Created attachment 1458553 [details]
profile.xml

Description of problem:

In current case, If we have more than one userExtensionDefaultImpl
ca-profile-mod doesn't work and failed with:

[12/Jul/2018:15:59:42][http-bio-8443-exec-13]: BasicProfile: createProfilePolicy:  config created.
[12/Jul/2018:15:59:42][http-bio-8443-exec-13]: BasicProfile: createProfilePolicy: ends
[12/Jul/2018:15:59:42][http-bio-8443-exec-13]: BasicProfile: createProfilePolicy: begins
[12/Jul/2018:15:59:42][http-bio-8443-exec-13]: WARNING attempt to add duplicate Policy userExtensionDefaultImpl:noConstraintImpl Contact System Administrator.
[12/Jul/2018:15:59:42][http-bio-8443-exec-13]: SignedAuditLogger: event CONFIG_CERT_PROFILE
[12/Jul/2018:15:59:42][http-bio-8443-exec-13]: changeProfileData: Error changing profile inputs/outputs/policies: Attempt to add duplicate Policy : userExtensionDefaultImpl:noConstraintImpl

Note: This feature can be a requirement for lab as they wanted to include many certificate request extensions.

--- Workaround--Use ca-profile-edit instead of ca-profile-mod

Version-Release number of selected component (if applicable):

pki-ca-10.5.1-13.1.el7_5.noarch

How reproducible:

always

Steps to Reproduce:
1. Use the profile_1.xml and try to perform ca-profile-mod operation.
2.
3.

Actual results:

Failures in ca-profile-mod when more than one userExtensionDefaultImpl:noConstraintImpl exist in a profile

Expected results:

Should work like the way mod works with other regular profiles.

Additional info: