Symptoms

A CA certificate with 2 or more certificates included in the CA certificate chain is being imported into OA using the pem.importCertificate API method.

After the method is executed, there are duplicate records in the apache_certificates OA database table in case 2 or more certificates are passed as the ca_cert parameter value.

Cause

The certificates that are included in the CA certificate chain and passed within the ca_cert field are not separated or separated with a single line break (the \012 character sequence).

Resolution

Certificates must be separated with an empty line - two line breaks (the \012\012 sequence) between CA certificates.

Documentation bug POA-111010: "pem.importCertificate API guide - add info about several CA certificates (certificates chain)" was reported to the OA maintenance team regarding this issue.

Internal content