Re: [Openca-Users] PostgreSQL 8.03

[Michael Bell]

Niels Peuyn wrote:

I installed a new CA (0.9.2.2) with PostgreSQL 8.03 on a FreeBSD 5.4 System and down loaded 2 CSRs from the Public Interface. When I try to list the CSR on the CA WEB interface

following error message appears.

(Active CSRs - New)

Error 700
General Error Database failed with errorcode 20032. SELECT_FAILED

PostgreSQL
----------------------------------------------------
openca=> select req_key,cn,status from request;
 req_key |    cn     | status
---------+-----------+--------
    1056 | Student-1 | NEW
    1568 | Student-7 | NEW

openca=> select req_key,cn,status from request where (req_key=1056);
 req_key |    cn     | status
---------+-----------+--------
    1056 | Student-1 | NEW

PostgreSQL Log:
----------------------------------------------------
LOG:  connection received: host=::1 port=53468
LOG:  connection authorized: user=openca database=openca
LOG:  statement: begin
LOG:  duration: 0.536 ms
LOG:  statement: SET NAMES 'ISO8859-1'
LOG:  duration: 0.903 ms
LOG:  statement: select count(*)  from request where status like $1
LOG:  statement: select * from request where (req_key >= $1 ) and  (status like 
$2) order by req_key LIMIT 20
LOG:  statement: select MIN(req_key) from request where  (status like $1)
LOG:  statement: select * from request where (req_key=$1)

Michael
--
_______________________________________________________________

Michael Bell                    Humboldt-Universitaet zu Berlin

Tel.: +49 (0)30-2093 2482       ZE Computer- und Medienservice
Fax:  +49 (0)30-2093 2704       Unter den Linden 6
[EMAIL PROTECTED]   D-10099 Berlin
_______________________________________________________________

This is a protection against SQL injection. We never put arguments directly into SQL queries - and if we did it then it is a bug. The $1 is a placeholder for the argument which is submitted seperately. Does the PostgreSQL result contain a real errormessage? Usually there is a detailed log of PostgreSQL if there is a query error. If you want more details from the database then please set the DEBUG switch in etc/database/DBI.conf to 1. After this var/log/stderr.log contains a lot of messages.

smime.p7s
Description: S/MIME Cryptographic Signature