You are viewing a plain text version of this content. The canonical link for it is here.
Posted to dev@directory.apache.org by "Edouard BAUDRY (JIRA)" <ji...@apache.org> on 2014/02/17 15:28:20 UTC

[jira] [Created] (DIRSERVER-1959) Certificates corruption during replication

Edouard BAUDRY created DIRSERVER-1959:
-----------------------------------------

             Summary: Certificates corruption  during replication
                 Key: DIRSERVER-1959
                 URL: https://issues.apache.org/jira/browse/DIRSERVER-1959
             Project: Directory ApacheDS
          Issue Type: Bug
    Affects Versions: 2.0.0-M15
         Environment: Replication master/slave.
master with Windows server 2003 R2
slave with Windows server 2003 R2 or Windows 7
            Reporter: Edouard BAUDRY
            Priority: Critical


Environment: "master/slave" LDAP replication.
Slave configuration:
  ads-replAliasDerefMode: never
  ads-replAttributes: *
  ads-replConsumerId: 1
  ads-replProvHostName: SLAVE-DOMAIN-NAME
  ads-replProvPort: 10389
  ads-replrefreshinterval: 60000
  ads-replRefreshNPersist: true
  ads-replSearchFilter: (objectClass=*)
  ads-replSearchScope: sub
  ads-replSearchSizeLimit: 0
  ads-replSearchTimeOut: 0
  ads-replUserDn: uid=admin,ou=system
  ads-replUserPassword: password
  ads-searchBaseDN: dc=data,dc=serverDownload


To reproduce this issue:
1/ Put a certificate in "master" LDAP as binary field in field "usercertificate"
2/ See with Apache Directory Studio the field "usercertificate": it's a x509v3 with all info readable
3/ wait for the replication to the "slave" LDAP
4/ see with Apache Directory Studio the field "usercertificate": "Invalid Certificate (2340 Bytes)" with "2340 bytes" the size of the certificate.

After verification, all Bytes upper than 0x7F are replaced by 0xEFBFBD.
It appears to be linked to UTF-8 encoding/decoding, but the field is a binary field.

It's blocking as I can't use replication with this issue.

Thanks in advance for your help



--
This message was sent by Atlassian JIRA
(v6.1.5#6160)