sge_ca only does partial matches against GECOS data

[markdixon]

Hi,

When the sge_ca tool supplied with grid engine is used to create a new certificate, it uses the supplied GECOS data to check if a certificate with the same common name already exists.

That check only does a partial match on CN=<gecos info>, so if a new certificate's GECOS data matches the start of another certificate's GECOS data, it will refuse to create the certificate.

e.g. the cert created by the first command below prevents the second cert from being created:

$SGE_ROOT/util/sgeCA/sge_ca -user "user1:Bobby:bobby@somewhere"
$SGE_ROOT/util/sgeCA/sge_ca -user "user2:Bob:bob@somewhere"

The attached patch fixes this, prepared against 8.1.8.

Cheers,

Mark

[Mark Dixon <m.c.dixon@…>]

In 4805/sge:

Fix #1517: Do a full, not a partial match on GECOS data when selecting cert