openssl_csr: fix bad tests, avoid accepting invalid crl_distribution_points records (#560)

* Improve error handling.

* Remove invalid tests.

* Add changelog fragment.

* Fix tests.

* Improve exception catching.

Co-authored-by: Kristian Heljas <11139388+kristianheljas@users.noreply.github.com>

* Prevent empty full_name.

* Fix condition. Make sure errors are caught.

* Add more checks.

Co-authored-by: Kristian Heljas <11139388+kristianheljas@users.noreply.github.com>
This commit is contained in:
Felix Fontein
2023-01-02 15:52:59 +01:00
committed by GitHub
parent 095434a4c1
commit ddfb18b609
5 changed files with 18 additions and 11 deletions

View File

@@ -0,0 +1,2 @@
bugfixes:
- "openssl_csr, openssl_csr_pipe - prevent invalid values for ``crl_distribution_points`` that do not have one of ``full_name``, ``relative_name``, and ``crl_issuer`` (https://github.com/ansible-collections/community.crypto/pull/560)."