Tomas Gustavsson

@sandorszoke I like the thorough listing of consistency checks. Different logic for a field in different types of certificates almost always leads to issues in the field so good linting...

I think it is this issue (https://jira.primekey.se/browse/ECA-10763, which you can't access right now unfortunately). It is fixed in 7.9.1. I'll see what we can do to get that out.

Thanks. The updated code for next release looks like this: ``` // Check if we should exclude all dns names private static boolean isAllDNSNamesExcluded(GeneralSubtree[] excluded) { if (Objects.isNull(excluded)) { return...

That code will work fine as well, you can keep going with that. For my code snippet, this line also need to be added in the beginning of the file....

Closing this issue as fixed, waiting for the new release will avoid using the workaround.

For the ejbca-custom question I can answer. Everything under ejbca-custom is copied "as-is", i.e. you should place modified properties files under /opt/ejbca-custom/cont. This enables _any_ files to be modified. Documentation:...

For 7.10 (in a few weeks) documentation is updated for the jks/p12 issue with WildFly 24+.

It's not on the roadmap. If there is a PR we could surely look at it.

There may be more information further down (or up) in the message in server.log. It could be credentials, it could be TLS certificates, or something else. What LDAP setting you...

"response: [EOF]" sounds almost like a non-TLS connection trying to connect to a TLS port. Is port 465 TLS on your mail server? By default I _think_ the destination port...