Symptoms
A CA certificate with 2 or more certificates included in the CA certificate chain is being imported into OA using the pem.importCertificate API method.
After the method is executed, there are duplicate records in the apache_certificates
OA database table in case 2 or more certificates are passed as the ca_cert
parameter value.
Cause
The certificates that are included in the CA certificate chain and passed within the ca_cert
field are not separated or separated with a single line break (the \012
character sequence).
Resolution
Certificates must be separated with an empty line - two line breaks (the \012\012
sequence) between CA certificates.
Documentation bug POA-111010: "pem.importCertificate API guide - add info about several CA certificates (certificates chain)" was reported to the OA maintenance team regarding this issue.