Ticket #60 (new defect)

Opened 2 years ago

Case sensitivity between bbstored-certs and Boxi

Reported by: achim Owned by: ben
Priority: normal Milestone:
Component: bbstored Version: 0.11rc2
Keywords: Cc:

Description

Account numbering is working now, however a case sensitivity bug has now surfaced between bbstoreaccounts (accepts CAPITAL and small letters), bbstored-certs (requires small letters) and the default name offered by Boxi on Windows (CAPITALS). Windows does not have case sensitivity, perhaps this is easy to fix on the client side? I will open a new bug.

/etc/boxbackup# bbstoreaccounts create 75AB23C 0 2000M 3000M

/etc/boxbackup# bbstoreaccounts info 75AB23C Account ID: 075ab23c Last object ID: 1 Blocks used: 1 (0.00Mb) Blocks used by old files: 0 (0.00Mb) Blocks used by deleted files: 0 (0.00Mb) Blocks used by directories: 1 (0.00Mb) Block soft limit: 512000 (2000.00Mb) Block hard limit: 768000 (3000.00Mb) Client store marker: 0

/etc/boxbackup# bbstoreaccounts info 75ab23c Account ID: 075ab23c Last object ID: 1 Blocks used: 1 (0.00Mb) Blocks used by old files: 0 (0.00Mb) Blocks used by deleted files: 0 (0.00Mb) Blocks used by directories: 1 (0.00Mb) Block soft limit: 512000 (2000.00Mb) Block hard limit: 768000 (3000.00Mb) Client store marker: 0

/etc/boxbackup# bbstored-certs ca sign 75AB23C-csr.pem Certificate request filename does not match name in certificate (BACKUP-75ab23c) at /usr/bin/bbstored-certs line 177.

/etc/boxbackup# mv 75AB23C-csr.pem 75ab23c-csr.pem

/etc/boxbackup# bbstored-certs ca sign 75ab23c-csr.pem

This certificate is for backup account

75ab23c

Ensure this matches the account number you are expecting. The filename is

75ab23c-csr.pem

which should include this account number, and additionally, you should check that you received it from the right person.

Signing the wrong certificate compromises the security of your backup system.

Would you like to sign this certificate? (type 'yes' to confirm) yes Signature ok subject=/CN=BACKUP-75ab23c Getting CA Private Key

Certificate signed.

Send the files

ca/clients/75ab23c-cert.pem ca/roots/serverCA.pem

to the client.

Note: See TracTickets for help on using tickets.