cancel
Showing results for 
Search instead for 
Did you mean: 

v5.3 shows all certificates (not only appropriate ones)

New Member

v5.3 shows all certificates (not only appropriate ones)

Hi, 

 

I have following "types" of certificates stored on a smart card:

(KU: Key Usage; EKU: Enhanced Key Usage)

  • #1 -  KU: Digital Signature (80), EKU: Client Authentication, Smart Card Logon
  • #2 -  KU: Digital Signature (80), EKU: Secure Email
  • #3 -  KU: Key Encipherment (20), EKU: <notSet>

When using versions of Pulse Desktop client for Windows prior the v5.3, the certificate selector only showed  the certificate #1, which should be the only valid choice (EKU: Client Authentication, KU: Digital Signature).

 

Currently I am using version v5.3.1183 and in this version, the certificate selector is showing all 3 certificates, although only #1 should be shown (#2 has inappropriate EKU, #3 has inappropriate KU).

 

Is this a known bug in v5.3? Was this fixed in new releases?

 

Thanks for helping me out!

 

     Blaz

 

2 REPLIES 2
Moderator
Moderator

Re: v5.3 shows all certificates (not only appropriate ones)

Sounds like a bug! Please try using 5.3R7 Pulse Client and notice the behavior.

Moderator

Re: v5.3 shows all certificates (not only appropriate ones)

Have you defined only the specific EKU that you want used?
I believe that sounds fine; however, without seeing the log I cannot confirm
As mentioned by @Ray, please open a case for confirmation