internet/community.crypto
3
0
Fork 0
mirror of https://github.com/ansible-collections/community.crypto.git synced 2026-05-06 21:33:00 +00:00
Code Issues Packages Projects Releases Wiki Activity

Extension parsing: add new fallback code which uses the new cryptography API (#331)

Browse Source 
* Add new code as fallback which re-serializes de-serialized extensions using the new cryptography API.

* Forgot Base64 encoding.

* Add extension by OID tests.

* There's one value which is different with the new code.

* Differences in CI.

* Working around older Jinjas.

* Value depends on which SAN was included.

* Force complete CI run now since cryptography 36.0.0 is out.

ci_complete
This commit is contained in:
Felix Fontein
2021-11-22 07:42:49 +01:00
committed by GitHub
parent 73bc0f5de7
commit 3f40795a98
4 changed files with 172 additions and 72 deletions
Download Patch File Download Diff File Expand all files Collapse all files

2
changelogs/fragments/331-cryptography-extensions.yml Normal file
View File

@@ -0,0 +1,2 @@
bugfixes:
- "get_certificate, openssl_csr_info, x509_certificate_info - add fallback code for extension parsing that works with cryptography 36.0.0 and newer. This code re-serializes de-serialized extensions and thus can return slightly different values if the extension in the original CSR resp. certificate was not canonicalized correctly. This code is currently used as a fallback if the existing code stops working, but we will switch it to be the main code in a future release (https://github.com/ansible-collections/community.crypto/pull/331)."