Bug 31369

Summary:	Expiry date of certificate not checked by univention-certificate
Product:	UCS	Reporter:	Philipp Hahn <hahn>
Component:	SSL	Assignee:	Philipp Hahn <hahn>
Status:	CLOSED FIXED	QA Contact:	Janek Walkenhorst <walkenhorst>
Severity:	normal
Priority:	P3	CC:	gohmann
Version:	UCS 3.1
Target Milestone:	UCS 4.1-2-errata
Hardware:	Other
OS:	Linux
What kind of report is it?:	---	What type of bug is this?:	---
Who will be affected by this bug?:	---	How will those affected feel about the bug?:	---
User Pain:		Enterprise Customer affected?:
School Customer affected?:		ISV affected?:
Waiting Support:		Flags outvoted (downgraded) after PO Review:
Ticket number:		Bug group (optional):
Max CVSS v3 score:

Description Philipp Hahn

2013-05-15 20:49:24 CEST

# /usr/sbin/univention-certificate check -name XXX85.phahn.dev
Certificate "XXX85.phahn.dev" is valid
# date
Mi 15. Mai 20:46:31 CEST 2013
# openssl x509 -noout -enddate -in /etc/univention/ssl/XXX85.phahn.de/cert.pem 
notAfter=May 14 17:56:35 2013 GMT
# openssl x509 -noout -checkend 0 -in /etc/univention/ssl/XXX85.phahn.de/cert.pem ; echo $?
1


"univention-certificate check" only does a "univention-certificate list | grep"

Comment 1 Philipp Hahn

2016-06-23 14:12:26 CEST

r70561 | Bug #31369 ssl: Fix certificate not expired

Package: univention-ssl
Version: 10.0.0-11.168.201606230839
Version: 10.0.0-12.169.201606231402
Branch: ucs_4.1-0
Scope: errata4.1-2

r70577 | Bug #31369,Bug #39257,Bug #24094,Bug #40498,Bug #25285,Bug #35748: ssl YAML
 univention-ssl.yaml

Comment 2 Philipp Hahn

2016-06-27 17:47:47 CEST

r70642 | Bug #31369 SSL: Check SSL expiration date
 gawk -> mawk

Package: univention-ssl
Version: 10.0.0-15.172.201606271746
Branch: ucs_4.1-0
Scope: errata4.1-2

Comment 3 Janek Walkenhorst

2016-07-14 16:54:34 CEST

Tests: OK
Code review: OK
Advisory: OK

Comment 4 Janek Walkenhorst

2016-07-21 15:15:59 CEST

<http://errata.software-univention.de/ucs/4.1/213.html>