Skip to content

Re-enabling user should put their SMTP client cert back

Now that #7690 (closed) is resolved, I tested this on cricket, it worked fine - I created a test user, sent mail with it, then disabled that test user, and then the user wasn't able to send mail anymore.

Unfortunately, re-enabling this user doesn't re-enable that user's ability to send mail again.

I looked at the user's entry in the database after re-enabling them, and there is no cert_fingerprints entry for them:

root@cricket:/var/log# curl -s 'localhost:5984/identities/_design/Identity/_view/by_address?key="vividtest@leap.se"&include_docs=true&reduce=false'
{"total_rows":18,"offset":16,"rows":[
{"id":"52f11b88f7f5fa9e2730dc690b3d2405","key":"vividtest@leap.se","value":1,"doc":{"_id":"52f11b88f7f5fa9e2730dc690b3d2405","_rev":"5-5cacaf3e3767b71dd0fc72ce2f5fe71f","user_id":"52f11b88f7f5fa9e2730dc690b1d7a86","address":"vividtest@leap.se","destination":"vividtest@leap.se","keys":{"pgp":"-----BEGIN PGP PUBLIC KEY BLOCK-----\n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\nShxMpuKh0ZTFHhyPbS5HCnctSiOy314JddxM2mFkXYEK70jyrhuXEw==\n=kK1o\n-----END PGP PUBLIC KEY BLOCK-----\n"},"cert_fingerprints":{},"type":"Identity"}}
]}

a normal user would look like this:

root@cricket:/var/log# curl -s 'localhost:5984/identities/_design/Identity/_view/by_address?key="trustytest@leap.se"&include_docs=true&reduce=false'
{"total_rows":18,"offset":17,"rows":[
{"id":"52f11b88f7f5fa9e2730dc690b3d20c0","key":"trustytest@leap.se","value":1,"doc":{"_id":"52f11b88f7f5fa9e2730dc690b3d20c0","_rev":"3-3bc5baaa264be6298938e6f2e189d901","user_id":"52f11b88f7f5fa9e2730dc690b1d75f1","address":"trustytest@leap.se","destination":"trustytest@leap.se","keys":{"pgp":"-----BEGIN PGP PUBLIC KEY BLOCK-----\n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\nLF0Pp3TA3tAwDyKDSAK4ccAtMc7dTnVfnVm+faCsG2VTwA5J4MdDfKwh\n=kbOl\n-----END PGP PUBLIC KEY BLOCK-----\n"},"cert_fingerprints":{"8d:fe:49:b5:65:af:ae:69:b0:a3:7e:7b:16:1f:6b:0f:74:be:17:c8":"2016-01-03"},"type":"Identity"}}
]}
root@cricket:/var/log# 

(from redmine: created on 2016-02-02, closed on 2016-02-10)