Am 22.08.24 um 15:02 schrieb Andreas Piesk via OpenXPKI-users:
Hello list,

I imported a cert with openxpkicli and tried to change metadata afterwards. the 
workflow failed because the validator global_system_id is missing:

2024/08/22 14:15:55 ERROR workflow_error exception thrown from 
[Workflow::Factory: 806; before: Workflow::Action: 51]: No validator with name 
'global_system_id' available 
[pid=1423|sid=pvcE|rid=555ffb10b368|wftype=change_metadata|wfid=7423]
2024/08/22 14:15:55 ERROR Error while executing API command; __caller__ => 
/usr/share/perl5/OpenXPKI/Service/Default.pm:663, __error__ => No validator with 
name 'global_system_id' available 
[pid=1423|sid=pvcE|rid=555ffb10b368|wftype=change_metadata|wfid=7423]


I created a fqdn validator as a workaround, not sure if system_id should be an 
fqdn or a simple string

workflow/global/validator/system_id.yaml:

class: OpenXPKI::Server::Workflow::Validator::Regex
arg:
  - $meta_system_id
param:
    regex: fqdn
#   error: I18N_OPENXPKI_UI_WORKFLOW_METADATA_VALIDATOR_SYSTEM_ID_FAILED


I create a PR if I know, how system_id is defined.


quick addendum:

the certificate search provides the following meta attribute as search 
criterias:

Requester
Requester email
Entity name

But "Show Metadata" and "Change Metadata" both handle only

Email Contact
System Identifier

I think the mapping of these UI labels to certificate_attribute is

meta_entity -> Entity name
meta_requestor -> Requester
meta_email -> Requester email / Email Contact
meta_system_id -> System Identifier

1.
Shouldn't the labels match if they reference the same data?
I mean, "Email Contact" to "Requester email" or vice versa?


2.
Shouldn't "Show Metadata" and "Change Metadata" show/change the metadata attributes I can search 
for, at leats "Requester" and "Requester email"?
meta_entity is set be scep I think, maybe that is not meant to be changed. meta_system_id 
is set in "change metadata" but where is it used?

Best,
-ap



_______________________________________________
OpenXPKI-users mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/openxpki-users

Reply via email to