Enroll option not visible for End entities in UI while creating new Certificate

[hemanthg-iitk]

HI team,

1. I am not able to see Enroll option after Add action in UI for End entities. Also, there is no option in search to navigate to Enrollment page.

2. When i navigate directly to RA web to make new enrollment, I dont see option to select "EJBCA generates key pair"

My end goal is to enable spring boot app to hit HTTPS EJBCA instance with SAN enabled certificate instead of default Mamangement CA. With default certificate, spring boot app throws an error since SAN is not enabled for ip or DNS in mangement CA.

[primetomas]

1. No in the Admin UI there is no enroll. Different roles, the admin doesn't enroll for users.
2. "Key-pair generation: By the CA" is "EJBCA generates key pair"

The default installation does use a SAN, but maybe you haven't configured it to use the SAN that you use from your client, i.e. it's set to localhost and you try to use "ejbca-server" from externally. You can configure this.

[hemanthg-iitk]

HI @primetomas , Running from Container

[primetomas]

How did you start the container?
I followed the quick-start workflow from here. And I get a DNSName altname in the server certificate issued.

[primetomas]

the dnsname "mycahostname" is taken from the -h parameter I pass to docker run.

[hemanthg-iitk]

Hello @primetomas,
When i specify IP with TLS_SETUP_ENABLED="true" -e TLS_SAN="IP:192.16X.1XY.1ZZ" , it gets translated in SAN as dnsName=192.16X.1XY.1ZZ and we still see the "No subject alternative names matching IP address 192.16X.1XY.1ZZ found" from client application. Can you pls provide steps to enable SAN with IP so that it translates to ipAddress=192.16X.1XY.1ZZ ?

[primetomas]

Where did you find TLS_SAN? I can't see that it does anything at all. Didn't you set "-h 192.168..."?

You could try to override web.properties that have a default setting:
httpsserver.an=dnsName=${httpsserver.hostname}

There you could do something like:
httpsserver.an=dnsName=${httpsserver.hostname},iPAddress=192.168.122.22