[BUG] CMP alias created with ejbca.sh requires extra save in GUI

[epistula76]

Describe the Bug

In my test setup, I create CMP aliases using

docker exec ejbca /opt/keyfactor/ejbca/bin/ejbca.sh config cmp addalias ... &
docker exec ejbca /opt/keyfactor/ejbca/bin/ejbca.sh config cmp updatealias ...

This works without any problems, but if actions are started against the paths with 'cmp ir' or 'cmp kur' for example, this error appears in the log:

ERROR [org.ejbca.core.protocol.cmp.authentication.VerifyPKIMessage] (default task-4) The number of authentication modules does not match the number of authentication parameters. 1 modules - 2 parameters
INFO [org.ejbca.core.protocol.cmp.RevocationMessageHandler] (default task-4) CMP module configuration error.

This problem can be solved quite easily by briefly calling up the CMP aliases in the GUI using edit and save. Then everything works as expected.

Expected Behavior

The extra round in the GUI should not be necessary.

Product Deployment

Debian 12 in WSL2
https://hub.docker.com/r/keyfactor/ejbca-ce
Version: 9.0.0

[primetomas]

What are the updatealias parameters you use? You can do most things there. I'd also like to point to the uploadfile command that yo ucan use to set all different options. You can dumpalias after you have a working one, there is your template.

[epistula76]

Good point, thx! I was not aware of uploadfile & dumpalias before, sounds more elegant. Here are the full list of commands I use:

docker exec ejbca /opt/keyfactor/ejbca/bin/ejbca.sh config cmp addalias --alias p/ODC/initialization
docker exec ejbca /opt/keyfactor/ejbca/bin/ejbca.sh config cmp updatealias --alias p/ODC/initialization --key defaultca --value "ODCRootCA"
docker exec ejbca /opt/keyfactor/ejbca/bin/ejbca.sh config cmp updatealias --alias p/ODC/initialization --key operationmode --value client
docker exec ejbca /opt/keyfactor/ejbca/bin/ejbca.sh config cmp updatealias --alias p/ODC/initialization --key authenticationmodule --value EndEntityCertificate
docker exec ejbca /opt/keyfactor/ejbca/bin/ejbca.sh config cmp updatealias --alias p/ODC/initialization --key allowautomatickeyupdate --value true
docker exec ejbca /opt/keyfactor/ejbca/bin/ejbca.sh config cmp updatealias --alias p/ODC/initialization --key allowupdatewithsamekey --value false
docker exec ejbca /opt/keyfactor/ejbca/bin/ejbca.sh config cmp addalias --alias p/ODC/keyupdate
docker exec ejbca /opt/keyfactor/ejbca/bin/ejbca.sh config cmp updatealias --alias p/ODC/keyupdate --key defaultca --value "ODCRootCA"
docker exec ejbca /opt/keyfactor/ejbca/bin/ejbca.sh config cmp updatealias --alias p/ODC/keyupdate --key operationmode --value client
docker exec ejbca /opt/keyfactor/ejbca/bin/ejbca.sh config cmp updatealias --alias p/ODC/keyupdate --key authenticationmodule --value EndEntityCertificate
docker exec ejbca /opt/keyfactor/ejbca/bin/ejbca.sh config cmp updatealias --alias p/ODC/keyupdate --key allowautomatickeyupdate --value true
docker exec ejbca /opt/keyfactor/ejbca/bin/ejbca.sh config cmp updatealias --alias p/ODC/keyupdate --key allowupdatewithsamekey --value false