Replace vendored certificates with self-created certificates of similar structure (#862)

* Create script to reproduce certs.

* Recreate the certificates and update the tests.

* Anonymize certificates.

* Make mostly reproducable by storing the private keys.

I've tried to hide the private keys so that 'security checkers' won't find them
and won't complain. Let's see whether that works...
This commit is contained in:
Felix Fontein
2025-04-24 22:31:01 +02:00
committed by GitHub
parent dbff2a69e2
commit 04967efe26
29 changed files with 1342 additions and 4246 deletions

View File

@@ -5,6 +5,8 @@
.azure-pipelines/scripts/publish-codecov.py future-import-boilerplate
.azure-pipelines/scripts/publish-codecov.py metaclass-boilerplate
docs/docsite/rst/guide_selfsigned.rst rstcheck
noxfile.py compile-2.6!skip # Uses Python 3.6+ syntax
noxfile.py compile-2.7!skip # Uses Python 3.6+ syntax
noxfile.py future-import-boilerplate
noxfile.py metaclass-boilerplate
plugins/modules/acme_account_info.py validate-modules:return-syntax-error
@@ -29,5 +31,11 @@ plugins/modules/x509_crl.py validate-modules:invalid-documentation
plugins/modules/x509_crl.py validate-modules:return-syntax-error
plugins/modules/x509_crl_info.py validate-modules:invalid-documentation
plugins/modules/x509_crl_info.py validate-modules:return-syntax-error
tests/create-certificates.py compile-2.6!skip # Uses Python 3.6+ syntax
tests/create-certificates.py compile-2.7!skip # Uses Python 3.6+ syntax
tests/create-certificates.py compile-3.5!skip # Uses Python 3.6+ syntax
tests/create-certificates.py future-import-boilerplate
tests/create-certificates.py metaclass-boilerplate
tests/create-certificates.py pylint:bad-whitespace
tests/ee/roles/smoke/library/smoke_ipaddress.py shebang
tests/ee/roles/smoke/library/smoke_pyyaml.py shebang

View File

@@ -4,6 +4,8 @@
.azure-pipelines/scripts/publish-codecov.py compile-3.5!skip # Uses Python 3.6+ syntax
.azure-pipelines/scripts/publish-codecov.py future-import-boilerplate
.azure-pipelines/scripts/publish-codecov.py metaclass-boilerplate
noxfile.py compile-2.6!skip # Uses Python 3.6+ syntax
noxfile.py compile-2.7!skip # Uses Python 3.6+ syntax
noxfile.py future-import-boilerplate
noxfile.py metaclass-boilerplate
plugins/modules/acme_account_info.py validate-modules:return-syntax-error
@@ -28,5 +30,10 @@ plugins/modules/x509_crl.py validate-modules:invalid-documentation
plugins/modules/x509_crl.py validate-modules:return-syntax-error
plugins/modules/x509_crl_info.py validate-modules:invalid-documentation
plugins/modules/x509_crl_info.py validate-modules:return-syntax-error
tests/create-certificates.py compile-2.6!skip # Uses Python 3.6+ syntax
tests/create-certificates.py compile-2.7!skip # Uses Python 3.6+ syntax
tests/create-certificates.py compile-3.5!skip # Uses Python 3.6+ syntax
tests/create-certificates.py future-import-boilerplate
tests/create-certificates.py metaclass-boilerplate
tests/ee/roles/smoke/library/smoke_ipaddress.py shebang
tests/ee/roles/smoke/library/smoke_pyyaml.py shebang

View File

@@ -5,6 +5,8 @@
.azure-pipelines/scripts/publish-codecov.py future-import-boilerplate
.azure-pipelines/scripts/publish-codecov.py metaclass-boilerplate
docs/docsite/rst/guide_selfsigned.rst rstcheck
noxfile.py compile-2.6!skip # Uses Python 3.6+ syntax
noxfile.py compile-2.7!skip # Uses Python 3.6+ syntax
noxfile.py future-import-boilerplate
noxfile.py metaclass-boilerplate
plugins/modules/acme_certificate.py validate-modules:invalid-documentation
@@ -25,5 +27,11 @@ plugins/modules/x509_crl.py validate-modules:invalid-documentation
plugins/modules/x509_crl.py validate-modules:return-syntax-error
plugins/modules/x509_crl_info.py validate-modules:invalid-documentation
plugins/modules/x509_crl_info.py validate-modules:return-syntax-error
tests/create-certificates.py compile-2.6!skip # Uses Python 3.6+ syntax
tests/create-certificates.py compile-2.7!skip # Uses Python 3.6+ syntax
tests/create-certificates.py compile-3.5!skip # Uses Python 3.6+ syntax
tests/create-certificates.py future-import-boilerplate
tests/create-certificates.py metaclass-boilerplate
tests/create-certificates.py pylint:bad-whitespace
tests/ee/roles/smoke/library/smoke_ipaddress.py shebang
tests/ee/roles/smoke/library/smoke_pyyaml.py shebang