/usr/bin/security -Z always finds same certificate

Originator:jnojr1
Number:rdar://16639081 Date Originated:4/16/2014
Status:Open Resolved:
Product:OSX Product Version:All
Classification:UI/Usability Reproducible:Always
 
Summary:
The -Z option allows you to specify the SHA-1 hash of a certificate instead of it's common name (which can contain some pretty odd characters)  But any query for any SHA-1 value ALWAYS returns the same certificate, 2DFF6336E33A4829AA009F01A1801EE7EBA582BB "Prefectural Association For JPKI"

Steps to Reproduce:
security find-certificate -Z <any hash for any certificate> /System/Library/Keychains/SystemRootCertificates.keychain

Expected Results:
It should display the attributes of the certificate in question

Actual Results:
It always displays the attributes for 2DFF6336E33A4829AA009F01A1801EE7EBA582BB "Prefectural Association For JPKI"

Comments


Please note: Reports posted here will not necessarily be seen by Apple. All problems should be submitted at bugreport.apple.com before they are posted here. Please only post information for Radars that you have filed yourself, and please do not include Apple confidential information in your posts. Thank you!