert-manager.comError when renewing a Sectigo-issued SSL certificate (ATEAM-18858)
CA Gateway returns an error when trying to renew an SSL certificate using a Sectigo CA.
Sectigo plugin requires profile synchronization enabled by default (ATEAM-18863)
The enable-ca-profile-sync setting defaults to false for all profiles. However, the Sectigo configuration requires this setting to default to true.
Failed deployments reported as successful (ATEAM-18893)
When a CA Gateway deployment fails, the management console incorrectly displays the deployment as successful, even though the process has failed.
Digicert CA with Certificate Enrollment Gateway not supported (ATEAM-18920)
Certificate issuance fails in the following situation:
- The Certificate Authority is Digicert CA
- The client application is Certificate Enrollment Gateway
- The enrollment protocol is ACME
Documentation does not describe the risks of enabling SAN attributes on request (ATEAM-19009)
The CA Gateway documentation does not clearly explain the risks associated with allowing Subject Alternative Name (SAN) attributes in enrollment requests.
Bug resolution: A new section in Enabling SAN attributes in the enrollment request describes the risks.
EJBCA plugin ignores the default-query-page-size setting (ATEAM-19038)
The plugin to integrate EJB Certificate Authorities ignores the value of the following configuration setting.
config:cagw.cert-event-tracking.default-query-page-sizeError when enrolling certificates with a DigiCert CA (ATEAM-19060)
CA Gateway returns a "cagw-5000" error when using a DigiCert CA.