Skip to content

labca is not handling single quotes in CN and O properly #237

Description

@TheSainEyereg
Image
gui-1  | 2026/06/18 10:09:53 Listening on 0.0.0.0:3000...
gui-1  | 2026/06/18 10:10:19 GET /
gui-1  | 2026/06/18 10:10:19 GET /login
gui-1  | 2026/06/18 10:10:19 GET /setup
gui-1  | 2026/06/18 10:10:32 POST /setup
gui-1  | 2026/06/18 10:10:41 POST /setup
gui-1  | 2026/06/18 10:11:00 POST /setup
gui-1  | exit status 1: 2026/06/18 10:11:00 Preparing root ceremony for /opt/boulder/labca/certs/webpki/root-01-cert.pem
gui-1  | 2026/06/18 10:11:00 Opened PKCS#11 session for slot 1759437217
gui-1  | 2026/06/18 10:11:00 Generating RSA key with 4096 bit modulus and public exponent 65537 and ID 12ebdcdc
gui-1  | 2026/06/18 10:11:00 	Encoded public exponent (65537) as: 010001
gui-1  | 2026/06/18 10:11:01 Key generated
gui-1  | 2026/06/18 10:11:01 Extracting public key
gui-1  | 2026/06/18 10:11:01 	Public exponent: 65537
gui-1  | 2026/06/18 10:11:01 	Modulus: (4096 bits) BC98DC1F85D4C1983F12371020D6FCB601B904EDCCF6FDB5CA15DF37BEED9D8C789C23A6CD3F6419E36C5355FB6D1FEA981C0397A5B1F369D8062C43EE985A4C10D4D0EAEFE7C284FFC4AC10D4C35684220D22418820DD8F7931B186447F825FA0EE941E9BAEF425C7AFA917849835ABA487725B9AACE307D7EB3CD101738B0C52EF7F84E0F6ED777E0D6B0CC1C60D1C86F9FEFA8D0E21EFC8249A1666B39DA077D54B522D177D6CFCB6D5E4756F5068B22E8413A75B0452CED11525FF34B1B2DA1AEBB15B5A894A333C588C5BD02462577848DD4AB5B065287B9A71378FD0520DFBD1EF8D0D2F9C294C2C6671C485E6784B2D98A960F0F86B71CF15C13F10800381525774E10CB13940D4A80FF66D84C36933E30C145C3F7DF03EACEB9471363F0232BD116666DBBA3A3C63BE6972B4288B6D0CFF8458B673E6C7CEF881148805DE10AB3384174A55661C032DD9036AEAC7F412EDAE7BD25EF65D5BFC98C8F6A56D3D48F61FE36A298C95B3074D71703FDA584AA72F8D36576FA80CA0A8AA20BB76A75368CB85042D329B01C8A0CEDD906997ADF9DCE08B7BCA2D82E4E6F77BE0F759FF6E2797C7CAB25EC8BB27A886EA07D80DDB2140ACBE852EFF4D1BCE363955E578C6A8B0517DF60C5492DE1CB108B9D64719D1C5C4A5A7F8A8C6C96E6079220E3EC7906A21A0BF0CF7F18E7CC9AA7E463FB4BCA94E84EEF836E82E388D
gui-1  | 2026/06/18 10:11:01 Extracted public key
gui-1  | 2026/06/18 10:11:01 Public key PEM:
gui-1  | -----BEGIN PUBLIC KEY-----
gui-1  | MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAvJjcH4XUwZg/EjcQINb8
gui-1  | tgG5BO3M9v21yhXfN77tnYx4nCOmzT9kGeNsU1X7bR/qmBwDl6Wx82nYBixD7pha
gui-1  | TBDU0Orv58KE/8SsENTDVoQiDSJBiCDdj3kxsYZEf4JfoO6UHpuu9CXHr6kXhJg1
gui-1  | q6SHcluarOMH1+s80QFziwxS73+E4Pbtd34NawzBxg0chvn++o0OIe/IJJoWZrOd
gui-1  | oHfVS1ItF31s/LbV5HVvUGiyLoQTp1sEUs7RFSX/NLGy2hrrsVtaiUozPFiMW9Ak
gui-1  | Yld4SN1KtbBlKHuacTeP0FIN+9HvjQ0vnClMLGZxxIXmeEstmKlg8Phrcc8VwT8Q
gui-1  | gAOBUld04QyxOUDUqA/2bYTDaTPjDBRcP33wPqzrlHE2PwIyvRFmZtu6Ojxjvmly
gui-1  | tCiLbQz/hFi2c+bHzviBFIgF3hCrM4QXSlVmHAMt2QNq6sf0Eu2ue9Je9l1b/JjI
gui-1  | 9qVtPUj2H+NqKYyVswdNcXA/2lhKpy+NNldvqAygqKogu3anU2jLhQQtMpsByKDO
gui-1  | 3ZBpl6353OCLe8otguTm93vg91n/bieXx8qyXsi7J6iG6gfYDdshQKy+hS7/TRvO
gui-1  | NjlV5XjGqLBRffYMVJLeHLEIudZHGdHFxKWn+KjGyW5geSIOPseQaiGgvwz38Y58
gui-1  | yap+Rj+0vKlOhO74NuguOI0CAwEAAQ==
gui-1  | -----END PUBLIC KEY-----
gui-1  | 
gui-1  | 2026/06/18 10:11:01 Public key written to "/opt/boulder/labca/certs/webpki/root-01-pubkey.pem"
gui-1  | 2026/06/18 10:11:02 root ceremony failed: certificate failed pre-issuance lint: failed lint(s): e_subj_contains_html_entities (Subject.CommonNames contains an HTML entity)
gui-1  | 2026/06/18 10:11:02 failed to create certificate: exit status 1
gui-1  | 2026/06/18 10:11:02 _certCreate: create failed: failed to create certificate, see logs for details
gui-1  | 2026/06/18 10:11:09 GET /logs/cron
gui-1  | 2026/06/18 10:11:09 GET /ws?logType=cron
gui-1  | 2026/06/18 10:11:10 GET /logs/labca
gui-1  | 2026/06/18 10:11:10 GET /ws?logType=labca

Metadata

Metadata

Assignees

No one assigned

    Labels

    No labels
    No labels

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions