Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Bug - On Upgrade from 6.3 -> 6.4 the upgrade process is choking on "Multiple certificates with the same modulus, can't fetch private key!" #581

Open
hildeb opened this issue Jul 17, 2024 · 0 comments

Comments

@hildeb
Copy link

hildeb commented Jul 17, 2024

Environment

  • Linux
  • n.a.
  • Znuny version: 6.4 (while migrating)

Expected behavior

a) znuny should do the right thing and maybe import the most recent, valid key - instead of not importing any key at all
b) at least the migration process should tell me WHICH IMPORT FAILED -- it tells me which one succeeded, but that's really not quite as interesting

Actual behavior

   Step 10 of 19: Reindex S/MIME certificates ...

ERROR: OTRS-otrs.Console.pl-Dev::Code::CPANAudit-57 Perl: 5.26.1 OS: linux Time: Tue Jul 16 17:13:46 2024

 Message: Multiple certificates with the same modulus, can't fetch private key!

 Traceback (58679): 

   Module: Kernel::System::Crypt::SMIME::ReIndexPrivate Line: 2790
   Module: scripts::Migration::Znuny::ReindexSMIMECertificates::Run Line: 41
   Module: scripts::Migration::_ExecuteComponent Line: 167
   Module: scripts::Migration::Run Line: 77
   Module: scripts/MigrateToZnuny6_4.pl Line: 82

ERROR: OTRS-otrs.Console.pl-Dev::Code::CPANAudit-57 Perl: 5.26.1 OS: linux Time: Tue Jul 16 17:13:46 2024

 Message: Multiple certificates with the same modulus, can't fetch private key!

 Traceback (58679): 

   Module: Kernel::System::Crypt::SMIME::ReIndexPrivate Line: 2790
   Module: scripts::Migration::Znuny::ReindexSMIMECertificates::Run Line: 41
   Module: scripts::Migration::_ExecuteComponent Line: 167
   Module: scripts::Migration::Run Line: 77
   Module: scripts/MigrateToZnuny6_4.pl Line: 82


ERROR: OTRS-otrs.Console.pl-Dev::Code::CPANAudit-57 Perl: 5.26.1 OS: linux Time: Tue Jul 16 17:13:46 2024

 Message: Multiple certificates with the same modulus, can't fetch private key!

 Traceback (58679): 

   Module: Kernel::System::Crypt::SMIME::ReIndexPrivate Line: 2790
   Module: scripts::Migration::Znuny::ReindexSMIMECertificates::Run Line: 41
   Module: scripts::Migration::_ExecuteComponent Line: 167
   Module: scripts::Migration::Run Line: 77
   Module: scripts/MigrateToZnuny6_4.pl Line: 82

ERROR: OTRS-otrs.Console.pl-Dev::Code::CPANAudit-57 Perl: 5.26.1 OS: linux Time: Tue Jul 16 17:13:46 2024

 Message: Multiple certificates with the same modulus, can't fetch private key!

 Traceback (58679): 

   Module: Kernel::System::Crypt::SMIME::ReIndexPrivate Line: 2790
   Module: scripts::Migration::Znuny::ReindexSMIMECertificates::Run Line: 41
   Module: scripts::Migration::_ExecuteComponent Line: 167
   Module: scripts::Migration::Run Line: 77
   Module: scripts/MigrateToZnuny6_4.pl Line: 82

ERROR: OTRS-otrs.Console.pl-Dev::Code::CPANAudit-57 Perl: 5.26.1 OS: linux Time: Tue Jul 16 17:13:46 2024

 Message: Multiple certificates with the same modulus, can't fetch private key!

 Traceback (58679): 

   Module: Kernel::System::Crypt::SMIME::ReIndexPrivate Line: 2790
   Module: scripts::Migration::Znuny::ReindexSMIMECertificates::Run Line: 41
   Module: scripts::Migration::_ExecuteComponent Line: 167
   Module: scripts::Migration::Run Line: 77
   Module: scripts/MigrateToZnuny6_4.pl Line: 82

    Public: Successfully re-indexed public files: 12bc19a1.0, 1e09d511.0, 33ed6679.0, 370595b5.0, 4a346044.0, 5e9e302b.0, 670fe1c5.0, 670fe1c5.1, 6ab64010.0, 7b384752.0, 7bd062e4.0, 88940a1d.0, 88940a1d.1, 8dcb65b2.0, 9b872b46.0, 9b872b46.1, b6296c9d.0, c8afd871.0, c8afd871.1, f30dd6ad.0, f5fc0234.0, f5fc0234.1, fc5a8f99.0.

    Private: Successfully re-indexed private files: 33ed6679.0, 370595b5.0, 4a346044.0, 7bd062e4.0.

    Step 11 of 19: Add dynamic fields 'TicketCalendarStartTime' and 'TicketCalendarEndTime'. ...

How to reproduce

Steps to reproduce the behavior:

We had some private keys with associated certificates. At the end of the validity period, we created new certificates FOR THE SAME KEY. We left the old certificates in the system. The old system never complained.

That's probably the cause for the issue.

Additional information

Screenshots

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Development

No branches or pull requests

1 participant