UBruns
1 Nickel

[iDRAC] OU and O are interchanged in Cert-Request using API

Jump to solution

Some more info: idrac 8, V2.30.30.30

If I create a certificate request using the webgui, the request ist fine.

If i use the api (Method: GenerateSSLCSR from iDRACCardService) the OU and O values are interchanged!

Example:

Values configured:
OU=MyOU
O=MyCompany

In the CSR this values are interchanged. I checked it using Windows "CertUtil.exe -dump 'idrac.csr'"
The output delivers:
OU=MyCompany
O=MyOU

Is it a bug?

Regards

Ulli

0 Kudos
1 Solution

Accepted Solutions
Moderator
Moderator

RE: [iDRAC] OU and O are interchanged in Cert-Request using API

Jump to solution

Thank you for the information.


We have reproduced this issue and are in the process of adding it into the fix list of a future iDRAC firmware update. I suggest that  you monitor iDRAC updates for a fix for this issue.

Thanks

Daniel Mysinger
Dell EMC, Enterprise Engineer

Get support on Twitter @DellCaresPRO

0 Kudos
3 Replies
Moderator
Moderator

RE: [iDRAC] OU and O are interchanged in Cert-Request using API

Jump to solution

Hello

Are you referring to using WINRM? Please provide more details on the application used to send the commands and the exact commands being sent.

Thanks

Daniel Mysinger
Dell EMC, Enterprise Engineer

Get support on Twitter @DellCaresPRO

0 Kudos
Highlighted
UBruns
1 Nickel

RE: [iDRAC] OU and O are interchanged in Cert-Request using API

Jump to solution

Hi Daniel!

I attached a PowerShell script. The content is an excerpt of my scripts, regarding the problem.
(Remove the ".txt" at the end from the file name)

This is an excerpt of the "certutil.exe -dump" output from a csr-file created by the WebGui:

Subject:

E=admin@FQDN.com
CN=idrac.FQDN.com
OU=MyDepartment
O=MyCompany
L=SampleCity
S=SampleState
C=US


This is an excerpt of the "certutil.exe -dump" output from a csr-file created by the Script (unsing the api):

Subject:
E=admin@FQDN.com
CN=idrac.FQDN.com
OU=MyCompany
O=MyDepartment
L=SampleCity
S=SampleState
C=US

Notice that the OU and O values are interchanged!

Ulli



Tags (2)
0 Kudos
Moderator
Moderator

RE: [iDRAC] OU and O are interchanged in Cert-Request using API

Jump to solution

Thank you for the information.


We have reproduced this issue and are in the process of adding it into the fix list of a future iDRAC firmware update. I suggest that  you monitor iDRAC updates for a fix for this issue.

Thanks

Daniel Mysinger
Dell EMC, Enterprise Engineer

Get support on Twitter @DellCaresPRO

0 Kudos